Privacy Policy
Effective March 27, 2026
Roci Mesh Labs ("we", "us", "our") builds privacy-first apps. This policy covers all apps published by Roci Mesh Labs, including ArcFast.
Data We Collect
None. Our apps do not collect, transmit, or store any personal information on external servers. All data you create stays on your device in local storage.
If you use iCloud Backup or local device backups, your app data may be included as part of standard iOS behavior. This is managed by Apple and your device settings, not by Roci Mesh Labs. We do not have access to your backups.
Third-Party Services
Our apps do not integrate with any third-party analytics, advertising, or tracking services. No data is shared with third parties because no data leaves your device. Apple may collect data related to your App Store purchase and device diagnostics according to Apple's Privacy Policy and your device settings. This data is collected by Apple, not by Roci Mesh Labs.
Data Storage
All app data — including fasting sessions, goals, streaks, and settings — is stored locally on your device using on-device storage (SwiftData / UserDefaults). We have no servers, no databases, and no way to access your data.
If you delete the app, all data is permanently removed from your device.
Analytics & Tracking
We do not include any analytics, crash reporting, or telemetry services in our apps. We do not track how you use the app, how often you open it, or any usage patterns. Apple may collect anonymized diagnostics if you have enabled sharing with app developers in your iOS Settings — see Apple's Privacy Policy for details.
Health & Fitness Data
ArcFast tracks fasting sessions, which Apple classifies as Health & Fitness data. This data — including fasting start/end times, session durations, streak counts, goals, and metabolic phase indicators — is stored exclusively on your device using local storage (SwiftData / UserDefaults).
We never collect, transmit, process, or have access to your health and fitness data. It exists only on your phone. There is no server-side component and no way for us or any third party to retrieve it. Standard iOS device backups may include app data — see the Data We Collect section above.
If you delete the app, all health and fitness data is permanently and irreversibly removed from your device.
Your Rights Under GDPR (European Economic Area)
If you are located in the European Economic Area (EEA), the UK, or Switzerland, the General Data Protection Regulation (GDPR) grants you specific rights regarding your personal data.
Data Controller: Roci Mesh Labs is the data controller for our apps. Contact us through our support page.
Legal Basis for Processing: We do not process any personal data. ArcFast operates entirely offline with no data collection, so there is no legal basis to disclose — no processing occurs.
Your Rights: Under GDPR, you have the right to:
- Access your personal data — Since we collect no data, there is nothing to provide.
- Rectification of inaccurate data — No data is held by us to correct.
- Erasure ("right to be forgotten") — We hold no data to erase. Deleting the app removes all local data from your device.
- Restrict processing — No processing occurs.
- Data portability — No data is held by us to export.
- Object to processing — No processing occurs to object to.
- Lodge a complaint with your local data protection authority if you believe your rights have been violated.
International Data Transfers: None. All data remains on your device. We operate no servers, use no cloud infrastructure, and transmit no data internationally or domestically.
Automated Decision-Making: We do not engage in automated decision-making or profiling. Metabolic phase indicators displayed in ArcFast are calculated locally on your device based on elapsed fasting time — no personal data is analyzed, scored, or used to make decisions about you.
Your Rights Under CCPA (California)
If you are a California resident, the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you specific rights regarding your personal information.
Categories of Personal Information Collected: None. We do not collect, sell, share, or use any personal information as defined under CCPA/CPRA.
Categories of Personal Information Sold or Shared: None. We have not sold or shared personal information of any consumer in the preceding 12 months, or ever.
Do Not Sell or Share My Personal Information: We do not sell or share your personal information. Because we collect no data, there is nothing to sell or share. This applies to all users, not just those who opt out.
Your Rights:
- Right to Know — You may request what personal information we have collected about you. The answer is: none.
- Right to Delete — You may request deletion of your personal information. We hold none. Deleting the app removes all locally stored data.
- Right to Opt-Out of Sale/Sharing — We do not sell or share personal information. No opt-out is necessary, but your right is acknowledged.
- Right to Non-Discrimination — We will not discriminate against you for exercising any CCPA/CPRA rights.
- Right to Correct — You may request correction of inaccurate personal information. We hold none.
- Right to Limit Use of Sensitive Personal Information — We do not collect or use sensitive personal information.
Contact for Privacy Requests: Submit requests through our contact form. We will respond to verifiable consumer requests within 45 days.
Children's Privacy
Our apps are rated 17+ on the App Store because they involve health-related data (fasting/nutrition tracking). Our apps are not directed at children under 17. We do not knowingly collect any information from anyone — including children — because our apps collect no data at all.
Canadian Privacy Law (PIPEDA)
Roci Mesh Labs is based in Canada. Under the Personal Information Protection and Electronic Documents Act (PIPEDA), you have rights regarding your personal information. Since we do not collect any personal information, these rights are inherently satisfied. For questions, contact us through our support page.
Changes to This Policy
If we ever change our data practices, we will update this page with a new effective date. Given our commitment to offline-only apps, we don't anticipate collecting data in the future.
Contact
Questions about this privacy policy? Reach us through our contact form.
When you use our contact form, we receive the information you submit (name, email, message) solely to respond to your inquiry. We do not store this data beyond what is needed to address your request.