Privacy Policy

Last updated: October 30, 2026

This Privacy Policy explains how fram.d ("fram.d", "we", "us", or "our") collects, uses, shares, and protects information when you use the fram.d mobile app and related services (the "Service"). We built fram.d to be private by design: your timeline is for you and the people you choose to tag. This page tells you exactly what that means.

1. Information we collect

We only collect what we need to run the Service.

Account information

When you sign up, we use Firebase Authentication to create your account with your email address and a password you choose, or through Sign in with Apple or Google Sign-In. With Apple or Google, we receive the email address (which may be an Apple private relay address) and, where you allow it, the name associated with that account. We also store the unique username you pick, which is how friends find and tag you, and a profile photo if you add one.

Content you create

This is the heart of fram.d — the memories you save. It includes the photos you upload, audio notes you record, captions and written notes you add, the timestamps of your memories, and the usernames you tag in each one.

If someone shares a guest-book link or QR code for an album with you, you can add photos and notes to that album as a guest without an account. We store what you add, the name you enter (if any), and a temporary guest session so you can claim your contributions later. The album's owner and members can see guest contributions.

Notifications

If you allow notifications, we store a push token for your device (an identifier issued by Apple or Google that lets us address notifications to it), the device platform, and your notification preferences. We use these only to tell you when someone tags you, accepts your tag, or adds a note to a memory you're in. Notifications are delivered through Firebase Cloud Messaging and, on iPhone, the Apple Push Notification service, and their text can include the name of the person who triggered them. You can switch notification types off in Account settings or turn notifications off entirely in your phone's settings. We delete the token when you sign out of the app or delete your account.

Purchases

fram.d Premium is sold as a subscription through the Apple App Store or Google Play. Apple or Google handles the payment; we never receive your card or bank details. We receive and store transaction details from the store, such as the product purchased, transaction identifiers, purchase and expiry dates, and renewal status, so we can verify your subscription and unlock Premium on your account.

Technical information

To keep the Service reliable and secure, we may process basic technical data such as device type, operating system version, app version, and logs generated when your app communicates with our servers. We do not use third-party advertising trackers.

The app also records usage events, such as which screens are opened and which features are used, so we can understand how fram.d is used and improve it. Each event includes a random install identifier, your account identifier when you're signed in, your platform, and your app version. Usage events never include your photos, audio, captions, or notes, and they are processed on our own servers rather than by a third-party analytics provider.

Our website (useframd.app) uses Google Analytics to measure visits. Where consent is required, analytics cookies are only set if you accept them, and you can change your choice at any time through "Cookie settings" at the bottom of each page.

2. How we use it

To create and maintain your account and private timeline.
To store and display your photos, audio, captions, and tags.
To let you tag friends and deliver memories to the people you tag.
To let anyone tagged in a memory add a written or audio note.
To send the notifications you've allowed.
To process and verify Premium subscriptions.
To operate, secure, troubleshoot, and improve the Service.
To communicate with you about your account or important changes.

We do not sell your personal information, and we do not use your photos, audio, or captions to serve advertising.

fram.d is not a public network. A memory is visible to you and to the people you tag by username. When you tag someone:

The memory appears in that person's timeline.
They can view the photo, caption, and any audio note on it.
They can add their own written or audio note to the memory.

Please only tag people who were part of the moment, and only upload content you have the right to share. If someone tags you in a memory and you would like it removed from your timeline, you can remove it or contact us.

4. Service providers

We rely on a small number of trusted infrastructure providers to run the Service. They process data only to provide their services to us:

Google Firebase — authentication (sign-in and account management) and push notification delivery (Firebase Cloud Messaging).
Apple — Sign in with Apple, App Store purchases, and notification delivery to iPhones (Apple Push Notification service).
Google — Google Sign-In, Google Play purchases, and Google Analytics on our website (subject to your cookie choice).
Cloudflare R2 — secure object storage for your photos and audio files.
Managed database hosting — stores account details, captions, tags, and metadata (such as references to your media files).

5. Storage & security

Your photos and audio are stored in Cloudflare R2 and are accessed through short-lived, presigned links generated for your requests — media URLs expire and are re-issued as needed, rather than being permanently public. Your memories are not shared publicly and are not visible to other users, except the people you choose to tag and share them with. Account data and memory metadata are stored in a managed database. We use industry-standard measures to protect your data in transit and at rest. No system can be guaranteed 100% secure, but we work to protect your information and limit access to it.

6. Data retention

We keep your information for as long as your account is active. When you delete a memory, we remove it and its associated media from active storage. You can delete your account at any time from Profile → Account settings → Delete account, or by request. When you do, we permanently delete your personal information and content — including your memories, every photo and audio file you uploaded, your notes on other memories, your groups, your push tokens, your subscription records, and your sign-in credentials — except where we are required to retain certain records to comply with legal obligations or resolve disputes. Usage events, which never contain your content, may be kept after your account is deleted, but they are no longer linked to any profile. Deleting your account does not cancel a Premium subscription; cancel it in your App Store or Google Play account settings.

7. Your rights & choices

Depending on where you live, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information (for example, your username).
Delete individual memories or your entire account.
Request a copy of your content.
Object to or restrict certain processing.
Turn notifications off at any time.

You can manage much of this directly in the app. For anything else, contact us using the details below and we'll help.

8. Children's privacy

fram.d is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the updated policy.

10. Contact us

Questions about this policy or your data? Reach us at support@corerush.fit.