Privacy Policy

Only a parent or legal guardian creates an ArcFolio account. The parent decides what information about their child is entered, whether any of it is shared, and when it is removed.

• Parent account data: email address, sign-in credentials handled by our authentication provider, and account creation date.
• Child profile data entered by the parent: an alias or display name, optional age, optional grade level, an emoji avatar, and an optional tagline. We ask parents to use an alias rather than a full legal name.
• Achievements: title, description, category, date, an optional instructor or coach note, who confirmed it, and whether the parent added it to the shareable profile.
• Co-parent access: the email address of any second parent or guardian invited to the same family, and whether that invite is pending or active.

Profiles are private by default. A parent may generate a share link, which is a random, unguessable URL that expires after 7, 30 or 90 days as chosen by the parent. Only achievements the parent has explicitly added to the profile appear on that link. The parent can renew the link, rotate it (which immediately invalidates the previous link), or revoke access at any time. Anyone holding an active link can view that curated profile without signing in, so links should be shared only with people you trust.

If a parent chooses to connect a LightArc account, ArcFolio imports items that LightArc has marked as portfolio-worthy for that parent's family. Imported items arrive as pending suggestions. Nothing appears on a profile until the parent reviews and approves it, and the parent may dismiss any item. This import only happens with the parent's action and consent.

We use your information to operate the service: authenticating you, storing and displaying your family's profiles and achievements, serving share links you enable, and sending transactional email such as sign-in, password reset and account notices.

We do not sell personal information, and we do not use your data or your child's data for targeted advertising.

We rely on hosting, database, authentication and email delivery providers to run ArcFolio. They process data on our behalf in order to provide those functions.

We retain account, profile and achievement data until you delete it or delete your account, or where we still need it for legitimate operational purposes such as security, fraud prevention, backups and legal obligations. Deleting an achievement removes it from the app; residual copies may persist briefly in routine backups before aging out.

• Edit or delete any child profile or achievement from within the app at any time.
• Turn sharing off instantly by revoking a share link.
• Remove co-parent access at any time from Settings.
• Request a copy of your family's data, correction of inaccurate data, or deletion of your account by writing to the address on our contact page. Depending on where you live, you may have additional rights under applicable privacy law.

Access to family data is restricted to the account owner and any co-parent the owner has invited, enforced at the database level. Share links are random and time-limited. No online service can promise perfect security, so please use a strong, unique password.

If we make material changes we will update the date at the top of this page and, where appropriate, notify account holders by email.

Privacy questions and data requests can be sent to the support and privacy address listed on our contact page.