Privacy Policy
Effective September 26, 2026 · Updated October 14, 2026: measuring our own ads
FRLY is a location product, so this policy is specific about location: what we collect, what we keep, and for how long.
What we collect
Your account. An identifier from Sign in with Apple, and your email address if Apple shares it (often a private relay address that hides your real one). The handle you choose, and a profile photo if you add one. If Apple shares your name, we use it once to suggest a handle and then discard it. Your age category from Apple — or your confirmation that you're over 18, where Apple can't tell us — used only to keep FRLY 18+. It is never shared or used for anything else.
What you record. Your videos and their audio, recorded in the app. The coordinates where you recorded each one, fixed at that moment. The short envelope and the note you write, and the name of the place, which your phone looks up with Apple Maps. Photos you add to an album — with all embedded information removed when they upload, including where and when they were taken.
Location.
- When you record: the coordinates the memory is tied to, kept as long as the memory exists.
- When you unlock: a reading to confirm you're standing there. We keep that you unlocked it and when. The details used to check it — accuracy, distance, your IP address and a device check — are deleted after 90 days.
- The nearby check: one reading, used to answer "is anything near me" and then discarded. It is not stored or logged.
- Watching a place (only if you turn it on): your phone notices when you arrive. We record only that you arrived and when — never where you were.
People. Who you follow, who follows you, who you've blocked, and the memories you send, receive, ask for and accept.
Reports and safety. Reports you file. Text you write is screened automatically for slurs and abuse; we keep which words matched and a one-way fingerprint of the text — never the text itself — for 90 days.
Your device. A notification token so we can reach your phone, and the app version.
Messages to FRLY. What you send through the contact, feedback or investor forms on frly.at — your name, email and message, as you give them — and our replies and your answers to them.
What we don't collect
- No advertising inside FRLY, no advertising identifiers, and we never sell personal information.
- No tracking you across other apps and websites, no analytics on what you do in FRLY, and no crash-reporting service.
- No access to your contacts.
- No reading of your photo library. Saving to Photos uses add-only access; adding album photos uses Apple's picker, which only gives us the ones you choose.
- No history of where you go: the only locations we keep are the places you record and the fact of your unlocks.
Measuring our own ads
FRLY advertises on Facebook and Instagram. To know whether those ads work, frly.at's home, contact, feedback and investor pages can use Meta's pixel — only if you choose Allow in the banner, and you can change your mind from the footer. With your OK, Meta learns that the page was visited from its ad, and whether you sent a form; never what you wrote. Share links, memory pages, profiles and these legal pages never use it.
In the app, Meta's software development kit tells Meta that FRLY was installed and opened, and when a new account is set up, so we can see which ads led to people joining. FRLY never collects your device's advertising identifier and never asks to track you, so Meta reports to us only through Apple's privacy-preserving attribution (SKAdNetwork) and its own aggregated measurement, not about you as a person.
Nothing about the places, memories or people in FRLY is ever shared with Meta: no location, no video, no handle, no one you know.
Who can see what
- Your profile shows your handle, photo, the month you joined, and how many followers and following you have. Not who they are — only you can see your own lists.
- Your private memories are seen only by people you approve or who accept one you send them. None of them learns where it is until then. Recipients never see each other.
- A share link's page is public. Anyone who opens a link you send sees your handle, photo, and the envelope — never the place, the note, or the video.
- If you share a memory, you can see who opened it and when, unless they chose to unlock quietly. Then you see that they accepted, and nothing about whether they went.
- The places you've stood — your collection — are private. Nobody else sees them, including the people whose memories you opened.
- Saved copies. Someone who has opened a memory can save its video and photos to their phone. Those copies are theirs, outside FRLY, and carry no location.
Who processes data for us
Supabase (database and photo storage), DigitalOcean (our servers), Mux (video storage and playback), Postmark (account email, invites you ask us to send, and our replies to messages sent through frly.at), Cloudflare (domain), Apple (sign-in, notifications, and place names on your phone), and Meta (measuring our ads: on frly.at only if you allow it, and in the app without your advertising identifier). They process data only to provide those services to FRLY.
How long we keep it
- Memories and their coordinates: until you delete them or your account is erased — except a memory someone else has already opened, which stays with them.
- Unlock verification details: 90 days. The fact of an unlock and its date: as long as your account.
- Messages through frly.at's forms, our replies and your answers: 12 months after the conversation is closed or last answered.
- Text-screening records: 90 days. Account emails: 30 days after sending. An invite you email to someone: their address is erased the moment it's sent, and we keep only that an invite went.
- Recordings that haven't uploaded stay on your phone until they upload or you delete them.
Deleting your account
You can delete your account in the app. It disappears at once and is erased for good 30 days later; signing back in before then cancels it. On erasure, everything you recorded that nobody else has opened is deleted, along with your handle, photo, followers, and the places you've stood. Shares nobody had opened end as soon as you ask. We email you once to confirm the date, if we have your address.
Your choices and rights
- Turn off location "Always" — everything works except arrival alerts. Stop watching any place at any time.
- Unfollow, block, or remove followers. Remove photos from an album before you publish.
- Delete any memory. If nobody else has opened it, it's erased with its video and photos. If someone has, it's removed from your Library and stays with them; everyone else loses access.
- Delete your account in the app.
- Get a copy of your data from the app: Profile, then Privacy controls, then Download a copy of your data. It's a file of everything we hold about your account, including your memories' exact places and what you've unlocked. Video and photo files are saved from each memory. For any other request about your data, email [email protected].
- Unlock quietly. When you open someone's private memory you can choose not to show them that you went.
Children
FRLY is only for people 18 and over, checked with Apple's age signals rather than a typed birthday. We don't knowingly collect information from anyone under 18, and remove any account found to belong to a minor.
Changes
If this policy changes materially, we'll tell you in the app.