This notice is presented within the ARCH mobile application. It informs you about how ARCH Innovation Corp. and ARCH Teknoloji Sanayi ve Ticaret Anonim Şirketi (together, "ARCH," "we," "us," or "our") process your personal information in connection with the ARCH mobile application and the ARCH V1 device, and asks for your explicit consent for specific processing activities that require it under applicable law.
For the complete Privacy Policy, visit archtechnology.co/privacy-policy.
1. Who We Are
ARCH is a consumer wearable technology company. Our product, ARCH V1, is a below-the-knee wearable that mechanically simulates the calf muscle pump to sustain mechanical movement in the legs during periods of inactivity. It is not a compression device and does not use electrical stimulation.
Sensors on the device take readings of pulse, tissue oxygenation and fluid balance. These readings are used to determine the device's own activation timing and to display your session data in the application; they provide no health assessment, diagnosis, alert or risk evaluation.
ARCH V1 is positioned as a consumer wellness product. It is not a medical device, is not intended to diagnose, treat, cure, or prevent any disease, and is not subject to medical device regulation. Sensor readings are not medical measurements and must not be used as a basis for any diagnostic or treatment decision.
Data controllers:
ARCH Innovation Corp., 8 The Green, STE 23254, Dover, DE 19901, United States
ARCH Teknoloji Sanayi ve Ticaret A.Ş., Reşitpaşa Mah. Katar Cad. İTÜ Teknokent Arı 6 Binası No: 2/49 İç Kapı No: 211, Sarıyer / İstanbul, Türkiye
Privacy contact: privacy@archtechnology.co
2. Our Approach
We collect as little personal information as possible. The ARCH mobile application uses Apple Sign-In or Google Sign-In for authentication; we receive only your name and email address through this process.
To meet our legal accountability obligations, we keep a record of your consent on ARCH servers: your account identifier, your email, the date and time, and the version of this notice you accepted. This consent record is stored solely as proof that consent was given. It does NOT include your sensor readings.
Sensor readings from the ARCH V1 device are processed on the device and on your paired mobile phone. They do not, as a default behavior, leave your phone.
We do not sell your personal information. We do not share your personal information with advertising networks. We do not build profiles of you for commercial targeting.
3. What We Process Through the Application
Name and email address (from Apple/Google Sign-In): for account authentication and customer support. Legal basis: performance of a contract.
Sensor readings (pulse, SpO2, bioimpedance, motion; from ARCH V1): to determine the device's activation timing and to display your session data in the application. Legal basis: your explicit consent.
Optional profile fields (e.g., biological sex, body weight; if introduced in future releases): to better calibrate the device for your body. Legal basis: your explicit consent.
Limited anonymous telemetry (aggregate usage signals, device performance): for product improvement. Legal basis: our legitimate interests.
We do not request, collect, or store medical history, prescribed medications, pregnancy information, or any medical condition.
4. Sensor Readings and the Law
The pulse, oxygen saturation, bioimpedance, and motion data captured by ARCH V1 may, under applicable law (including GDPR Article 9, UK GDPR, the Swiss Federal Act on Data Protection, and equivalent U.S. state privacy laws), be classified as a special category of personal information, regardless of how ARCH characterizes the product. We treat this data accordingly.
Because of this classification, processing of these sensor readings requires your explicit consent under most jurisdictions where you may be located. By design, this data remains on your device and on your phone. ARCH does not centralize, store, or analyze your individual sensor readings on its own servers.
5. Where Your Information Goes
Your consent record (account identifier, email, timestamp, and the version of this notice you accepted) is stored on ARCH servers as proof of consent. Your sensor readings are never part of this record.
Your name and email address remain within the Apple or Google authentication ecosystem and on your device.
Sensor readings remain on your device and on your phone.
Limited anonymous telemetry, where transmitted, is aggregated and stripped of identifiers before leaving your device.
The app's service providers are located in the United States:
Apple Inc. (Apple Sign-In)
Google LLC (Google Sign-In)
Netlify Inc. (app and consent-record infrastructure)
No payments are taken and nothing is sold through the app; no order, payment, or shipping data is processed.
To the extent personal information is transferred internationally, we rely on Standard Contractual Clauses, the EU-U.S. Data Privacy Framework where the recipient is certified, your explicit consent, or other lawful transfer mechanisms recognized by applicable law.
6. How Long We Keep Your Information
We retain personal information only for as long as necessary for the purpose for which it was collected.
Account information (name and email from Apple or Google Sign-In) is deleted when you delete your account. Sensor data remains on your device and your phone and is deleted when you remove the application or reset the device. Limited telemetry, where collected, is retained in anonymized aggregate form.
A complete retention schedule is published in our full Privacy Policy at archtechnology.co/privacy-policy.
7. Your Rights
You have rights regarding your personal information. The specific rights available to you depend on the laws of your jurisdiction.
Right of access: Request a copy of the personal information we hold about you.
Right to rectification: Request that we correct inaccurate or incomplete information.
Right to erasure: Request that we delete your personal information, subject to legal exceptions.
Right to restrict processing: Request that we limit how we use your information in certain circumstances.
Right to data portability: Request your information in a structured, machine-readable format.
Right to object: Object to processing based on our legitimate interests, including direct marketing.
Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.
Right to lodge a complaint: File a complaint with your local data protection authority. In the EU: your member state authority. In the UK: the Information Commissioner's Office. In Switzerland: the Federal Data Protection and Information Commissioner. In Türkiye: the Kişisel Verileri Koruma Kurumu.
To exercise any of these rights, contact us at privacy@archtechnology.co. We will respond within 30 days (or within 45 days for U.S. residents, where required by law). We may need to verify your identity before fulfilling your request.
8. Important Safety Information
The ARCH V1 device contains a bioimpedance sensor that passes a small electrical current through your skin to measure tissue resistance. The following safety warnings therefore apply.
When not to use the product
Individuals with any of the following conditions should not use the ARCH V1 device:
Cardiac pacemaker: The bioimpedance signal may interfere with the pacemaker's sensing logic.
Implantable cardioverter defibrillator (ICD): May trigger false positive alerts.
When to consult a doctor before use
In the following situations, the device should not be used without first consulting a doctor:
Neurostimulator: Not suitable for users of spinal cord or deep brain stimulators.
Active cancer treatment: Should not be used in areas undergoing local radiotherapy or chemotherapy.
Suspected acute DVT: Risk of clot dislodgement.
Open wounds or infection: The area in contact with the device must be free of dermatitis, rash, or open wounds.
Pregnancy: Consult a doctor before use.
Under 18: The product is intended for adult use only.
These restrictions are independent of how we process personal information and apply to all users.
9. Children
ARCH products and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from individuals under 18. If you become aware that an individual under 18 has provided us with personal information, please contact us at privacy@archtechnology.co and we will take steps to delete such information.
10. Changes
We may update this notice from time to time. Where we make material changes, you will be prompted to review and reconfirm your consent within the application.
Consent items in the app
The first two items are required to use the app; the third is optional. The moment of acceptance is stored on ARCH servers with the account identifier, email address, date and the version of this notice.