ARRVD Privacy Policy

Last updated: October 5, 2026

1. About this policy

This Privacy Policy applies to ARRVD, the family arrival app for iOS, and the services that support it (together, “ARRVD”). ARRVD is provided by futodama (“we”, “us”). The futodama privacy page covers this website in general; this page is the policy for ARRVD.

ARRVD is designed to confirm that a family member arrived at a place your family has set up. It is not a live-location or tracking service: it does not show anyone’s position on a map or keep a history of where they went. It does, however, use location information to detect arrivals, and this policy describes exactly how.

Questions: futodama0610@gmail.com

2. Information ARRVD processes

Account information

You sign in with Sign in with Apple, through Firebase Authentication. We receive an identifier for your Apple account, and Firebase assigns your ARRVD account an internal user ID. ARRVD does not ask Apple for your name or email address.

Family and membership information

• The family’s name, chosen by the person who creates the family (the Organizer).
• Each person’s role in the family (Organizer or Member), membership status, the date they joined, and their internal user ID.
• Which family your account belongs to.

Display names

A Member can set the name the family sees for them, and an Organizer can set or change a Member’s name. If no name is set, ARRVD shows a default label such as “Member 2”. Display names are only used to show who is who inside the family.

Invitations

When an Organizer invites someone, we create an invitation record containing the family’s name, the invited role, who created it, when it expires, its status and — once accepted — who accepted it. The invitation link contains a secret code; we store only a one-way (hashed) version of that code, never the code itself. If the Organizer enters a name for the person they invite, it is stored with the invitation and becomes that Member’s initial display name when they join (they or an Organizer can change it later); it is then removed from the invitation. To prevent misuse, we keep a short-lived count of failed invitation attempts per account.

Place information

For each place an Organizer adds, ARRVD stores:

• its name and address, and its latitude and longitude;
• the arrival area size (radius);
• the expected arrival time and days, the related alert settings (for example, whether to be told when arrival isn’t confirmed, the waiting time before that, and whether to be told about departures) and the place’s time zone;
• which Members the place checks arrival for; and
• who created it, and when it was created and last changed.

Location-related information

See section 3, which explains how location is used.

Arrival and activity information

When a Member’s device confirms an arrival (or a departure, if that place has departure notices turned on), ARRVD records an event containing the Member’s internal user ID, the place and its name, whether it was an arrival or a departure, and when it happened. When a Member’s arrival hasn’t been confirmed by the expected time, our server records a “not yet confirmed” event for that Member and place. These events do not contain map coordinates.

Device and notification information

• To send notifications to an Organizer’s device, we store a device identifier created by the app, a push notification token (Firebase Cloud Messaging), the platform, whether notifications are enabled, the app version, the device’s language setting and related timestamps. Firebase may use an installation identifier to deliver these messages. We also record which notifications have already been delivered to which device, so they aren’t sent twice.
• To check that requests come from a genuine copy of ARRVD, we use Firebase App Check with Apple’s App Attest service.
• On your own device, ARRVD keeps the places it is watching, recent arrival status, a local activity log, your role and the app-generated device identifier.

Purchase information (ARRVD Plus)

See section 7.

Support communications

If you email us, we receive your email address and whatever you include in your message.

Service logs

Our servers keep limited technical logs — such as internal identifiers and the outcome of automated checks — to run the service, keep it secure and fix problems. Push tokens are not written to these logs.

What ARRVD does not do

• No advertising, and no advertising or analytics SDKs.
• No selling of personal information.
• No tracking of you across other companies’ apps or websites.

3. Location

• ARRVD uses iOS Location Services — mainly region monitoring (often called geofencing) — so that a Member’s iPhone can notice when it arrives at, or leaves, a place assigned to that Member. iOS checks this on the device, including while the app isn’t open, if the Member has allowed it. Background checks generally need location access set to “Always”.
• A Member’s device only watches the places that Member is assigned to. Organizers’ devices don’t watch places.
• What ARRVD sends from a Member’s device is the arrival or departure event described in section 2 — which place, which kind of event and when. It does not send the device’s coordinates or a history of its movements, and it does not show the Member’s position to anyone on a live map.
• Places themselves do include an address and coordinates (see section 2). These are stored on our servers. The family’s Organizers can see and manage every place; a Member’s device receives only the places assigned to that Member.
• When an Organizer chooses “Use Current Location” while adding a place, the device determines its location once to fill in that place.
• Place search, map previews and address lookups use Apple Maps services. The search text or the place’s coordinates are sent to Apple to return results.
• If Location Services or ARRVD’s location permission is turned off or limited, arrivals may be detected late or not at all.

4. What is shared within your family

• Everyone in the family can see the family’s name and its members, with their display names (or default labels) and roles.
• Organizers can see and manage all of the family’s places, including names, addresses and coordinates. Each Member can access only the places assigned to them, not the family’s other places.
• Organizers can see the family’s arrival, departure and “not yet confirmed” activity. Each Member can access only the activity about themselves, not other Members’ activity.
• Organizers receive notifications about a Member’s arrivals, departures (when turned on for that place) and arrivals that haven’t been confirmed by the expected time. These notifications include the Member’s display name and the place’s name.
• Not shared with other family members: a Member’s live location or movement history (ARRVD doesn’t create either), push tokens or other device information.

5. How we use information

• To create and sign in to your account.
• To set up and run your family, including invitations and roles.
• To create and manage places and decide which Members each place checks.
• To detect arrivals and departures, and to determine when an arrival hasn’t been confirmed by the expected time.
• To send arrival, departure and “not yet confirmed” notifications.
• To provide ARRVD Plus and keep track of which plan applies to your family.
• To operate, secure and troubleshoot ARRVD, and to prevent misuse.
• To answer support requests.

6. Service providers

ARRVD relies on a small number of providers, which process information on our behalf or under their own terms:

• Apple — Sign in with Apple, the App Store and in-app purchases, Apple Push Notification service, iOS Location Services, Apple Maps services (place search, map previews and address lookups) and App Attest.
• Google Firebase (running on Google Cloud) — Firebase Authentication, Cloud Firestore (our database), Cloud Functions (server-side checks and notifications), Firebase Cloud Messaging, Firebase App Check and Firebase Installations.

We may also disclose information if required by law, or where reasonably necessary to protect the safety, rights or security of our users, the public or ARRVD.

7. ARRVD Plus and purchases

ARRVD is available as a free plan and as ARRVD Plus, a paid plan purchased through the App Store. Payments are handled by Apple using your Apple Account; we never receive or store your card number or other payment details. To provide ARRVD Plus and to restore purchases, the app uses the information Apple makes available about your purchase — for example, which product was purchased, whether it is currently active, and transaction identifiers or status. You manage or cancel subscriptions in your Apple Account settings.

8. How long we keep information, and deletion

• We keep account, family, place and activity information while your account and family are in use, because ARRVD needs it to work.
• Invitation records and failed-attempt counts are kept for the purposes described above.
• Information stored on your device is removed when you delete the app. Signing out on a Member’s device also stops that device from watching the family’s places.
• Deleting the app does not delete your account or the information stored on our servers.

Deleting your account

You can delete your ARRVD account at any time in the app, and confirm it with Sign in with Apple:

• Organizers — Settings › Account › Delete Account.
• Members — the Account section at the bottom of the home screen › Delete Account.

When you delete your account:

• Your ARRVD account and sign-in are deleted, and ARRVD’s Sign in with Apple authorization is revoked.
• The information ARRVD keeps about you is deleted: your family membership and display name, your device and notification registration, your arrival, departure and “not yet confirmed” activity, your place assignments, and invitations you created or accepted.
• If you’re an Organizer and another Organizer remains, the family and its shared information stay with them.
• If you’re the family’s last Organizer, the family is deleted too, including its places, activity and invitations. Other members’ ARRVD accounts are not deleted; they are removed from the family.
• On the device you delete from, places being watched, the local activity log and ARRVD’s notifications are removed.
• Limited technical logs may remain for a short period until they are deleted automatically.
• Deleting your account does not cancel an ARRVD Plus subscription. Manage or cancel subscriptions in your Apple Account settings.

If you can’t use the app to delete your account, email futodama0610@gmail.com and we’ll help.

9. Your choices

• Location access — change it at any time in iOS Settings. Without it, arrivals can’t be detected.
• Notifications — turn them on or off in iOS Settings.
• Display name — change your own name in the app; Organizers can change Members’ names.
• Sign in with Apple — you can manage which apps use your Apple Account in your Apple Account settings.
• ARRVD Plus — manage or cancel your subscription in your Apple Account settings.
• Delete your account — in the app, as described in section 8.
• Questions or requests — email futodama0610@gmail.com.

10. Security

We take reasonable measures to protect information, including encrypted connections, database rules that limit each family’s information to that family, app integrity checks and storing invitation codes only in hashed form. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

11. Families and members

ARRVD is meant to be used within a family. An Organizer invites the people they want to include. If you add someone to your family, you are responsible for having the appropriate authority or consent to do so — for example, as a parent or guardian — and for letting them know how ARRVD works. If you believe someone’s information has been added without appropriate permission, please contact us.

12. International processing

Apple and Google may process and store information in countries other than the one you live in, including the United States. Where they do, information is handled under their own safeguards and terms.

13. Changes to this policy

We may update this policy as ARRVD changes. When we do, we’ll update the date at the top of this page, and we’ll let you know about significant changes in the app or on this page.

14. Contact

futodama — futodama0610@gmail.com