1. Who we are
Frequency is operated by Frequency Labs Holdings ("Frequency," "we," "us," or "our"). This policy describes how we collect, use, and protect your personal information when you use our platform at frequencylocal.com and related services.
2. Information we collect
Account information: When you sign up, we collect your email address, display name, and optional profile details (bio, avatar, home area, website, and match preferences such as a birth date for astrology matching).
Authentication data: If you sign in with Google, we receive your name, email, and profile photo from Google. We do not receive or store your Google password.
Google contacts (optional): If you choose to import contacts, we read your Google contacts in read-only mode to copy them into your private contact list on Frequency. We request one-time access and do not store your Google access or refresh tokens.
Content you create: Posts, comments, reactions, event RSVPs, messages, and other content you contribute to the community.
Location: The home area you set is stored as a point on the map. If you turn on live location, we save your device's position once each time you turn it on. Other members only ever see an approximate area, never your exact point. When you claim a code that only works in one place, your device's position is checked against that place and is not saved. To center a map before you share anything, your browser may look up an approximate city from your IP address.
Camera and photos: The QR scanner uses your camera only while it is open and reads codes on your device. The video is not uploaded. If you photograph a business card or an event poster, that photo is uploaded so Vera can read it, and the copies you keep are stored with the contact or event. Photos you add to your profile, posts, and events are stored so they can be shown.
Push notifications (optional): If you allow notifications, your browser gives us a push subscription: an address at your browser's push service, the keys that encrypt each notification, and your browser type. We store it to send you the notifications you choose, and we delete it when the push service tells us it has been turned off.
Phone number (optional): If you turn on text messages, we store your phone number and a record of your consent, including the wording you agreed to, the time, and the IP address and browser you agreed from.
Payments: Card and bank details go straight to Stripe. We keep your purchase history and a Stripe reference, never your full card number.
Vera's memory: If you use Vera, our AI guide, she keeps a short summary of what you have told her (such as interests, goals, and neighborhood) so she can help next time. It is not a transcript of your chats.
Usage data: We record which pages and features you use, tied to your account, only while analytics is on for you, and we delete that raw record after 90 days. We also measure how fast pages load without tying it to you. We do not sell this data.
3. How we use your information
- To create and maintain your account
- To display your profile to other community members
- To deliver posts, messages, and notifications
- To send transactional emails (event reminders, account updates), and the push notifications and text messages you turn on
- To answer you through Vera and the AI tools you choose to use
- To show you what is near you
- To improve and maintain the platform
4. How we share your information
We do not sell your personal information. We share data only with service providers that help us operate the platform:
- Supabase. Database, file storage, and sign-in. Everything in your account is stored here.
- Vercel. Hosting. Every page and request passes through Vercel, which sees your IP address and browser. Vercel Web Analytics counts page visits without cookies.
- Anthropic. The AI behind Vera and our drafting tools. When you use one, what you give it (your words, or a photo of a card or poster) and the context it needs, such as Vera's memory of you, is sent to Anthropic to produce the answer.
- Sentry. Error reports. When something breaks, the error, the page or request it happened on, and your browser and device type are sent to Sentry. We do not attach your name or email.
- Twilio. Text messages, only if you opt in. Twilio receives your phone number and the message.
- Resend. Email delivery. Resend receives your email address, name, and the message, and delivers replies to emails a Space sends.
- Stripe. Payments and payouts. Stripe collects your card or bank details and, for hosts who get paid, the identity details Stripe needs.
- Upstash. Rate limiting. Your IP address or account ID is kept as a short-lived counter so one person cannot flood the site.
- Google. Sign-in (if you choose Google login), contacts import (if you choose it), maps and address search, and Google Analytics. Analytics runs only while it is on for you, and some actions we record on our servers reach it with your account ID, never your name or email.
- Map and place search. OpenFreeMap draws maps, Photon (by Komoot) and OpenStreetMap Nominatim turn a place or address you type into a point on the map, and ipapi.co estimates an approximate city from your IP address. Your browser contacts OpenFreeMap, Photon, and ipapi.co directly, so they see your IP address.
- Recraft. Cover images, only if you ask for one. Recraft receives the title and short summary of what you are making.
- Your browser's push service (for example Apple, Google, or Mozilla). Delivers the notifications you allow. Each one is encrypted, so the push service cannot read it.
5. Google user data
When you connect Google to import contacts, Frequency uses the read-only Google Contacts scope (contacts.readonly) for one purpose only: to copy the contacts you choose into your own private contact list on Frequency, which is visible only to you. We do not access your email, calendar, or any other Google data. We use one-time access and store no Google access or refresh tokens, and we never sell or share this data or use it for advertising. You can delete imported contacts at any time from your account.
Frequency's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Data security
We use industry-standard security measures including encrypted connections (HTTPS), secure authentication tokens, and row-level database security policies. Your data is stored in Supabase's infrastructure with encryption at rest.
7. Your rights
You can update or delete your profile information at any time from your account settings.
Download your data: Go to Settings, Account and privacy and choose Download my data. You get one file with what is keyed to you, including your profile, posts, the messages you sent, RSVPs, memberships, practice history, the contacts you saved, Vera's memory of you, and your consent history.
Delete your account: Go to Settings, Account and privacy, type DELETE, and choose Delete account. It happens right away and cannot be undone. If you own a Space on a paid plan, that plan ends, and the page names it before you confirm. Deleting removes your account, your profile and the records keyed to them, the files you uploaded to your profile, posts, and saved contacts, and your Stripe customer record. Photos you added to an event or a Space stay with that event or Space, and support conversations are kept. Deleted data can remain in our database backups until those backups expire.
Turn things off: Change notifications and texts in Settings, Notifications, or reply STOP to any text. Turn analytics off with Change your cookie choice, under Cookies below. For anything you cannot do yourself, email us at hello@frequencylocal.com.
8. Cookies
We use essential cookies to maintain your login session. We also use Google Analytics to understand how the site is used, and one attribution cookie that records which page or campaign first brought you here. Google Analytics runs only while it is on for you, and some actions we record on our servers reach it with your account ID, never your name or email. We configure Google Analytics with IP anonymization and with advertising and ad-personalization signals turned off. We do not use advertising cookies, and we never sell your data.
Google Analytics and the attribution cookie are optional. In the EU, the EEA and the UK we ask before either one is used, and nothing is stored until you answer. Anywhere else they are on by default and you can turn them off at any time.
9. Changes to this policy
We may update this policy from time to time. We will notify members of material changes via email or an in-app announcement.
10. Contact
Questions about this policy? Email us at hello@frequencylocal.com.