Arch shows a cardiology fellowship's schedule to the program's fellows and staff. This page says what it keeps about you, and why.
Signing in
You sign in with Google, or with a code sent to your email, through WorkOS, which keeps your account: your email address, your name and an ID. Google shares your basic profile, your name, email address and picture, and nothing else: not your password, mail, contacts, files or calendar.
What Arch keeps
Arch keeps no account of its own. Once you sign in, your browser holds a signed cookie with your email address, which the page's scripts can't read. It lasts 30 days, or until you sign out, and on each visit Arch checks it against the fellowship's list.
If your account isn't on the list, you can ask to be let in: Arch keeps the email you signed in with, the name and military email you give, and whether your request was approved, so the chief fellows can check who asked. Nothing is sent to the military email.
If you report a problem signing in, Arch keeps what you wrote, the email you give to be answered at, your browser and the page you came from, and emails it to whoever runs Arch, to answer you.
The schedule pages you open stay on your device for up to a week, so they still work offline. Signing out clears them.
When you leave a page, your browser tells Arch how it ran, so problems can be found and fixed: how fast it opened, how fast it answered a tap, how smoothly a move between tabs ran, any errors, the app's version, the kind of device, its system, browser and screen, and whether you were on cell, the DoD network or other Wi-Fi. Arch keeps that with your name for three months, and never your IP address, your other apps, history or contacts.
Hosting
Cloudflare hosts Arch and keeps short logs of each request: the page, the time and your IP address.
What Arch doesn't do
There are no ads, trackers or outside analytics. Nothing about you is sold, shared, or used for anything but letting you in. Arch's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Questions
To have your account deleted, or for any question about this page, ask the program's chief fellows. When this page changes, the date at its top does too.