Privacy Policy

1. Information We Collect

We collect only the information necessary to provide the service:

• Account data: name, email address (or Apple ID relay email) when you register
• Challenge data: challenges, goals, check-ins, streaks, and achievements you create
• Verification data: photos (for photo check-ins), approximate location (for location goals), step counts (from HealthKit, for step goals), NFC tag identifiers
• Ask your AI: the text you write or paste, your answers to Frayso's readings and to your report, and — only if you allow it — a summary of the last 8 weeks of your steps, sleep and workouts from Apple Health (see Section 5)
• Device tokens: for sending push notifications
• Usage data: anonymized events about how you interact with the App and wireframe-only session replays — see Section 4

2. How We Use Your Data

• To provide and maintain the App's functionality
• To display your progress to challenge participants
• To send push notifications about challenge activity
• To write your report and program when you use Ask your AI
• To process subscription purchases via Apple
• To understand how the App is used and improve it

We do not sell your data, use it for advertising, or share it with third parties for cross-app tracking.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties, except with the following service providers who process data on our behalf under contract:

• Apple: handles payments and Sign in with Apple authentication
• RevenueCat: processes subscription status (receives anonymous user ID only)
• PostHog: product analytics — receives anonymized usage events linked to your account ID. Data is hosted in the United States.
• Better Stack: infrastructure monitoring — receives server logs and error reports. Data is hosted in the European Union.
• OpenRouter (OpenRouter, Inc., United States): routes Ask your AI requests to Anthropic — it receives the text you provide and, if you allow it, the Health summary, and passes them to Anthropic only. OpenRouter does not use this data to train models.
• Anthropic: writes the readings, report and program in Ask your AI from that text and summary. Anthropic does not use this data to train its models.
• Other users: your name, check-ins, and streaks are visible to members of challenges you join

4. Analytics and Session Replays

We use PostHog to understand how the App is used so we can improve it. This includes anonymized event data (which screens you view, which features you use, when you complete check-ins) and wireframe-only session replays of your interactions.

In session replays, all text you type, all images and photos, and all system pickers are automatically masked before being captured — their contents never leave your device. We do not record payment information, passwords, or the contents of your check-in notes.

You can disable analytics and session replays at any time in Profile → Preferences → "Help improve Frayso". Disabling immediately stops all collection.

5. Apple Health (HealthKit) Data

Step goals. If you use step-based goals, the App reads your step count from Apple Health to verify goal completion.

Ask your AI. Only if you allow it, the App reads your steps, sleep and workouts from the last 8 weeks. Your phone turns them into daily totals and a short summary — for example, your median steps and usual bedtime; individual Health records never leave your device. The daily totals and the summary are stored on our servers to draw the charts in your report and are deleted after 30 days. The summary is sent through OpenRouter to Anthropic to write your report (Section 3).

Health data is never used for advertising, never sold, and never shared with anyone else.

6. Data Storage & Security

Your data is stored on secure servers. Photos are stored on our server infrastructure. We use JWT-based authentication and encrypted connections (HTTPS) for all data transmission.

7. Data Retention & Deletion

We retain your data for as long as your account is active. The text you give Ask your AI and your answers to it are deleted after 7 days; the Health totals behind a report after 30 days. You can delete your account at any time from the Profile section, which permanently removes all your data from our servers. There is no recovery after deletion.

8. Children's Privacy

The App is not intended for children under 13. We do not knowingly collect data from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly.

9. Sign in with Apple

When you use Sign in with Apple, we receive your name and either your real or a relay email address (your choice). Apple's unique user identifier is stored to link your Apple ID to your account. You can disconnect at any time via Apple ID settings.

10. Your Rights

You have the right to:

• Access your personal data (visible in your profile and challenges)
• Delete your account and all associated data
• Opt out of analytics and session replays (Profile → Preferences)
• Opt out of push notifications via device settings

11. Changes to This Policy

We may update this policy from time to time. Changes will be reflected by updating the "Last updated" date. Continued use of the App constitutes acceptance.

12. Contact

For privacy-related questions, contact us at support@kedicode.cloud