What the app stores
Practice sessions, Garden progress, preferences, favorites, reminder schedules, saved journal entries, and unfinished journal text drafts in the 1.0.2 candidate are stored on your device.
Journal voice recordings are app data. On-device transcription is optional; Arrive Within does not send recordings to a custom AI service or browser speech service.
Where it stays
The 1.0.2 candidate stores app data on this device. It has no account, backend, or cloud sync. Version 1.0.1 remains the current published release.
You can choose a complete archive in Files and restore it locally. The app reads that selected file without uploading it. Data leaves the app only when you deliberately create an export and share it through Apple's system share sheet. Unfinished drafts are not included until saved as entries. Copies you share are then controlled by the destination you choose.
What we do not do
No third-party analytics, advertising SDK, tracking, ATT prompt, social graph, newsletter, data broker, or cross-app profiling is part of 1.0.1.
The renderer has no network authority. Your journal is not analyzed for recommendations, scoring, or advertising.
Support
Settings links to the public Support and Privacy pages. Neither version 1.0.1 nor the 1.0.2 candidate prepares or transmits an in-app feedback report.
No practice or journal content, recording, transcript, screenshot, clipboard content, renderer state, log, credential, analytics, or identifier is attached to those links.
Permissions
Microphone access is requested only when you choose to record a voice reflection. Speech-recognition access is requested only when you choose on-device transcription. Notification permission is requested only when you create reminders.
Permission denial keeps the rest of the app usable and preserves any text you already entered.
Export, restore, reset, and deletion
You can create a readable export, restore a complete archive selected from Files, and explicitly reset or delete local data. Restore replaces saved Garden, practice, journal, voice, and favorite data, and removes unfinished drafts. Language, timer preferences, reminders, and permissions stay on this device. App-owned export archives are protected, excluded from backup, limited to one, removed after sharing closes, and purged during reset or delete-all.
Before sharing an export, review it for content you consider private. The app cannot remove copies that you deliberately share elsewhere.
Questions and policy updates
The canonical support route is /support.
This policy is kept aligned with the exact app binary, PrivacyInfo.xcprivacy, App Privacy answers, permission strings, and public support channel.
Website request counts
This public website counts eligible public HTML document requests at its Cloudflare edge, including cached documents, only after the static asset response is HTTP 200 with HTML content. Eligibility is limited to known public document routes. It uses no browser tracker, advertising identifier, cookie banner, or cross-site identity.
The server sends the public path, referring origin, country from Cloudflare request metadata, and transient IP/User-Agent data to estimate aggregate sessions. The ingestion service discards the raw IP and User-Agent after processing; retained website data follows a 13-month policy, with encrypted operational backup copies expiring within 30 days after live removal. This is scoped to this website and separate from the Arrive Within app, which remains local-first and has no analytics.
Use either control below at any time. The preference cookie is host-only, Secure, HttpOnly, and used only to honor this choice. DNT and Global Privacy Control are always honored.