Consent & Sensitive Data Policy

This Consent & Sensitive Data Policy explains how Arclly obtains, manages, records, and respects user consent when processing:

• Personal information
• Sensitive personal information
• Voice recordings
• AI-generated insights
• MyArc content
• Legacy preferences
• Family collaboration
• Child accounts
• Future contextual and wearable integrations

This Policy should be read together with the following Arclly policies:

• Terms of Service
• Privacy Policy
• AI Transparency Notice
• Cookie Notice
• Legacy Continuity Policy

Every consent experience inside Arclly follows these principles.

Arclly is designed for authentic reflection.

Users may voluntarily choose to record information including:

• emotions
• relationships
• family experiences
• financial concerns
• health-related experiences
• grief
• trauma
• spirituality
• identity
• personal beliefs
• work experiences
• life milestones
• voice recordings
• photographs
• documents
• memories

Users are never required to disclose sensitive information.

Certain reflections may contain information considered sensitive under applicable privacy laws.

Examples include:

• health experiences
• disability
• emotional wellbeing
• trauma
• sexuality
• race or ethnicity
• religious beliefs
• political opinions
• biometric information
• voice recordings
• family circumstances

Arclly processes sensitive information only:

• when voluntarily provided by the user
• when required to provide requested features
• where otherwise permitted by applicable law

Health and mental-health-related information may require separate explicit consent where required by applicable law.

Certain experiences require separate consent before they are enabled.

Each consent request explains:

• what information will be processed
• why it is needed
• how long it will be retained
• how users can revoke permission

Artificial Intelligence is central to the Arclly experience.

AI may assist users by:

• organizing memories
• identifying recurring themes
• recognizing emotional patterns
• generating summaries
• producing Arclly Opinion
• surfacing supporting evidence
• generating MyArc chapters
• suggesting reflections

AI processing occurs only when users choose AI-enabled experiences or request AI-generated insights.

Arclly does not continuously analyze journal entries in the background without an applicable legal basis and user consent where required.

Crisis-related detection, where it occurs, happens only through processing of content the user has already opted into—not through separate monitoring of private journals.

Arclly's AI is designed to support reflection—not replace human judgment.

AI will never intentionally:

• diagnose mental health conditions
• provide medical advice
• provide legal advice
• provide financial advice
• determine objective truth
• make decisions for users

AI responses remain interpretations intended to encourage thoughtful reflection.

Users remain responsible for their own decisions.

Many people journal during difficult periods of life.

Users may write about:

• grief
• anxiety
• loneliness
• trauma
• conflict
• uncertainty
• relationship challenges
• career setbacks
• financial hardship

Arclly is designed to respond with:

• empathy
• curiosity
• emotional accuracy
• respect

Our AI should never shame, manipulate, or sensationalize emotional experiences.

Users may choose to record thoughts relating to:

• self-harm
• suicide
• hopelessness
• wanting life to end

Arclly recognizes that these reflections may represent significant emotional distress.

Where such content is detected during AI processing of a user-enabled feature, Arclly may:

• acknowledge the user's feelings with compassionate language
• encourage the user to contact someone they trust
• encourage the user to seek immediate assistance from local emergency services or an appropriate crisis resource if they believe they are in danger
• provide links to publicly available support resources where appropriate

Arclly does not:

• diagnose mental illness
• act as a therapist
• provide crisis counselling
• guarantee human review
• notify emergency contacts
• notify family members or Legacy Trustees automatically
• contact emergency services on a user's behalf
• guarantee that every expression of distress will be detected

Users should never rely on Arclly during an emergency.

Voice recordings require explicit consent.

Users may independently enable or disable:

• transcription
• narrated playback
• Voice Continuity
• AI narration
• future voice experiences

Separate consent is required before creating any persistent voice model or Voice Continuity experience.

Users may delete voice recordings where technically feasible, subject to legal retention obligations.

Users retain complete control over MyArc legacy experiences.

Separate consent is required before:

• appointing Legacy Trustees
• appointing Legacy Recipients
• enabling Legacy Delivery
• gifting MyArc to another person
• authorizing posthumous publication

Users may modify or revoke legacy instructions at any time while alive.

Legacy processing is governed by the Arclly Legacy Continuity Policy.

Family features are always optional.

Users determine:

• who may contribute
• who may review
• what content may be shared
• what remains private

Participation in family experiences never grants unrestricted access to private reflections.

Where available:

• child accounts are managed by a parent or legal guardian
• additional privacy protections apply
• children receive age-appropriate experiences
• parental permissions may be reviewed and modified at any time

Arclly provides users with the ability to review and manage consent preferences through account settings.

Depending on the feature, users may:

• review active permissions
• withdraw consent
• enable new permissions
• review legacy preferences
• manage family permissions
• manage voice permissions
• manage AI feature permissions

Withdrawal of consent applies to future processing and does not necessarily affect processing already completed lawfully.

Unless users separately opt in where such an option is provided, Arclly does not use users' private journals, reflections, MyArc content, or voice recordings to train general-purpose AI models.

Content classified as safety-critical or protected is excluded from aggregated or de-identified use as well as model training.

Any future AI training programs requiring user participation will be subject to separate consent.

Consent records are retained as necessary to:

• demonstrate compliance with applicable law
• honor user choices
• resolve disputes
• support security investigations

Retention of personal information is governed by the Privacy Policy.

Users may withdraw consent at any time where technically feasible.

Examples include:

• disabling voice processing
• disabling Voice Continuity
• disabling AI narration
• disabling family collaboration
• removing legacy instructions
• revoking future contextual integrations

Withdrawal does not invalidate lawful processing already completed.

Arclly is intended for users in multiple jurisdictions.

Where applicable, Arclly seeks to comply with relevant privacy and consent requirements, including:

• GDPR
• UK GDPR
• PIPEDA
• applicable U.S. federal and state privacy laws
• other applicable international privacy regulations

Additional rights may apply depending on the user's location.

As Arclly evolves, this Policy may be updated.

Material changes will be communicated through:

• the Arclly application
• our website
• email
• or other appropriate communication channels

Continued use of the Service after changes become effective constitutes acceptance of the revised Policy where permitted by law.

Arclly, LLC

Email: support@arclly.com

Website: www.arclly.com