Delete Your Data

Last updated: September 8, 2026

Practice recording in arc requires signing in, apart from a one-time promotional trial. While you are signed in, swing clips, session records, and analysis evidence synchronize automatically to cloud storage, and there is no switch to turn that off. Removing something from a device, deleting a session, deleting your arc account, and canceling an Apple subscription have four different effects. This page explains each one.

Delete Your arc Account

This is the route that removes your cloud data:

1. Open Account in the arc app
2. Open Account safety
3. Choose Delete account
4. Read the confirmation and the subscription warning, then confirm

Account deletion runs a single server-side operation on your own account. It deletes your swing video from Cloudflare R2 and from our Supabase Storage buckets — swing clips, thumbnails, traces, diagnostic uploads, avatar, session media, session logs, and coach voice notes. It deletes your practice sessions and the swings, evidence versions, media records, preview tokens, and pairings that hang off them. It deletes coach collaborations where you are the player or the coach, with their annotations, assignments, replies, and voice notes. It deletes your entitlement, App Store entitlement, support-override, coach-subscription, and founder-redemption rows. It destroys your raw and diagnostic telemetry payloads outright rather than merely detaching them from your profile. It deletes your session-log metadata, and finally your arc profile and your sign-in record. On the device, it removes that device's arc practice data and clears arc's identity items and any stored Claude key from the Keychain.

Read the app's result. If it reports an error, do not assume deletion completed.

If you cannot open the app, email [email protected] from the account address with the subject line "Data Deletion Request". Do not send a password.

Delete an Individual Session

1. Open the Replay session library
2. Open the session's three-dot menu
3. Choose Delete and confirm the Delete Session dialog

This deletes the session's files from the device, removes it from your practice history in the app, and records the deletion in the app's local sync ledger.

Know the limit. Session deletion is a local operation. The app has no server-side session-delete route, so the cloud copies of that session's records and clips are not removed by it. Use account deletion, or email us, if you need the cloud copies removed. Session deletion does not delete your arc account and does not cancel a subscription.

Remove the App From Your iPhone

Removing the app from the iPhone removes its on-device storage. It does not delete your arc account, does not remove anything already synchronized to our cloud storage, and does not remove copies you exported to Photos, shared with another person, or sent to another service. Use each destination's own controls for those copies. Do not treat local cleanup as erasure of all arc-related records.

Delete Website Beta Application Data

Waitlist, coach, and partner applications submitted on this website are stored separately from the app, in Cloudflare Workers KV, keyed by the email address you submitted. Each record holds that email address, the submission time, any application details you entered, marketing attribution (referring page, landing URL, campaign parameters, ad-click identifiers, and your first and most recent visit), and request metadata (browser user agent, language, timezone, screen size, country, a Cloudflare ray identifier, and a hash of your IP address, stored in place of the address itself).

The site also records visits on their own. Opening one of our campaign or QR landing pages stores a persistent visitor identifier in your browser's local storage under arc_marketing_anon_id_v1, plus an attribution snapshot under arc_marketing_attribution_v2, and sends a page-view record carrying the same attribution and request metadata even if you submit nothing. Clearing this site's data in your browser removes the stored identifier and snapshot; a later visit creates new ones.

Waitlist entries have no automatic expiry and are removed on request. Page-interaction event records expire on their own after 180 days.

Turn Off Optional External AI Access

If you added your own Claude API key to use arc's optional external AI route, you can remove it from the app at any time:

1. Open the arc app
2. Go to Account
3. Open the Claude settings
4. Tap Remove stored Claude key

Removing the stored key stops new requests from arc being sent through that provider route. Account deletion also clears the key from your device Keychain. Neither deletes requests already sent to Anthropic; those are processed under that provider's own terms and retention policies, and you may need to use the provider's own controls.

arc does not run a model-improvement or research-contribution program, so there is no separately contributed training material to withdraw.

What Is Kept, and For How Long

arc does not delete your practice records or swing video on a schedule. There is no automatic expiry on saved clips, sessions, or per-swing evidence: cloud copies are kept until you delete your account or ask us to remove them. Three narrower categories do expire on their own — pre-sign-in activation telemetry after 90 days, this website's page-interaction event records after 180 days, and a coach voice note that is never attached to a message or reply within 24 hours of upload.

Limited Records That Survive Account Deletion

Five things survive account deletion:

• A permanent enforcement record, so that an upload already in flight cannot recreate deleted content. It holds an opaque profile identifier and cleanup scheduling fields.
• A per-object cleanup list for the deleted account, covering storage bucket and object paths, media identifiers, and media kind. Those paths embed the deleted account's identifier. A repeating cleanup job works from it, and no scheduled job removes it on a time-based basis.
• A permanent billing-identifier fingerprint, kept against the deleted profile's identifier: a hash of the Apple App Store original transaction identifier and of any Stripe customer or subscription identifier. It exists so a deleted account's purchase cannot be re-attached to a new account. The fingerprint is a plain SHA-256 of the identifier with no secret added, so anyone who already holds the same billing identifier can recompute it and match it back to the deleted profile's identifier. No scheduled job removes these rows.
• Billing audit rows, reduced to their provider and event columns with a redaction marker. The signed provider payloads are destroyed.
• Crash and performance diagnostics, which arrive with no account identifier attached, so nothing links them to your account and account deletion cannot reach them. They contain the device model, OS and app version, the build's source revision, and Apple's MetricKit payload, and no device or installation identifier.

Separately, the durable installation identifier arc's configuration request uses is stored in your device Keychain and is not removed by account deletion. It is not an unrelated anonymous identifier: while you are signed in, the same identifier is attached to arc's in-app usage analytics, on rows that also carry your arc profile identifier. Account deletion destroys those rows, which removes that link on our side, but the identifier itself stays on the device.

Our database and object storage are operated by Supabase and Cloudflare. We do not control those providers' internal backup rotation, so a copy may persist in provider backups after a deletion completes on the live systems.

Privacy Rights Requests

If you are exercising rights under laws such as the CCPA/CPRA or GDPR, you can use the same email channel above to request access, correction, deletion, or withdrawal of consent. We may ask for enough information to verify the request before acting on it.

Questions?

Contact us at [email protected] for any questions about data deletion. The full picture of what we hold is on our Privacy & Model Improvement page.