Privacy Policy

1. Introduction

fross (“we”, “us”, “our”) is an AI life-logging app — “Your life, logged.” It brings together your calendar, tasks, notes, finances, contacts, health, and study tools in one calm, private workspace, with an AI assistant that helps you capture and manage your day. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. It applies to the fross app (web and mobile) and our website.

2. Information We Collect and How

We collect the following categories of personal data:

• Account information: your name and email address — collected directly from you when you register or sign in (via email/password, Google, or Apple).
• Chat messages: the messages you type to the fross AI assistant and the responses you receive — collected when you send a message, stored so you can revisit conversations.
• Logs and content you create: tasks, notes, calendar events, contacts, transactions, medications, treatments, health entries, food/water logs, habits, savings goals, and other records — collected directly from you when you create or log them, or automatically when the AI assistant creates them on your behalf at your request.
• Voice recordings and transcripts: when you use voice input, your speech is transcribed to text using your device’s speech recognition, and the transcribed text is sent to AI services to generate a response. Voice replies are generated from text using text-to-speech. We do not store voice audio recordings.
• Phone numbers for calling: when you use the AI calling feature, the destination phone number, business name, and booking request are collected and sent to our calling provider to place a call on your behalf.
• Files you upload: documents and images you attach to your logs or share with the assistant — collected when you upload them.
• Payment status: your subscription plan, billing cycle, and payment status — collected via Stripe (our payment provider). fross receives only the subscription status and billing dates; we never see or store your full card number or banking details.
• Device identifiers and push tokens: used to deliver notifications and reminders to your device.
• Settings and preferences: your city, timezone, work week, voice preferences, notification choices, and AI data-sharing consent status.
• Support and deletion requests: your name, email, and message when you contact support or request data deletion.

How data is collected: data is collected (a) directly from you when you input it or use a feature, (b) automatically when the AI assistant performs actions on your behalf (e.g., logging a task or expense from a chat message), and (c) from Stripe for payment status only. We do not collect data from third-party data brokers or tracking networks.

3. How We Use Information

We use your information only to provide and operate fross’s features:

• To create and manage your account and authenticate you.
• To store, display, and organize the logs and content you create.
• To generate AI responses to your chat messages and voice input.
• To produce voice replies using text-to-speech.
• To log entries on your behalf when you ask the AI assistant to (e.g., “log an expense”, “add a task”).
• To send you notifications and reminders for tasks, calendar events, medications, and other scheduled items.
• To place outbound AI calls on your behalf when you request one.
• To process subscription payments and manage billing.
• To provide customer support and respond to your requests.
• To maintain the security and integrity of the service.

We do not use your personal data for advertising, marketing profiling, or selling to third parties.

4. Third-Party Services

We rely on trusted service providers to operate fross. Each receives only the data necessary for its function, and each provides data protection equal to or stronger than our own:

• Base44 — hosts the app and provides authentication, data storage, file storage, email delivery, analytics, and the AI infrastructure that routes requests.
• AI language model providers (OpenAI, Google, and Anthropic) — process your chat messages, transcribed voice text, and log content (expenses, tasks, schedule, health entries) needed to generate AI responses. Each provider processes data under its own enterprise privacy and security terms, which provide equal or stronger data protection than our own.
• Infobip — used only for the AI calling and messaging feature, to place outbound calls on your behalf when you request one. Receives the destination phone number, business name, and booking request.
• Stripe — processes subscription and purchase payments. fross never sees or stores your full card number; Stripe handles all payment data securely on its own PCI-compliant systems.
• Google — provides optional sign-in, and optional Calendar, Tasks, Contacts, and Drive integrations (only if you connect them), and web fonts.
• Apple — provides optional sign-in.
• Todoist — provides an optional tasks integration (only if you connect it).
• OpenStreetMap — provides map tiles used in location-aware features.

Each provider processes data under its own privacy and security terms, which provide equal or stronger data protection than fross’s own practices.

5. No Cross-App Tracking and No Data Sales

We do not track you across other companies’ apps or websites. fross does not use cross-app advertising SDKs, tracking pixels, or device fingerprinting for advertising. We do not sell your personal data to anyone. We do not share it with advertisers or data brokers. We share information only with the service providers listed above (to operate the app), or when legally required to do so, such as responding to valid legal requests.

6. AI Data Sharing Consent

Before your first use of any AI feature (chat, voice, log suggestions), fross shows a consent screen explaining what data is sent and to whom. You can choose to agree or decline. If you decline, AI features stay disabled — no data is sent to AI providers — and the rest of the app continues to work normally.

To withdraw AI consent at any time: go to Settings → Privacy & Data and turn off “Allow AI data sharing”. When off, all AI calls (chat, voice, suggestions) are blocked until you re-enable it. This setting is enforced both in the app and on the backend, so no AI request can run without your stored consent.

7. Sharia-Aligned Data Principles

As part of our commitment to ethical data practices, we hold ourselves to the following principles:

• We treat your data as an amanah (a trust) and handle it with care and responsibility.
• We are transparent: we do not deceive you about what we collect or how we use it.
• We do not trade in or monetize your personal data.
• We do not use your data for interest-based (riba) products or for promoting prohibited (haram) goods or services.
• We collect only what is needed to deliver the service to you.

These are our own commitments. This policy is not a certification or religious ruling, and fross is not certified or approved by any scholar or religious body.

8. Data Retention and Deletion

We keep your data for as long as your account is active. When you no longer want the service, you can:

• Delete your account and all data permanently — from Settings → Delete account. This cancels any active subscription and immediately deletes your account, workspace, and all associated records. This action cannot be undone.
• Request data deletion — from Settings → Privacy & Data → Request data deletion. We review and process requests within a reasonable period and confirm by email.
• Email us at mohammad@optymgroup.com to request deletion.

9. Security

We take reasonable technical and organizational measures to protect your data, including secure hosting, access controls, and encrypted transmission. However, no system is perfectly secure, and we cannot guarantee absolute security.

10. User Rights and Choices

You have the right to:

• Access the data you have entered.
• Correct inaccurate information.
• Withdraw AI data-sharing consent at any time (Settings → Privacy & Data).
• Request deletion of your personal data and account.
• Withdraw consent for microphone access and notifications through your device settings.
• Cancel your subscription at any time from the app’s billing settings.

11. Children

fross is not directed to children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. International Data Transfers

Your data may be processed in countries other than your own, through the service providers listed above. We rely on these providers’ safeguards for international transfers.

13. Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and notify you within the app.

14. Contact

For any privacy questions or requests, contact us at mohammad@optymgroup.com.