Information you provide to us

• Contact information. Name, email address, mailing address, and phone number.
• Account credentials. Username and password, if you create an Arculus account with an email address. If you use Sign in with Google or Sign in with Apple instead, see “Signing in with Google or Apple” below.
• Payment information. Processed by our payment processor, Apple’s in-app purchase system, or Kickstarter, depending on how you pay. Arculus does not store full payment card numbers. See Section 10, “Subscriptions and Payments,” for details.
• Order and shipping details. Reward tier, shipping address, and order history.
• Communications. Messages you send through email, support channels, or social media, including the content of those messages.
• Survey and feedback responses. Anything you share when we ask for product feedback.
• Community report content. Anything you submit to the Theft Near Me map or other community reporting features. See Section 11, “Community Theft Reports.”

Signing in with Google or Apple

You can create an Arculus account using Sign in with Google or Sign in with Apple. When you do, we receive your name, email address, and (for Google) profile picture from the provider. We never receive your password. Apple may provide a private relay email address in place of your real address if you choose that option.

Device, camera, and sensor data (Arculus Boxx)

Arculus Boxx is a physical security device with a camera and motion sensors. Setting up and using Boxx may involve us collecting:

• Motion detection events and their timestamps
• Device diagnostics: firmware version, power status, Wi-Fi signal strength, and error logs

Phone camera data (AR preview)

The Arculus app can also use your phone’s own camera — separate from the Boxx device camera above — to display a virtual preview of the Arculus Boxx on your porch. Camera frames are processed on your device to render the preview and are not transmitted to or stored by Arculus unless you choose to save or share an image. You can revoke camera access at any time in your phone settings.

Location information

With your permission, the app uses your device’s location to show porch piracy reports near you and to associate reports you submit with a ZIP code. Community reports are stored and displayed at ZIP code level only; your street address is never shown to other users. You can disable location access in your phone settings, though the map and reporting features will then be limited.

Email account data

If you choose to connect an email account, the app reads incoming messages solely to detect shipping and delivery notifications. We extract the carrier, tracking number, retailer, and expected delivery date. We do not store the content of unrelated emails. Parsed delivery data is retained as described in Section 4. You can disconnect your email account at any time in Settings, which stops all access.

If you connect a Gmail account: Arculus’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected automatically

• IP address, browser type, device type, and operating system
• Pages visited, time spent, and referring or exit pages
• App usage data and crash logs
• Cookies and similar technologies (see Section 8)

Information from third parties

• Kickstarter. Pledge amount, reward tier, and backer information for campaign fulfillment.
• Payment processors. Confirmation that a payment was completed.
• Google and Apple. If you sign in with one of these providers, they confirm your identity to us as described above.
• Marketing and analytics partners. Aggregated or de-identified insights about how people find and use our Services.
• Public sources. Where permitted by law.

• Provide, operate, and maintain the Services
• Process orders, pledges, and shipments
• Detect deliveries — including by reading shipping notifications in a connected email account, if you choose to connect one — and send you real-time alerts
• Render the augmented-reality preview of your Arculus Boxx using your phone’s camera
• Show porch piracy reports near you and let you contribute to the community map
• Facilitate account creation and sign-in, including through Google or Apple
• Process subscription payments and manage renewals
• Send push notifications about deliveries, motion detection, tamper alerts, and account activity
• Communicate with you about your order, account, or support requests
• Send product updates, backer updates, and marketing communications, with an opt-out available at any time
• Improve the Services and develop new features
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations

Where the GDPR or a similar law requires a legal basis for processing, we rely on one or more of the following:

• Contract. Processing needed to provide the Services you requested.
• Consent. For optional communications, certain cookies, and permission-based device features such as camera, location, Bluetooth, and email access. You can withdraw consent at any time.
• Legitimate interests. To secure, maintain, and improve the Services, balanced against your rights.
• Legal obligation. Where processing is required to comply with the law.

• Email and delivery data. Parsed shipping and delivery information (carrier, tracking number, retailer, and expected delivery date) extracted from a connected email account is retained for 90 days after the delivery date, after which it is deleted.
• Community reports. Retained for as long as the report remains posted, or until you delete it or we remove it for violating our guidelines (see Section 11).
• Account information. Retained while your account is active and for a reasonable period after, to resolve disputes and enforce our agreements.
• Backer and order records. Retained as required for tax, accounting, and warranty purposes.

We delete or de-identify personal information once it is no longer needed for these purposes, unless a longer retention period is required by law.

We do not sell your personal information. We may share it with:

• Service providers, who help us operate the Services, including hosting, cloud storage, payment processing, email delivery, analytics, and customer support.
• Identity providers, Google and Apple, who confirm your identity if you sign in through one of them.
• Payment processors. Apple processes in-app purchases; [Stripe / Shopify] processes payments made on our website.
• Kickstarter, to fulfill your pledge and reward.
• Shipping and logistics partners, to deliver your order.
• Other Arculus users, if you submit a community theft report — visible at ZIP-code level only.
• Professional advisors, such as legal, accounting, and insurance firms.
• Law enforcement or regulators, where required by law or necessary to protect rights, property, or safety.
• A successor entity, in the event of a merger, acquisition, financing, or sale of assets.

We use administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and regular security review of our systems. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Arculus is based in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States and potentially other countries, which may have data protection laws different from those of your home country. Where required, we use appropriate safeguards for these transfers, such as standard contractual clauses.

We and our service providers use cookies and similar technologies to operate the Services, remember your preferences, and measure performance. You can control cookies through your browser settings; disabling them may affect how the Services function. We do not currently respond to browser “Do Not Track” signals. [Insert detail on cookie categories and any consent banner used, if applicable.]

The Arculus app uses third-party software development kits (SDKs) for analytics, crash reporting, and similar purposes. [Insert the complete list of SDKs confirmed by engineering, e.g., Firebase, Sentry, Mixpanel, along with what each one collects.] This list must match the data types disclosed in Apple’s App Privacy details and Google Play’s Data Safety section exactly.

[State plainly whether any of these SDKs track you across other companies’ apps or websites for advertising purposes. If none do, say so directly, e.g., “None of the SDKs used in the Arculus app track you across third-party apps or websites for advertising purposes.”]

The Arculus app is free to download. Optional Protect and Complete subscriptions can be purchased in the app through Apple’s in-app purchase system or on arculusboxx.com. In-app payments are processed by Apple; Arculus never receives your full card number. Website payments are processed by [Stripe / Shopify]. Subscriptions renew automatically until cancelled. In-app subscriptions are managed in your Apple ID settings; website subscriptions are managed in your Arculus account.

Porch piracy reports you submit are user-generated content and are visible to other Arculus users in your area at ZIP-code level. Do not include names, exact addresses, or other personal information in a report. We may review, edit, or remove reports that violate our guidelines.

With your permission, we send push notifications for delivery updates, motion detection, tamper alerts, and account activity. You can disable notifications in the app or in your phone settings.

All users

• Access, correct, or update your information through your account settings
• Request deletion of your account and associated data
• Disconnect a connected email account, or revoke camera, location, or notification permissions, at any time in the app or your device settings
• Opt out of marketing emails using the unsubscribe link in any email
• Contact us at any time using the details in Section 17

California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, gives you the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Correct inaccurate personal information
• Opt out of the sale or sharing of personal information (Arculus does not sell your personal information. [Confirm whether any analytics or advertising SDK causes “sharing” under the CPRA’s definition; if so, add a “Do Not Sell or Share My Personal Information” link here and in the app, which Apple also accepts as the optional User Privacy Choices URL.])
• Limit the use of sensitive personal information
• Not be discriminated against for exercising these rights

To exercise these rights, contact us using the details in Section 17. We may need to verify your identity before completing your request.

EEA, UK, and similar jurisdictions

If the GDPR or a similar law applies to you, you have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Request erasure of your information
• Restrict or object to certain processing
• Request portability of your information
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your local data protection authority

The Services are not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us at Admin@ArculusBoxx.com and we will take steps to delete it.

The Services may link to third-party websites and platforms, including Kickstarter, Google, Apple, and social media. We are not responsible for the privacy practices of those third parties. Review their privacy policies before providing any information.

We may update this Privacy Statement from time to time. We will post the updated version here with a new “Last Updated” date and, where required by law, provide additional notice.

If you have questions about this Privacy Statement or want to exercise your privacy rights, contact us at:

Arculus
PO Box 141, Seal Beach, CA 90740
Admin@ArculusBoxx.com