Privacy Policy

Draft for review. This text describes how Frequo works today and is being reviewed by counsel before launch. Questions: legal@frequo.app.

Frequo is run by Frequo, a sole proprietorship operated by its founder in British Columbia, Canada ("we"). This policy explains what we collect when you use frequo.app and the Frequo player, and what you can do about it. We do not sell or share your personal information for advertising, and there are no ads in Frequo.

What we collect

If you only listen

You can listen without an account. Your browser gets a random listener id in a cookie, so the player can remember your stars, blocks and reports and count skips for the free limit. It is not linked to your name unless you later sign in on that browser. Skip counts are deleted after 7 days. Player settings stay in your own browser.

If you create an account

• Your email address, if you sign in with an email code.
• If you sign in with X: your X account id, handle, display name and picture, and the list of accounts you follow. We do not read your timeline or direct messages, and we never post for you. X's sign-in screen names the permission "see posts"; we use it only for the follow list.
• That you confirmed you are 16 or older, and when. We do not store your birth date.
• What you do in the player that you would expect us to remember: stars, custom channels, blocks, reports and settings.

If you subscribe

Stripe handles payment. We never see or store your card number. We keep your Stripe customer reference, your plan, and the dates it started and renews.

If you invite a friend

Each account has an invite code. When someone signs up with it we note who invited whom, the days they listened (the date only), and which devices each account has used, so one person cannot invite themselves. Neither of you is told who the other is: Account shows counts only. To stop the same email or device earning invite months again and again, we keep a scrambled (hashed) record of emails and devices that have earned one; it cannot be turned back into an email address. If both accounts pay through Stripe, we also ask Stripe whether they use the same card. We never see or keep the card number.

If you join the Pro waitlist

If you live outside the United States and join the waitlist, we keep your email address, your country, when you agreed and the exact words you agreed to. We use them only to email you when Pro opens where you live. Every email has a link to leave the list, which deletes your entry.

Usage counts

To see which features work, the player records events such as "played", "skipped" or "starred" with a random id that changes every time the page loads, your plan (Free or Pro) and a few bounded details. These records do not include your name, account, email, IP address or device, and they are deleted after 90 days. We honour Global Privacy Control and Do Not Track, and you can switch usage counts off in Account.

Technical logs

Our servers and hosting provider keep short-lived request logs, including IP addresses, to keep the service secure and working.

Cookies

We use two essential cookies: the random listener id described above, and a sign-in cookie if you have an account. We do not use advertising or tracking cookies, so there is no cookie banner.

Who helps us run Frequo

These providers process data for us under contract. They are in the United States.

• Render: hosting and database.
• X: sign in with X, and the public posts we read aloud.
• xAI: turns post text into speech. It receives post text only, never who is listening.
• OpenAI: checks posts for harmful content before they are read. It receives post text only.
• Stripe: payments, tax and receipts.
• Postmark: sign-in codes, account email and waitlist email.
• Cloudflare: the spam check on the waitlist form. It sees your browser and IP address for that check only.

Because these providers are in the United States, your information is processed outside Canada, where it may be accessible to authorities under local law.

How long we keep it

• Post text and audio: 30 days at most, and sooner if the post is deleted or made private on X.
• Detailed listening history: 90 days, then only totals that no longer point to you.
• Skip counts: 7 days.
• Waitlist entries: until you leave the list. An entry you never confirm is deleted after 7 days.
• Moderation and account decisions: 1 year.
• The hashed record of the emails, X accounts and devices that have used the free week or earned an invite month: 24 months, even if you delete your account.
• Accounts unused for 24 months: we email you, then delete the account.
• Billing and tax records: 7 years, as tax law requires, with your name and email removed once your account is deleted.
• Backups: they age out within 30 days.

Your choices and rights

• Download your data: Account, then Download my data.
• Delete your account: Account, then delete. You have 7 days to change your mind, then it is gone for good and we revoke our access to your X account.
• Correct it: change your settings in Account, or write to us.
• Usage counts: switch them off in Account, or send Global Privacy Control.

You can also write to privacy@frequo.app for any of these, or to ask what we hold about you. We reply within 30 days. We will not treat you differently for using these rights.

Children

Frequo is for people 16 and older. If we learn an account belongs to someone younger, we delete it within 72 hours.

Security

Connections are encrypted, access tokens for X are stored encrypted, and staff access is limited to the people who run the service. If a breach puts you at real risk, we will tell you and the regulators the law requires.

Changes

If we change this policy in a way that matters, we will say so in the app and, if you have an account, by email before it takes effect.

Contact

Frequo, privacy contact: privacy@frequo.app. See also the Terms.