Privacy notice

Who is responsible?

The controller for this website is:

Using this website

Delivering a website involves processing technical connection information, including IP addresses, requested pages and browser information. This is used to deliver the requested content, maintain security and investigate technical problems. The legal basis is our legitimate interest in a functioning and secure website under Article 6(1)(f) GDPR.

This website is hosted by Cloudflare. Cloudflare processes technical connection information to deliver and protect the website. Details of its processing and international transfers are available in its privacy policy.

Contact requests

When you contact us, we use the information you provide to respond. Depending on the request, processing is necessary for pre-contractual or contractual communication under Article 6(1)(b) GDPR, or based on our legitimate interest in answering other enquiries under Article 6(1)(f). We retain correspondence only as long as necessary to handle the matter and meet applicable legal obligations.

Sharing feedback

Our feedback form is currently being prepared and does not accept submissions yet. Once enabled, it will use Brevo to forward your message to the Arrive team. Your email address is required so that we can follow up about your feedback. Feedback does not create a newsletter subscription. Please leave sensitive personal details out of your message.

The form will use Cloudflare Turnstile to help prevent automated spam. We use feedback to understand requests and improve Arrive, and keep correspondence only as long as needed for that purpose. Provider arrangements and retention will be confirmed here before the form opens.

Launch updates

The launch list uses Brevo to send a confirmation email and, after you confirm, occasional Arrive updates. You provide your email address and consent; a confirmation link verifies the subscription. We do not send your meditation prompts to Brevo as part of a newsletter signup.

Newsletter processing is based on consent under Article 6(1)(a) GDPR. You can withdraw consent using an unsubscribe link. Withdrawal does not affect the lawfulness of earlier processing. We keep your subscription information while you are subscribed; limited records may be retained where needed to document consent or respect an unsubscribe request.

Brevo. (n.d.). Privacy policy.

Cookies and optional measurement

When you choose a website language, we store it in the arrive_locale cookie for up to one year so we can use your choice on later visits.

Your cookie choice is stored under arrive_consent_v3 in the browser; the consent cookie is configured for up to one year. This allows the website to remember which optional services you permit. Necessary storage supporting your requested consent settings does not require the same opt-in as optional tracking.

Google Analytics 4 measures website usage after analytics consent. Meta Pixel measures visits and signup requests for advertising after marketing consent. These services may process page URLs, device and browser information, IP addresses and cookie identifiers. We do not include your email address or meditation prompts in our tracking event payloads. Reddit Pixel is not enabled. Optional storage and access are based on consent under § 25(1) TDDDG; associated personal-data processing is based on Article 6(1)(a) GDPR. Campaign measurement can involve third-party identifiers and transfers outside the EEA.

Cloudflare Turnstile protects newsletter submissions against automated abuse. It processes technical browser and connection signals to assess requests. See the Turnstile privacy addendum. More information about optional measurement is available in Google’s privacy policy and Meta’s privacy policy. You can change or withdraw your optional consent at any time below.

Arrive app privacy

This website notice is not yet the complete privacy notice for the released iPhone app. Personal meditation generation involves processing the words you enter. These may include sensitive information about your circumstances. The final app notice will specify the generation and infrastructure providers, storage, retention, account handling, purchases and deletion options before release.

We do not claim that every part of meditation generation happens on your device or that inputs are never stored. Those statements must reflect the final implementation.

Your rights

Where applicable under the GDPR, you can request access, correction, erasure, restriction and portability of your personal data. You can withdraw consent and object to processing based on legitimate interests on grounds relating to your particular situation. You can object to direct marketing at any time.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly where you live, work or consider an infringement to have occurred. Contact the controller above to exercise your rights.