Privacy Policy

ArrivalList Inc., a Tennessee corporation ("ArrivalList," "we," "us," or "our"), makes ArrivalList, a reminder app for iPhone and Android that reminds you when you arrive at a place, when you leave it, or at a time. This policy explains what information we collect, why, who receives it, how long we keep it, and the choices you have. It applies to the ArrivalList app and to arrivallistapp.com.

ArrivalList is offered only in the United States, and our servers are in the United States.

If you live in Washington or Nevada, also read our Consumer Health Data Privacy Policy.

The short version

• Your location never leaves your phone. Your phone checks whether you've arrived or left. We never receive your current location, where you've been, or when a reminder went off.
• No one else sees your location, including people in your groups. Groups share reminder requests, never locations.
• The places you save (like Home or Work) are stored with your account so they're on every phone you sign in on. Their addresses and map coordinates are encrypted on our servers.
• We don't sell your information, and we don't show ads. We don't use your information for targeted advertising or profiling, and we don't let anyone else do so.
• You can delete your account in the app at any time (Account → Delete account).

Information we collect

Account information

• How you sign in. Your email address if you sign in with an email code. If you use Sign in with Apple: the identifier Apple gives us, the email address Apple shares (which can be a private relay address), and your name, if you choose to share it.
• Your display name, which you can change.
• Your birth month and year. We ask for these before an account exists, to confirm you're at least 13. If you're under 13, sign-up stops and nothing you entered is stored on our servers.
• Account records: when your account was made, the number of reminders made on the account (for the Free plan's limit), and when you accepted our location disclosure.

Reminders and lists

• Reminders: each one's text, list, whether it's Hard or Soft, and its trigger (arriving at a place, leaving it, or a time, with any repeat). Also whether it's switched on and when it was checked off.
• Lists: name, color, and icon.

We store these with your account so they sync to your other phones and can be restored.

Saved places

For each place you save: its name, badge, and the range you set, plus its street address and map coordinates. The address and coordinates are encrypted with an extra layer of encryption (AES-256) on our servers, beyond the encryption our hosting provider already applies.

Location

• ArrivalList uses your phone's location to remind you when you arrive at or leave your saved places, including in the background, when the app is closed or not in use. That's why it asks for "Always" (iPhone) or background (Android) location access.
• This check happens only on your phone. Your phone watches only places that have a reminder switched on. When you arrive or leave, your phone shows the reminder itself.
• We never receive your current location, a history of where you've been, or whether or when a reminder went off.
• You can turn location access off at any time in your phone's Settings. Arrival and leaving reminders then stop working, but timed reminders still work.
• Typing in the address search sends what you type to Apple (Apple Maps, on iPhone) or Google (Google Places, on Android) so they can suggest addresses. We don't keep your searches.

Devices and notifications

• A random device ID, the device's platform, and its push token (the address Apple or Google uses to deliver our notifications to that phone).
• Which of your reminders each phone has registered. Your phone sends this list now and then so we can find and fix reminders that never got set up. It never says where you are or whether a reminder went off.
• Signing out of a phone removes that phone's device record and push token.

Groups

If you use Groups, we store:

• the group's name and type, and each member's display name and role in it;
• whose plan covers whom ("seats");
• invite links (stored in a scrambled form we can't read back);
• requests to join;
• chat messages, plus system lines recording joins, leaves, removals, renames, and admin changes;
• reminder requests: text, Hard or Soft, the time or place (the place's name in readable form; its address and coordinates encrypted), status, and whether it was changed;
• edits to accepted requests, and a pending choice of which place to replace when your places are full;
• notices shown to you in the app (for example, "you've been gifted an upgrade" or "you've been accepted to a group");
• who you've blocked;
• the last time you read each group's chat (never shown to anyone).

Reports and safety

If someone reports a message or request, we keep a copy of it with the 5 chat messages before it and the 5 after it. In that copy, the person reported is called "A" and everyone else gets their own letter, never a name. We keep the review decisions with it. We also keep a record of confirmed violations: who, what level, which rule, and when, without any message text. See "Reports and content review" below.

Subscriptions

• Purchases go through the Apple App Store or Google Play. We never see or store your card details.
• RevenueCat handles purchase records for us. We share your ArrivalList account ID with RevenueCat. We store your plan, its billing period, its renewal date, whether it's set to renew, and any seat bundles. We also keep the date of the last renewal we reminded you about.

Diagnostics

When the app crashes or hits an unexpected error, it sends a report to Sentry. The report includes the error, app version, device model, and operating system version. These reports leave out your reminder text, places, and coordinates, and they're never sent while the app is in the background.

Things you send us

If you email us or use our contact page, we keep your message and email address so we can answer you.

Security and abuse prevention

We keep simple counters of how often an account does certain things, such as sending messages, invites, or reports, to prevent spam and abuse. Our hosting provider's sign-in service records sign-in events, which can include your IP address, to protect accounts.

Our website

arrivallistapp.com doesn't use cookies, analytics, or advertising or tracking scripts, and its fonts and files are served from our own site. Like most websites, our web host keeps standard server logs of each request, including your IP address, your browser type, and the page you asked for, to run and protect the site. The contact form opens your email app; we don't collect anything through the form itself. If you join our launch waitlist at updates.arrivallistapp.com, we keep your email address with Resend so we can tell you when ArrivalList launches.

How we use information

We use the information above only to:

• run ArrivalList: sync your reminders, lists, and places; deliver notifications; run Groups; and enforce plan limits;
• keep people safe: review reports, filter a short list of prohibited words, prevent spam and abuse, and enforce our Terms of Service;
• handle subscriptions: confirm what you've bought, apply seats, and remind you before a yearly plan renews;
• find and fix problems, such as crashes or reminders that didn't register;
• support you when you contact us;
• meet legal obligations, and protect our rights and the safety of our users and others.

We don't sell personal information or "share" it for cross-context behavioral advertising, as California law defines those terms. We don't show ads, use advertising or tracking SDKs, build advertising profiles, or let data brokers collect information through ArrivalList. We don't use your reminders, places, or messages to train AI models.

Who receives information

Other ArrivalList users (Groups)

• Everyone in a group sees: each member's display name, chat messages, and each request's text, Hard or Soft, place name and street (or time), status (pending, accepted, rejected, or expired), and whether it was changed.
• Nobody sees anyone's location, or whether a reminder went off, was checked off, edited by the recipient, or switched off.
• Only the person who sent a request sees "Removed" if the recipient deletes it.
• The group's owner sees who is covered by their plan, and who is on a paid plan.
• Accepting a place request copies that place into your own saved places.
• Blocking someone isn't revealed to them. Neither is who reported them.
• Invites are links you share yourself. We don't upload your contacts or let people search for accounts.

Service providers

These companies process information for us, only to provide their service to us:

Notifications

Notifications travel through Apple or Google. They can include a sender's name, a group's name, and how many requests are waiting for you. They never include message text or reminder text. Your own reminders are shown by your phone itself and never pass through our servers or Apple's or Google's notification services.

Legal and safety

We may disclose information if we believe in good faith that the law requires it (for example, a valid subpoena or court order). We may also disclose it to protect someone from death or serious harm, or to protect our rights or our users. Because your location never reaches us, we can't disclose it.

Business changes

If ArrivalList is part of a merger, acquisition, or sale of assets, information may transfer under this policy. We'll tell you before it becomes subject to a different policy.

Reports and content review

• Who reviews it: when a message or request is reported, an AI model (Claude, from Anthropic) reviews it first, under our written rules. Reports marked "Someone may be in danger," and anything the AI flags as urgent or unclear, go to a person.
• What the reviewer sees: the reported item, the 5 messages before and the 5 after (with letters instead of names), and the author's past confirmed violations.
• What can happen: a warning, or removal of the item plus a pause on sending messages and requests for 24 hours, 3 days, 7 days, or 30 days.
• Notice and appeal: the author gets a notice with the reason, in the app or by email. They can appeal within 30 days of the decision by contacting us, and a person reviews the appeal. An upheld appeal removes the violation and its pause, and restores the item if it still exists.
• Account deletion: only a person can decide to delete an account for violations.
• Permanent bans: If we permanently ban an account, we delete the account and its data, but keep scrambled versions of its email address, Sign in with Apple identifier and App Store identifier so the person can't sign up again, until the ban is lifted.
• Word filter: messages and requests containing words on a short list (slurs and explicit sexual terms) can't be sent.

How long we keep information

Deleting your account

You can delete your account in the app: Account → Delete account. This deletes your account, reminders, lists, places, devices, and push tokens. It also:

• removes you from your groups and deletes your messages and requests;
• deletes groups you own;
• removes your name from "Assigned by" labels on other people's reminders;
• deletes your record at RevenueCat;
• deletes your violation record.

Report copies of your messages stay, with nothing linking them to you, until their retention period above ends.

Deleting your account doesn't cancel a subscription: cancel it in your App Store or Google Play settings. Signing out also deletes ArrivalList's data from that phone.

Your choices and rights

• Permissions: turn location or notifications on or off at any time in your phone's Settings.
• Your content: edit or delete reminders, lists, places, and your messages in the app.
• Requests: depending on your state, you may have the right to know what personal information we have about you and to get a copy, to correct it, and to have it deleted. Wherever you live in the United States, we honor these requests from everyone. Email support@arrivallistapp.com from the address on your account, or tell us how you sign in. We may ask for more information to confirm it's you.
• Timing: we answer within 45 days. If we need more time, we'll tell you why, and we may extend once by up to 45 more days where the law allows.
• Appeals: if we decline your request, you can appeal by replying to our answer within 60 days. If we deny your appeal, you can contact your state attorney general.
• Agents: you can use an authorized agent where your state allows it. We'll verify the agent's authority with you.
• No penalty: we won't treat you differently for using these rights.
• Sensitive information: we use precise location and the other sensitive information described here only to provide the service you asked for. You give consent through our in-app disclosure and your phone's permission prompt, and you can withdraw it in Settings.
• "Do Not Track": we don't respond to browser Do Not Track signals. We don't track you across other apps or websites.

Children and teens

• Under 13: ArrivalList isn't for children under 13, and we don't knowingly collect their personal information. Our age screen stops sign-up for anyone under 13 without storing what they entered. If we learn that an account belongs to someone under 13, we disable it and delete its information promptly, including report copies of what they wrote. If you believe a child under 13 is using ArrivalList, email support@arrivallistapp.com.
• Ages 13 to 17: these users can use ArrivalList. We never sell their information, never use it for targeted advertising, and never profile them.

Security

• Information is encrypted in transit (TLS) and at rest.
• Saved-place addresses and coordinates get an extra layer of encryption.
• Access to each account's data is enforced on our servers.

No system is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires.

Changes to this policy

When we update this policy, we'll change the "Last updated" date above. For material changes, we'll tell you in the app or by email before they take effect.

Contact us

ArrivalList Inc.
5152 Poplar Grove Rd, Cookeville, TN
support@arrivallistapp.com · arrivallistapp.com/contact