1. Introduction
Frequency ("we," "us," or "our") operates the website at frequency.quest and related services. We are committed to protecting your privacy and being transparent about how we handle your personal information.
This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and what rights you have. By using our website or services, you agree to the practices described below.
2. Information We Collect
Information You Provide
- Account information — name, email address, and password when you create an account.
- Profile data — wellness preferences, program selections, and assessment responses you share with us.
- Purchase information — billing address, shipping address, and payment details processed through PayPal.
- Communications — messages you send us, intake form responses, and journal entries you create within our platform.
- Voice interactions — when you use our voice features, audio data is processed by ElevenLabs to generate responses. We do not store raw audio recordings.
Information Collected Automatically
- Usage data — pages visited, features used, time spent, and navigation patterns.
- Device information — browser type, operating system, screen resolution, and device identifiers.
- Location data — approximate location derived from your IP address.
- Cookies and similar technologies — see our cookie disclosures in Section 7 below.
3. How We Use Your Information
We use your information to:
- Provide, maintain, and improve our platform and services.
- Process orders and send transactional communications.
- Personalize your experience using AI-powered features (Anthropic, OpenAI, and Google AI services).
- Send you updates, newsletters, and marketing communications (with your consent).
- Analyze usage patterns and improve our products.
- Detect, prevent, and address security issues or fraud.
- Comply with legal obligations.
4. Third-Party Services
We work with trusted third-party service providers to operate our platform. Each provider receives only the data necessary to perform its function:
- Supabase — database hosting and authentication. Your account data and application data are stored securely on Supabase infrastructure.
- PostHog — product analytics. Collects usage data such as page views, clicks, and session recordings to help us improve the user experience. You may opt out via our cookie settings.
- ElevenLabs — voice AI processing. When you interact with voice features, text and audio data are sent to ElevenLabs for real-time speech synthesis.
- Anthropic, OpenAI, and Google — AI services. We use these providers to power chat, personalization, and content features. Conversation data is sent to these services for processing but is not used to train their models.
- PayPal — payment processing. PayPal handles your payment information directly. We do not store your full payment card details on our servers.
- Resend — email delivery. Your email address and message content are shared with Resend to deliver transactional and marketing emails.
- Vercel — web hosting and content delivery.
- Sentry — error monitoring. Collects technical error data to help us identify and fix issues.
- Groq — AI inference. Powers fast AI responses for journal and companion features.
- Voyage AI — text embeddings. Generates vector representations of content for semantic search and personalization.
- Neo4j — knowledge graph. Stores relationships between concepts and content for intelligent recommendations.
- Deepgram — speech-to-text. Processes voice recordings to generate text transcripts for your journal.
- Railway — backend hosting for our e-commerce infrastructure.
5. Data Sharing
We do not sell your personal information. We share data only in the following circumstances:
- Service providers — as described in Section 4, to operate our platform.
- Legal requirements — when required by law, subpoena, or legal process.
- Safety — to protect the rights, property, or safety of Frequency, our users, or the public.
- Business transfers — in connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
- With your consent — when you explicitly authorize us to share your information.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:
- Account data — retained while your account is active and for 30 days after deletion request.
- Purchase records — retained for 7 years to comply with tax and accounting obligations.
- Analytics data — retained for up to 24 months, then aggregated or deleted.
- Communications — retained for the duration of the business relationship unless you request earlier deletion.
7. Cookies and Tracking Technologies
We use the following types of cookies:
- Essential cookies — required for the site to function (authentication, security). These cannot be disabled.
- Analytics cookies — used by PostHog to understand how visitors use our site. These are only set with your consent.
You can manage your cookie preferences at any time using the cookie settings banner on our site, or by adjusting your browser settings.
8. Your Rights
All Users
Regardless of your location, you have the right to:
- Access the personal information we hold about you.
- Correct inaccurate information.
- Request deletion of your personal information.
- Opt out of marketing communications at any time.
- Withdraw consent for analytics tracking.
California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:
- Right to Know — you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
- Right to Delete — you may request that we delete your personal information, subject to certain exceptions (e.g., completing a transaction, legal obligations).
- Right to Opt-Out of Sale — we do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
- Right to Non-Discrimination — we will not discriminate against you for exercising any of your CCPA rights.
To exercise your CCPA rights, contact us at privacy@frequency.quest or use the contact information below. We will verify your identity before processing your request and respond within 45 days.
European Residents (GDPR)
If you are in the European Economic Area (EEA) or United Kingdom, you also have the right to:
- Data portability — receive your data in a structured, machine-readable format.
- Restrict processing — request that we limit how we use your data.
- Object to processing — object to processing based on legitimate interests.
- Lodge a complaint — file a complaint with your local data protection authority.
9. Data Security
We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, through email or an in-app notification. We encourage you to review this policy periodically.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:
- Email: privacy@frequency.quest
- Address: Frequency, Topanga, CA 90290