CCPA Compliance

The California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), grants California residents specific rights regarding their personal information. This page describes how Arkoura complies with CCPA.

Category A — Identifiers: name, email, phone, IP address, Firebase user ID.

Category B — Personal records: date of birth, health conditions, medications, allergies.

Category C — Internet activity: app usage patterns (anonymized).

Category H — Health information: all journal entries and health data (treated as sensitive personal information).

Document de-identification: health documents you upload (such as lab reports or imaging results) are automatically processed through Google Cloud Data Loss Prevention (DLP) before being sent to our AI system for analysis. All personally identifiable information is removed before the document content leaves your account's security boundary. You retain full ownership of the original file at all times.

Arkoura does not sell, rent, or share your personal information with third parties for their commercial purposes. This applies to all California residents. We do not have a "Do Not Sell" opt-out because we do not sell.

Right to Know: request disclosure of the categories and specific pieces of personal information collected about you.

Right to Delete: request deletion of your personal information (subject to exceptions).

Right to Correct: request correction of inaccurate personal information.

Right to Opt-Out of Sale: not applicable — we do not sell.

Right to Non-Discrimination: exercising your CCPA rights will not result in denial of service or different pricing.

Rights related to Sensitive Personal Information: you may direct Arkoura to limit use of sensitive personal information (health data) to service provision only.

Email: privacy@arkoura.com

Subject line: "CCPA Privacy Request"

Include: your name, account email, and specific right you are exercising.

Response time: within 45 days (extendable by an additional 45 days with notice).

Verification: we will verify your identity before processing deletion or disclosure requests.

You may opt out of Arkoura using anonymized and aggregated data for research purposes. Contact privacy@arkoura.com to opt out. This will not affect your ability to use the service.

This CCPA notice is effective as of April 3, 2026. We will update it when our practices change materially.