Skip to main content
Frequency

Legal

Privacy Policy

Effective date: October 10, 2026

1. Introduction

Frequency ("we," "us," or "our") operates the website at frequencycaps.com and related services. We are committed to protecting your privacy and being transparent about how we handle your personal information.

This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and what rights you have. By using our website or services, you agree to the practices described below.

2. Information We Collect

Information You Provide

  • Account information: name, email address, and password when you create an account.
  • Profile data: wellness preferences, program selections, and assessment responses you share with us.
  • Purchase information: billing address, shipping address, and payment details processed through PayPal or Authorize.Net.
  • Communications: messages you send us, intake form responses, and journal entries you create within our platform.
  • Voice interactions: when you use our voice features, audio is streamed to ElevenLabs for a live conversation. New live sessions have audio recording disabled at ElevenLabs. Their transcripts are saved privately to your Frequency account; provider transcripts are retained for up to one day and deleted after verified capture. Separately recorded journal entries may retain audio in your account until you delete them.

Information Collected Automatically

  • Usage data: pages visited, features used, time spent, and navigation patterns.
  • Device information: browser type, operating system, screen resolution, and device identifiers.
  • Location data: approximate location derived from your IP address.
  • Cookies and similar technologies: see our cookie disclosures in Section 7 below.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our platform and services.
  • Process orders and send transactional communications.
  • Respond to your requests using the AI providers listed below. Journal memory is on by default when you start a session or save a new entry, unless you have already turned it off. Existing entries are not added automatically.
  • Send you updates, newsletters, and marketing communications (with your consent).
  • Analyze usage patterns and improve our products.
  • Detect, prevent, and address security issues or fraud.
  • Comply with legal obligations.

4. Third-Party Services

We work with trusted third-party service providers to operate our platform. Each provider receives only the data necessary to perform its function:

  • Supabase: database hosting and authentication. Your account data and application data are stored securely on Supabase infrastructure.
  • PostHog: product analytics. Collects usage data on public pages after your cookie choice. Advertising trackers and session replay are excluded from member pages, including journals, the sanctuary, and orders. You may change your public-site cookie choice at any time.
  • ElevenLabs: voice AI processing. When you talk with Mark AI, ElevenLabs runs the live conversation using hosted DeepSeek, with Google Gemini as a backup, and speaks using the authorized Mark voice. After you accept the voice notice, ordinary voice conversations can receive a few relevant saved memory excerpts when journal memory is on and the session is included. Whole earlier journal entries and attachments are not sent. Future Self voice sharing remains a separate choice for your reviewed perspective. When you choose narrated welcomes, rituals or meditations, their text is sent to ElevenLabs using Mark’s cloned voice. Personalized meditation text can include details from eligible saved memories. Generated history is deleted before the audio is delivered. If that cleanup cannot be confirmed, playback is unavailable and you can read the text or retry. Narration audio is not publicly cached.
  • OpenRouter, Cloudflare Workers AI and OpenAI: written journal responses, insights and meditation scripts use DeepSeek through OpenRouter, with Cloudflare Workers AI as a backup. OpenRouter requests require zero-retention endpoints and deny provider data collection. When memory is on, included entries, extracted facts and current text used to find relevant memories are sent for text embeddings. Embeddings use OpenAI models through OpenRouter, or directly through OpenAI when configured. Provider processing is described separately from the journal and memory records you choose to keep in your Frequency account.
  • PayPal and Authorize.Net: payment processing. These providers handle your payment information directly. We do not store your full payment card details on our servers.
  • Resend: email delivery. Your email address and message content are shared with Resend to deliver transactional and marketing emails.
  • Vercel: web hosting and content delivery.
  • Sentry: error monitoring. Collects technical error data to help us identify and fix issues.
  • ShipStation: order fulfillment and shipment tracking. It receives the delivery details needed to fulfill your order.
  • Deepgram: speech-to-text. Processes voice recordings to generate text transcripts for your journal.

Your journal and memory choices

Original journals remain separate from generated memories. When memory is on, eligible saved memories can personalize written and voice journal conversations and guided meditations. Meditations use your selected reflection and include relevant history according to your account memory setting and entry or session exclusions. You can inspect each memory and its source, correct or forget it, exclude an entry, and export your data from your personal wiki. Turning memory off removes stored personal memories and stops historical recall. Deleted or excluded sources cannot be used to regenerate memories from those sources. Voice consent can be revoked in Settings.

Generated meditations are saved in your private Library with their script, source, estimated duration, and any rating or comment you choose to add. You can edit feedback, delete a saved meditation, or export it with your account data. Deleting its source reflection also removes the saved meditation. Saving narrated audio for private replay is a separate, optional choice. When enabled, eligible recordings are kept in your account and replayed without sending the same script for another synthesis. Turning this choice off removes saved audio while keeping the written meditations. Source privacy changes, voice-consent withdrawal and account deletion also remove affected recordings. When your account and source allow memory, a small amount of relevant feedback from your earlier eligible meditations may help personalize its pacing, tone, or imagery. This is personal context for your request, not global model training.

Keyword search reads your own saved entries without sending them to an AI provider. Search by meaning requires a separate choice and journal memory must also be on. It sends the full text of eligible entries you approve, and meaning-search queries you submit, through OpenRouter for embeddings. Existing entries are not selected automatically. Private, held and Future Self entries remain keyword-only. You can remove entries from the search index or turn search by meaning off without deleting your writing. Turning memory off also removes this index. Search queries are not stored in browser history.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

  • Service providers: as described in Section 4, to operate our platform.
  • Legal requirements: when required by law, subpoena, or legal process.
  • Safety: to protect the rights, property, or safety of Frequency, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
  • With your consent: when you explicitly authorize us to share your information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

  • Account data: retained while your account is active and for 30 days after deletion request.
  • Purchase records: retained for 7 years to comply with tax and accounting obligations.
  • Analytics data: retained for up to 24 months, then aggregated or deleted.
  • Communications: retained for the duration of the business relationship unless you request earlier deletion.

7. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential cookies: required for the site to function (authentication, security). These cannot be disabled.
  • Analytics cookies: used by PostHog to understand how visitors use our site. These are only set with your consent.

You can manage your cookie preferences at any time using the cookie settings banner on our site, or by adjusting your browser settings.

8. Your Rights

All Users

Regardless of your location, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your personal information.
  • Opt out of marketing communications at any time.
  • Withdraw consent for analytics tracking.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

  • Right to Know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: you may request that we delete your personal information, subject to certain exceptions (e.g., completing a transaction, legal obligations).
  • Right to Opt-Out of Sale: we do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
  • Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at privacy@frequencycaps.com or use the contact information below. We will verify your identity before processing your request and respond within 45 days.

European Residents (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you also have the right to:

  • Data portability: receive your data in a structured, machine-readable format.
  • Restrict processing: request that we limit how we use your data.
  • Object to processing: object to processing based on legitimate interests.
  • Lodge a complaint: file a complaint with your local data protection authority.

9. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, through email or an in-app notification. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: