The short version
A summary to orient you. The sections below are the full and controlling description.
We do not sell your information and we never have. Not to advertisers, not to data brokers, not to anyone.
No advertising. There are no ad networks and no advertising pixels, and nothing about you is sold or shared for advertising. We do count visits so we can see which pages confuse people, and there is a chat button you can open if you need help. Section 12 names both and tells you how to switch the counting off.
Your conversations are not used to train artificial intelligence models, by us or by the provider that runs the models for us.
Every account is walled off from every other. Conversations, mail, reminders, saved people, and your files are visible only inside the account they belong to. The one exception is the one you create yourself: a conversation in Frankie Social with somebody who agreed to be your friend, and a link you choose to send somebody for a file. Section 10 sets out both.
Photos and documents you share in a conversation are read and then dropped. They are not stored on our servers after the answer is produced. Files you deliberately save into Frankie Drive are the opposite: we keep those for you until you remove them, which is what a drive is for.
You can ask for a copy, a correction, or a full deletion at any time, from any state, and we will not charge you or treat you differently for asking.
1Notice at collection#
This short section is the notice some state laws require to be given at or before the moment information is collected. Everything in it is explained in more detail further down.
- What we collect: identifiers such as your first and last name, email address, and the United States mobile number every account must have; where you are, if you choose to tell us; the account details you enter; a photograph of yourself, only if you choose to add one; the people you save; what you type and say to Frankie; numeric voice prints, for the reading and optionally for your everyday voice, one set for each language you teach Frankie, only if you choose to turn on voice lock; photographs and documents you share; the files and folders you save in Frankie Drive; what you look up in Frankie Search and the results that came back; who you are friends with in Frankie Social and the messages in those conversations; email that arrives at your assistant address; text messages and voicemail you send to Frankie's own number; reminders; and basic technical records such as your internet address.
- Why: to run the assistant, to remember your context so you do not repeat yourself, to deliver the reminders and messages you ask for, to keep the service secure, and to comply with the law.
- Sensitive information: yes, some of what you tell Frankie can be sensitive, including health topics and the contents of your mail. We use it only to give you the service you asked for.
- Sale or sharing for advertising: none. We do not sell personal information and we do not share it for cross context behavioral advertising.
- How long: for as long as your account is open, plus the short windows described in section 13.
- Your rights and how to use them: section 15 and section 16.
- Where you are, roughly. If you save a ZIP code we work out the county and metropolitan area around it, so local answers work. We do not use GPS or track your movements, and we do not keep the precise location one of the public services returns. Section 4 explains it.
2Who and what this covers#
FrankieGPT is operated by DotNet Holdings LLC, 1401 21st St Ste R, Sacramento, CA 95811. This policy covers the FrankieGPT website at frankiegpt.com, the web application, the assistant, the private email address created for your account, reminders and messages sent for you, and any support conversation you have with us. It applies on every device: iPhone, Android phone, tablet, laptop, and desktop.
It does not cover other companies' websites and services that you reach from Frankie, such as a page in a search result, and it does not cover what happens on your own device or in your own email or messaging apps.
We are not a health care provider and we are not a HIPAA covered entity or a business associate. When you tell Frankie something about your health, that information is protected by this policy and by the consumer privacy laws described below, not by HIPAA.
FrankieGPT is an adults only service. Everyone who uses it must be 18 or older. Section 19 explains what that means for information about children.
3What we collect#
Frankie is a general purpose assistant, which means the honest answer to "what do you collect" is: whatever a person chooses to tell an assistant over months of ordinary days, plus a small amount of technical record keeping. The table is specific about the shape of it.
| Category | What it includes | Why we have it |
|---|---|---|
| Account details | Email address, a hashed version of your password, the first name Frankie calls you, your last name, language preference, United States time zone, and a United States mobile number. The name, email and mobile number are required: we cannot provide the service without being able to identify you and reach you. We record the date we confirmed your mobile number by text. Optionally, you may add a street address, city, state, or ZIP code, a note about yourself, and a photograph of yourself. When you type an address we check it against a maps provider so that it is complete and can actually be delivered to, which is why we ask for an apartment or suite number when the building has more than one. We also keep the permanent code that forms your assistant email address. | To create and secure the account, to speak to you correctly, to schedule reminders in your own local time, and to send the messages you ask for. |
| People you save | For each person you add: name, relationship, phone number, email address, and street address. | So Frankie can help you write to them, call them, or find their address. These are people's details entered by you. |
| Conversations | What you type, the text of what you say out loud after it is converted to words, Frankie's replies, and the short summaries and durable facts Frankie keeps so he can remember across days. In practice this can be anything: questions, plans, worries, opinions, a letter you are drafting, a recipe, a diagnosis, a family argument. | To answer you, and so the assistant remembers context instead of starting over every time. |
| Photographs and documents | Images and PDF files you share, such as a letter, a bill, a form, or a prescription label, and any text you paste in. | To read and explain them. See section 13 for how briefly these are held. |
| Voice audio | The sound of your voice while a spoken conversation is running, and any short recording you send for transcription. | To understand what you said and to answer out loud. See section 7. |
| Generated pictures | Images the assistant creates for you from a description. | So they can be shown, saved, shared, or attached to a message. |
| Frankie Social | Who you are friends with, and the state of each friendship: waiting, accepted, declined, or ended, with the date it last changed. The email address or mobile number you typed in to invite somebody, which stays on your own waiting list whether or not it turned out to belong to an account. The short note you may attach to a request. The messages in a conversation you take part in: the words, anything you chose to share into it, the time, and the name shown on each message. | So that two people who have both agreed to it can write to each other, and so that a request you sent, accepted, or ended behaves the way you left it. |
| Frankie Drive | The files and folders you save: the file itself, the name you gave it, its size and kind, the date it arrived, and the folder it sits in. Also a small preview picture we make for a photograph, the words we pull out of a document once when it arrives so that it can be found by searching, and any share link you create, including whether you put a password on it and when it runs out. | So your own papers and photographs are there when you want them, so Frankie can find and read one to you, and so a link you sent somebody keeps working until you stop it. |
| Frankie Search | What you typed into the search box, when you typed it, and the results that came back that day: the title, the address, the site, the short description, and the small preview picture. Also which of those results you chose to keep. | So that something you looked up once can be found again later without searching for it a second time. The history is the point of the screen: most people are not trying to search, they are trying to find the thing they already found. |
| Assistant mailbox | Messages sent to your private assistant address: sender name and address, subject, message text, attachments we keep for you, and delivery identifiers. Also a record of messages Frankie sends for you, including recipient, subject, and time. | So Frankie can show, read aloud, explain, and search your mail, and so we can investigate abuse and delivery problems. |
| Reminders | The reminder text, the time and repeat pattern, whether it goes by text or email, and a delivery record with the outcome of each attempt. | To send the reminder and to tell whether it worked. |
| Accessibility choices | The settings you pick in the accessibility panel, such as larger text or high contrast. | Stored in your own browser on that device only, never sent to us, so the page opens the way you left it. |
| Your photograph, if you add one | One picture of yourself. We store it as a square image and keep no other copy: the file you sent is discarded once the square is made, and so is everything hidden inside it, including the location tag a phone camera writes into a photograph. You can replace it or remove it at any time on your Settings screen, and removing it deletes it. | So that people you are friends with, and people you send a friend request to, can see who you are. It is shown to nobody else. There is no directory and no public profile, and we never use it to identify you by face or run any kind of face recognition on it. |
| Technical records | Your internet protocol address, the date and time of requests, which feature was used, counts and sizes rather than content, error codes, and rate limiting counters keyed to your internet address. | To keep the service running, to stop abuse and automated attacks, and to diagnose failures. |
| Support messages | What you write to us and what we write back. | To help you and to keep a record of what was asked and answered. |
| Payment details, when you subscribe or buy a task | Amount, date, what was bought, and a transaction identifier. Full card numbers go to the payment processor and never touch our servers. | To bill correctly and to keep tax and accounting records. |
We do not collect precise geolocation. We do not read your device contact list, your photo library, your calendar, your call history, or your text messages. The microphone and camera are used only while you are actively using a feature that needs them, and your browser asks your permission first. Nothing runs in the background when the app is closed.
Text messages and voicemail you send to Frankie's number
FrankieGPT has one published telephone number. It is how reminders reach you, and you can send a text to it or leave a message on it. If you text that number from the mobile number on your account, we store the message text, your number, the time, and the delivery identifier, and Frankie replies to say he received it. If you call that number, Frankie greets you and offers to take a message; we store the recording, your number, how long it lasted, and the time. The recording is held by our telephone provider and pointed to from your account. Both are deleted when your account is closed, including the recording held by the provider. A text or a call from a number that is not on any account is stored the same way but matched to nobody, and receives no reply.
Where you are
You may add a street address, a city and state, or only a ZIP code. It is entirely optional and any part of it stands alone. Frankie uses it to answer local questions, so that asking about the weather, a pharmacy, or a store does not begin with him asking where you live. When you first arrive, our network provider tells us the general area your connection appears to come from, and we use it only to preselect your time zone on the sign up form, which you can change before and after you create the account. We do not store that guess unless you enter it yourself, and we never look your address up with an outside service.
4Where information comes from#
- From you, when you sign up, use Frankie, save a person, set a reminder, or write to support.
- From the family member or friend who set up the account, if someone created it for you. They may have entered your name, your phone number, your time zone, a note about you, and the people in your life.
- From people who write to your assistant address. Their name, their address, and whatever they chose to send arrives in your account. They are not our users and they did not agree to this policy, which is one more reason we treat mail carefully and never mine it.
- Automatically from your device and browser, which is the technical record described above.
- From the providers that carry messages for us, which report whether a text message or an email was accepted, delayed, or rejected.
- Worked out from the ZIP code you saved, as described immediately below. Nothing here comes from your phone: we do not use GPS, we do not ask your browser for your location, and we do not track where you go.
How your area is worked out, and what we do not keep
If you save a ZIP code, Frankie uses it to know where "here" means, so that a question about the weather, the roads, or what is happening in town can be answered without asking you every time. This is worked out once and then remembered, and it involves no tracking of any kind.
From the ZIP code we derive, and store against your account, only these things: the approximate centre of that ZIP code area, the county it sits in, the National Weather Service forecast grid and alert zone that cover it, and the name of the wider metropolitan or county area it belongs to. That last one, and not your ZIP code, is what the news, weather and alert lookups are actually keyed to, and it is shared by everyone in your area.
We deliberately do not keep the precise part. One of the public services we use answers with a census block, which is a group of a few dozen households. We read the county out of that answer and discard the block. It is never stored against your account and it never reaches the assistant. Frankie is told the name of your area, never a street or a neighbourhood, and your street address, if you saved one, is used only when you ask for it and is never sent to any of the services listed here.
You can remove a saved ZIP code at any time on the Settings page. If you do, the local features stop and Frankie goes back to asking which place you mean.
5Sensitive information#
A general purpose assistant will be told sensitive things. We do not go looking for them, and we cannot stop you from telling Frankie whatever you want to tell him. Realistically, the following can end up in an account.
- Health and medication information, including what a prescription label says.
- The contents of your mail and your messages, where we are not the intended recipient.
- Financial details that appear in a bill or a statement you photograph.
- Government identifiers that appear on a document you share.
- Anything a conversation happens to reveal about your religion, your background, your family situation, your immigration status, or your sex life.
- Your account password, which we store only as a one way hash that cannot be turned back into the password.
- Voice prints, one for each language you taught Frankie, only if you chose to turn on voice lock, as described in section 7.
We use sensitive information only to give you the service you asked for, to keep the service secure, and to comply with the law. We do not use it to infer characteristics about you, we do not use it to build a profile, and we never sell it or share it for advertising. Several states, including Maryland, prohibit selling sensitive data outright; our practice is the same everywhere, for everyone. Where a state gives you a right to limit the use of sensitive information, section 15 explains it, and you may exercise it even if your state does not offer it.
Practical advice, offered plainly: Frankie works fine without your Social Security number, your full account numbers, or your passwords. Do not read them to him or photograph them if you do not need to. A good rule is to treat a conversation with Frankie like a conversation in a room with a note taker in it.
6Consumer health data notice#
This section is the consumer health data privacy notice required by the Washington My Health My Data Act and the Nevada consumer health data law, and it applies to everyone. It repeats, in one place, everything that concerns information about a person's health.
What health related information we collect
Only what you choose to give us in the course of using the assistant. In practice that can include: a photograph of a prescription label or a pharmacy printout; a letter or bill from a doctor, hospital, insurer, or pharmacy; a description of a symptom, a condition, a treatment, or a medication that you type or say out loud; a reminder you create to take a medication or attend an appointment; a message about health that arrives at your assistant address; and the notes Frankie keeps so he remembers what you told him. We do not collect health data from any other source, we do not buy it, and we do not infer a diagnosis about you.
Why we collect it
For one reason: to answer the question you asked and to deliver the reminder you set. We do not use health related information for marketing, for advertising, for research, for product analytics, or for training artificial intelligence models.
Who else sees it
Only the processing providers described in section 10, and only to the extent needed to produce your answer or deliver your message. They act on our instructions under contracts that forbid using it for their own purposes. We do not sell consumer health data, we have never sold it, and we do not collect a valid authorization to sell it because we do not intend to sell it. We share it with law enforcement or a government agency only when a valid legal process requires it, and we will tell you unless we are prohibited from doing so.
How long it stays
Photographs and documents are not retained after the answer is produced. Everything else follows the schedule in section 13, which is generally the life of the account.
Your rights over it
You may ask us to confirm whether we have consumer health data about you, to give you a list of every third party and affiliate we shared it with, to delete it, and to withdraw any consent you gave. Write to our privacy request form from the address on your account, or use the process in section 16. We answer within 45 days and may extend once by 45 days if the request is complex, and we will tell you if we do. Deletion means deletion from our live systems and from our processing providers, and from backups as those are cycled out under section 13. If we cannot delete something because the law requires us to keep it, we will tell you which record and why.
If you disagree with our decision
You may appeal, free of charge, by replying to our answer or writing to our privacy request form with the word Appeal in the subject. We respond within 45 days with our decision and the reasons for it. Washington residents may also contact the Washington State Attorney General at atg.wa.gov, and Nevada residents may contact the Nevada Attorney General at ag.nv.gov.
7Voice, photos, and biometrics#
Live spoken conversation
When you tap the microphone and talk, your device opens a direct, encrypted connection to the provider that runs the speech and language models. The audio travels from your device to that provider and does not pass through our servers. Our server's only role is to hand your browser a temporary credential that expires after 30 minutes. The provider converts the audio to text and produces spoken audio in reply. We do not record or store the audio of a spoken conversation. The text of what was said is saved in your account, the same as if you had typed it, so Frankie can remember it.
Recordings sent for transcription
On devices where live conversation does not work, the app records a short clip and sends it to our server, which passes it straight to the transcription provider and returns the words. The clip is held only for the moment it takes to do that and is never written to our database.
Reading aloud
When Frankie reads something out loud, the text is sent to the speech provider and the audio comes back and plays. We do not store the audio.
Voiceprints: none, unless you turn on voice lock
By default we do not create, capture, collect, store, use, sell, lease, trade, or otherwise profit from a voiceprint, a face geometry scan, a fingerprint, or any other biometric identifier. Audio is converted into words and the sound itself is discarded. We do not use photographs to recognize faces.
The one exception is voice lock, an optional feature that is off until you set it up yourself. Voice lock exists so that Frankie takes spoken instructions only from you: if a visitor, a television, or someone interrupting you speaks near the microphone, Frankie ignores it. To make that work you read three short lines out loud, and our own server turns those recordings into a small set of numbers that describes the sound of your voice, called a voice print. You may also, if you want to, teach a second print called your everyday voice, by saying six short words from wherever you normally sit; it exists because reading up close does not describe how you sound answering a question from across the room, and it is entirely optional. If you speak more than one language, you can repeat both of these in each of your languages, and each language gets its own prints, because the same voice sounds a little different from one language to the next. We keep only the numbers. The recordings themselves are discarded the moment the numbers are computed, during setup and during every later check alike.
A voice print is created only after you check a consent box that says exactly what is being saved; that checkbox is the written release that Illinois, Texas, and Washington law requires. The prints are computed and checked on our own servers and are never sent to, or shared with, any other company. They are used for one purpose only: deciding whether the voice speaking to Frankie is yours. They are never used for marketing, never used to identify you anywhere else, never sold, and never disclosed. You can turn voice lock off, or delete any print or all of them outright, in Settings at any time, and closing the account deletes them with everything else. We never profit from biometric information.
Photographs and documents
Before any conversation reaches the model provider at all, the app asks for your permission, in plain words, the first time you sign in: it names OpenAI, lists what is sent, and waits for you to agree. If you do not agree, nothing is ever sent. You can take that permission back at any time in Settings, under Account, with the button called Take back my OK; from that moment nothing more is sent, and the app asks for your permission again before the assistant can answer. An image or PDF you share in a conversation is sent to the model provider, read, and used to produce the answer. It is not saved on our servers afterward. The text of the answer stays in your conversation. Pictures the assistant generates for you are stored under an unguessable file name so they can be shown and shared, and are deleted after about 30 days. A file you deliberately save into Frankie Drive is a different thing and is kept for you; that is described next.
Files you keep in Frankie Drive
Frankie Drive is the one place where we hold on to your files on purpose. What you put there stays there until you remove it or close your account. Every account starts with one gigabyte.
The files themselves sit in encrypted storage with a major cloud provider, under a name made of random characters that says nothing about you or about what the file is. Everything you actually see, the name you gave it and the folder it is in, is held separately. When a document arrives we read the words out of it once and keep those words so the file can be found by searching later. For a photograph we make a small preview picture. Nobody at that storage company can read any of it in the ordinary course of things, and we never hand them anything that identifies you.
No address belonging to the storage company is ever given out. Every file, whether you are looking at your own or somebody has opened a link you sent, is served through an address on our own site. That is a deliberate choice rather than a side effect, and it is why a link you sent your daughter last year still works today.
A file is private until you make a link for it, and there is no way to reach a private file without signing in as you. When you do make a link, whoever holds that link can open the file, which is the point of it, so treat one like a key. You can put a password on a link, take the password off again without breaking the link, set it to run out, or stop it entirely, and stopping it takes effect at once. A link that does not work says so in the same words whichever reason it is, so that no stranger can learn from us whether a link was ever real.
Frankie can search your drive, tell you what is in a folder, read a document to you, and save something into it when you ask. He cannot delete, move, rename, or share anything, and he has no way to make a link. An assistant that could publish somebody's papers is one misheard sentence away from doing it, and the person it happened to would not know.
Searching the web with Frankie
Frankie Search is its own screen in the menu, and it works the same way on a telephone as it does on a desktop computer. Searching sends what you typed to our search provider, and nothing that identifies you goes with it: not your name, not your address, and not your account. The results are drawn by us. Small preview pictures in the results are passed through our server rather than fetched from the sites they belong to, so those sites are not told who is looking.
When you press a result, the website opens in a new tab of your own browser. From that moment you are dealing with that site directly, exactly as if you had typed its address yourself: it can set its own cookies and keep its own record of your visit, and its privacy policy applies to it, not ours. We do not see what you do there, and Frankie does not follow you there.
Frankie Search keeps a history for you, and that is the whole purpose of it. We save what you searched for, the day you searched it, and the results that came back, and we keep them until you remove them or close your account. Nothing expires on its own. This is deliberate: the difficulty most people have is not searching, it is finding again something they already found once, and a history that quietly emptied itself would fail them at exactly the moment they needed it.
Opening a past search again costs nothing and reaches nobody. It is drawn from our own records of what you were shown that day, so no request goes out to the search provider and no other company learns that you looked at it a second time.
You are in charge of the history. You can remove one search, or all of them at once, from the buttons on that screen, and either way the results saved with them go too. Closing your account deletes the whole history with everything else. Frankie himself can look through your past searches and put one back on your screen when you ask him to, because that is what the screen is for, but he cannot remove anything from it and he cannot keep or unkeep a result. Removing is something a person does on purpose.
Frankie can run a search when you ask him to, and he can read the results. He cannot press a result, open a website, fill anything in, or sign in to anything on your behalf, by design.
Other people in the room
If another person speaks while a conversation is running, their words are transcribed into your account too. Some states require everyone in a conversation to consent to being recorded. Please do not use Frankie to capture people who have not agreed to it. If voice lock is on, a turn spoken in a voice that is not yours is dropped: Frankie does not act on it, and it is removed from the conversation rather than saved.
8How we use information#
- To operate the assistant and answer what you ask.
- To remember your context, so Frankie can pick up where you left off and does not make you repeat yourself.
- To deliver the reminders, text messages, and emails you ask for, at the right local time.
- To receive, show, and explain the mail sent to your assistant address.
- To create and secure your account, to sign you in, and to reset a password.
- To send service messages, such as a welcome letter, a password reset, a security notice, or word of an important change.
- To keep the service safe: rate limiting, abuse detection, fraud prevention, and investigating misuse.
- To fix problems and improve the service, using error records and usage counts rather than the content of conversations.
- To comply with law, respond to valid legal process, and establish or defend legal claims.
- To bill you, if you are ever on a paid plan, and to keep the tax and accounting records the law requires.
We do not use your information for any purpose that is materially different from these, or from the purposes disclosed when it was collected, without telling you first.
9How the answers are made#
Frankie is not a person and not a fixed program. The answers come from large artificial intelligence models operated by a specialist provider we contract with. Here is what that means for your information, stated plainly because it is the part people most want to understand.
- What gets sent. To answer a question, we send the provider your current message, the relevant recent part of the conversation, the durable facts Frankie has remembered about you, the first names and details of the people you saved when the request involves reaching them, and any photograph, document, or pasted text you attached. We send what the answer needs, not your entire history.
- What does not get sent. Your password, in any form. Your full account record. Other users' data, ever.
- Training. Content sent through the provider's business interface is not used to train its models, by contract and by that provider's published policy. We do not train models on your content either, and we do not permit anyone else to.
- The provider's own retention. The provider may hold a copy for a limited period for abuse monitoring and legal compliance, after which it is deleted. We have configured our account to keep this to the minimum offered.
- Internet search. When Frankie looks something up, the search terms leave our service. Do not ask him to search for something you would not want typed into a search engine.
- Human review. We do not read your conversations for curiosity, product research, or quality scoring. A person on our side looks at account content only when you ask us to help with a specific problem, when we are investigating a security or abuse report, or when the law requires it. Access is limited to the people who need it and is logged.
10When we share information#
We share only in the situations below. In every case the recipient is bound by contract to use the information solely to perform the work we hired them for.
| Who | What they receive | Why |
|---|---|---|
| Our artificial intelligence model provider, currently OpenAI | The conversation content, files, and audio described in sections 7 and 9. Nothing is sent until you have given your permission in the app, which is asked for in plain words the first time you sign in and can be taken back at any time in Settings, under Account. | To produce answers, transcribe speech, speak aloud, search, and generate pictures. OpenAI is bound by contract to use what it receives only to produce those answers for you: not to train its models, not for advertising, and not for any purpose of its own, and to protect it to the same standard this policy promises you. |
| Our text message carrier | Your mobile number and the text of the message. | To deliver a reminder or a note to your own phone. |
| Our email delivery provider | Messages sent to and from your assistant address, including sender, recipient, subject, and body. | To receive your mail and to send mail you asked for. |
| Our network and security provider | Connection metadata such as your internet address and the pages requested. | To protect the site from attack and to serve it quickly. |
| Our hosting provider | Custody of the servers and the encrypted storage the data sits on. | To run the servers. |
| Our cloud storage provider | Custody of the files you save in Frankie Drive, encrypted, under random names that carry no meaning. They receive nothing that identifies you: not your name, not your email address, not the name you gave the file, and not the folder it is in. | To hold your own papers and photographs safely and to keep a spare copy. They store the bytes and nothing else. |
| Our visit counting provider | Which pages were opened, roughly which country the visit came from, and the kind of device and browser. Never anything from your account and never anything you said to Frankie. | To see how many people use the site and which pages need work. It does not run at all for a visitor whose browser sends a privacy signal. See section 12. |
| Our live chat provider, when the chat window is switched on | Only what you type into the chat window, plus the connection details any website receives. It is switched off at the moment and receives nothing at all. | To let you reach a person for help without leaving the site. |
| The United States National Weather Service, the Federal Communications Commission, the Environmental Protection Agency, the Federal Emergency Management Agency, and the United States Geological Survey | A ZIP code, or a point on the map at the centre of a ZIP code area. Never your name, never your address, never anything you said to Frankie. | To look up the official forecast, the official warnings for your area, the air quality, and whether the area has a federal disaster declaration or recent earthquakes. These are free public government services. |
| Our web search provider | The name of your metropolitan area, and what you asked to look up. Never your name, your address, your ZIP code, or anything identifying you. | To find what your local news outlets are reporting, and to check whether something you were told is true. The lookup is shared by everyone in the same area, so it says nothing about any one person. |
| Our maps and address provider | An address while you are typing it, so that it can be completed and checked; and a point on the map for your area, with a place you asked about, when you ask what the traffic is doing. Never your name, never your account, never anything you said to Frankie. | To finish an address as you type it, to check that it is a real and complete address that mail can reach, and to tell you how the roads are and how long a drive will actually take right now. |
| Our payment processor | Your payment details, which go directly to them when you pay for the subscription or a Frankie Task. | To take payment. We never hold full card numbers. |
| Professional advisers | Only what a specific matter requires. | Our lawyers and accountants, under a duty of confidentiality. |
| Law enforcement, courts, and regulators | Only what a valid legal demand requires. | To comply with the law. We review each demand, we push back on overbroad ones, and we notify you unless we are legally prohibited. |
| To protect people | Only what is necessary. | Where we believe in good faith that disclosure is needed to prevent death, serious physical harm, or serious financial crime against a person. |
| A buyer or successor | Account records, as part of the business. | If the business is sold, merged, or reorganized. We will tell you before your information becomes subject to a different privacy policy, and the buyer must honor the commitments in this one for information collected under it. |
Under California law these providers are "service providers" and these disclosures are "business purpose" disclosures, not sales. The current list of the specific companies behind each role is available by writing to our privacy request form. We keep the roles rather than the names in this policy so that changing a vendor does not require you to reread a legal document. The one exception is our model provider, named above: that is the sharing you most deserve to see plainly, and if that company ever changes, this policy will change the same day.
There is one place where something you wrote reaches another person, and it only ever happens because both of you asked for it. In Frankie Social, two accounts become friends when one sends a request and the other accepts it. From then until the friendship ends, each of you can see the other's name, the photograph they have chosen to add if they added one, and whatever either of you writes or shares into that one conversation. Somebody you have sent a request to can see your name and your photograph before they answer it, which is the point of it: they have to be able to tell who is asking. Nothing else crosses over. Your other conversations with Frankie, the people you saved, your mail, your reminders, your photographs, and your documents remain yours alone, and a friend cannot reach any of them.
There is no directory and no public profile. Nobody can search for you, browse a list of members, or put themselves in front of you uninvited, and when somebody types an address or a number to send a request, we do not tell them whether it belongs to an account. Ending a friendship stops messages in both directions at once and blocks a further request from that person for thirty days.
If you close your account, your friendships end and the messages other people sent you are deleted with the rest of your account. Messages you had already sent to a friend stay in that friend's copy of the conversation, with your name taken off them. A message you sent somebody is their record of a conversation they took part in, in the same way a letter you posted them is theirs, and closing your account should not reach into another person's history and rewrite it. The account deletion page sets this out in full.
The other place something of yours can reach another person is a share link you make for a file or a folder in Frankie Drive, and again it only happens because you did it on purpose. Whoever holds that link can open what it points at, so treat one like a key to a door. You can put a password on it, set it to run out on a date, or stop it altogether, and stopping it works immediately. Section 7 describes it in full.
Apart from a Frankie Social conversation and a share link you made yourself, we do not disclose your information to other users.
11What we never do#
- We do not sell personal information, in the ordinary sense of the word or in the broad statutory sense that includes disclosure for anything of value.
- We do not share personal information for cross context behavioral advertising, and we do not run advertising of any kind.
- We do not use your content to train artificial intelligence models.
- We do not sell or license consumer health data, and we do not sell sensitive information of any category.
- We do not send your information to data brokers, list vendors, or people search sites.
- We do not market to the people you saved in your contact list. Being in someone's Frankie account never puts a person on any list of ours.
- We do not use the microphone or camera when you are not actively using a feature that needs them, and we do not listen in the background.
- We do not read your conversations for our own purposes. See the human review paragraph in section 9.
- We do not create biometric identifiers, with one exception you control: the optional voice lock print described in section 7. Even then, we never sell it, share it, or profit from it.
- We do not charge you, delay you, or degrade the service because you exercised a privacy right.
12Cookies, storage, and tracking signals#
The site uses the smallest amount of storage that a signed in service can use.
- One sign in cookie. It carries your account number, an expiry, and a signature, and it is marked HttpOnly, Secure, and SameSite Lax. It is strictly necessary to keep you signed in. It lasts up to one year and is invalidated immediately if you change your password or sign out.
- Local storage on your own device, used by the app to hold the current conversation, your interface preferences, your accessibility choices, and offline files so the app opens quickly. It never leaves your device except when the conversation is saved to your account, and it is cleared when you sign out or clear your browser data.
- Visit counting. Google Analytics tells us how many people came, which pages they opened, and roughly which country and what kind of device they used, so we can find the pages that confuse people and fix them. It is set to measurement only: Google's advertising features, advertising personalization, and cross device signals are all switched off, so nothing gathered here can feed an advertising profile anywhere. It sets its own cookies on this website to tell one visit apart from another. It never receives your conversations, your mail, your photographs, your voice, your voice print, or anything you said or typed to Frankie.
- The chat button. The chat window is switched off at the moment, so nothing on this site loads it and no chat provider receives anything. When we switch it back on, Tawk.to runs the small window in the corner of the page so you can reach a person without leaving the site. It stores an identifier on your device so a chat you started stays with you as you move from page to page, and it receives only what you choose to type into that window plus the ordinary connection details every website receives. Either way it has no access to your account and nothing from Frankie ever reaches it. Use the contact form in the meantime.
- Still none of these: no advertising pixels, no ad network tags, no session recording, no fingerprinting, no social network buttons, and nothing sold or handed to a data broker.
Global Privacy Control and Do Not Track. If your browser sends a Global Privacy Control signal, or the older Do Not Track header, the visit counting described above does not run at all on your visit. Nothing is measured and no analytics cookie is set. The chat button still works, because it is there to help you and only ever sees what you type into it. Beyond that, an opt out signal has nothing to act on here: we do not sell or share personal information and we do not run targeted advertising.
You can also stop the counting yourself at any time by turning on Do Not Track or a Global Privacy Control extension in your browser, or by blocking analytics cookies. Nothing about the service changes if you do. Frankie works exactly the same.
13How long we keep information#
We keep information for as long as it is needed for the purpose it was collected for, and no longer. Concretely:
| Information | How long |
|---|---|
| Account record, contacts, reminders | For the life of the account, then deleted within 30 days of closure. |
| Conversations, summaries, and remembered facts | For the life of the account, so Frankie can remember. Deleting a conversation from History inside the app also deletes our stored copy of it right away. You can also ask us to delete all of it, or any part you identify. |
| Photographs, documents, and pasted text you share in a conversation | Not retained. Read to produce the answer, then discarded. |
| Files and folders you save in Frankie Drive, with their previews and the words read out of documents | For the life of the account, because the point of them is to still be there. Removing a file in the app deletes it and its stored copy right away. Closing the account deletes every file and every stored copy of it. |
| Share links you made for a file or folder | Until you stop the link, or it reaches the date you set, or you close the account. Stopping a link takes effect at once. |
| Frankie Search history: what you searched for and the results that came back | For the life of the account. Nothing expires on its own, because being able to find something again later is the purpose of it. You can remove one search or all of them from that screen at any time, and closing the account deletes the whole history. |
| Live conversation audio | Not retained by us at any point. |
| Short recordings sent for transcription | Held only for the seconds it takes to transcribe, then discarded. |
| Generated pictures | About 30 days, then deleted automatically. |
| Payments, subscriptions, and usage records | Seven years, because tax and accounting rules require it. These records hold amounts, dates, and what was bought, never card numbers. |
| Mail in your assistant mailbox, and attachments we saved for you | For the life of the account. The delivery provider's own temporary copy expires after about 3 days. |
| Record of mail Frankie sent for you | For the life of the account. |
| Reminder delivery records | For the life of the account. |
| Text messages sent to Frankie's telephone number | For the life of the account, then deleted with it. |
| Voicemail left on Frankie's telephone number | For the life of the account. Closing the account deletes both our record and the recording held by our telephone provider. |
| Your address or ZIP code, if you add one | For the life of the account. You can clear it in Settings at any time. |
| Voice print, only if you turn on voice lock | Until you delete it in Settings or close the account, whichever comes first. The recordings used to make it are never retained at all. |
| Technical and security logs | Rotated continuously and typically held for days rather than months. Rate limiting counters are swept after 3 days. |
| Password reset tokens | 60 minutes, single use, and stored only as a hash. |
| Accessibility and interface choices | On your device until you clear your browser data. We never receive them. |
| Support messages | Up to 3 years, so we can see the history of an issue. |
| Backups | Encrypted backups rotate on a rolling schedule. Deleted information disappears from every backup copy within 90 days at the outside. |
| Billing and tax records, if you ever pay us | As long as tax and accounting law requires, generally 7 years, in a separate financial record and not in the assistant. |
We may keep information longer where we must to comply with a legal obligation, to resolve a dispute, to enforce our agreements, or where a legal hold requires it. When we do, we keep only what is needed for that purpose.
14How we protect information#
- Traffic is encrypted in transit with modern TLS, and the site is served only over HTTPS.
- Passwords are stored as one way hashes with a per password salt. Nobody at our company can see or recover your password.
- The sign in cookie is bound to your password. Changing your password ends every other session at once.
- Every database query is filtered by the signed in account, and an account identifier supplied by a browser is never trusted for ownership.
- Uploaded files are checked by content rather than by file name, size limited, and stored where program code cannot be executed.
- Secrets and provider keys live in a file outside the web directory that the web server cannot serve, and the model provider key never reaches your browser.
- A content security policy restricts what the pages may load and connect to, and the site refuses to be framed by another site.
- Rate limits and daily allowances sit in front of every endpoint to blunt automated abuse.
- Administrative access is limited to the people who need it, over authenticated channels, and administrative actions are logged.
- The service is monitored continuously and we are alerted when it stops responding.
No system on the internet is perfectly secure, and we do not claim otherwise. Protect your side too: use a password you do not reuse anywhere else, sign out on a shared device, and tell us right away if something looks wrong.
15Your rights#
State privacy laws give different rights to residents of different states. Rather than run a maze, we extend all of the following to everyone who uses FrankieGPT, in every state, at no charge.
- Know and access. Ask what personal information we have about you, where it came from, why we have it, who we disclosed it to, and get a copy of the specific pieces.
- Portability. Get that copy in a structured, commonly used, machine readable format you can take elsewhere.
- Correct. Fix anything inaccurate. Most of it you can fix yourself on the Settings page in seconds.
- Delete. Have your personal information deleted, either all of it with the account or a part you identify. The fastest path is the Delete account button in Settings, which removes the account and its contents immediately.
- Opt out of sale, sharing, targeted advertising, and profiling. There is nothing to opt out of, because we do none of these. The right stands anyway.
- Limit the use of sensitive information. We already limit it to providing the service and securing it, which is the standard the law sets.
- Withdraw consent, including consent to receive text messages and consent related to health data.
- Appeal. If we refuse a request, you can appeal at no cost and we will explain our reasoning in writing.
- Non discrimination. We will never deny service, charge a different price, or give you a worse experience because you exercised a right. We offer no financial incentive in exchange for your data.
16How to make a request#
Because FrankieGPT operates entirely online and deals directly with you, email is the way to reach us, and it is the method the law allows for a business like ours.
- Do it yourself, immediately: the Settings page inside the app lets you edit your name, note, language, time zone, address, and mobile number, add and remove saved people, and change your password. Changing your mobile number requires confirming the new one by text, because the account cannot be left without a number we can reach. If you want to stop text messages altogether, close the account, which the same page does in full.
- Everything else: write to our privacy request form from the email address on your account and tell us what you want. Plain words are fine. "Send me everything you have" and "delete my account and all of it" are both perfectly clear requests. If writing is hard for you, ask Frankie to help you write it, or send it on paper to the address in section 28.
- How we verify you. We match the request to the email address on the account, and for a request to access or delete we send a confirmation link to that address that you must click. If the request comes from another address, or the account address is no longer reachable, we will ask for enough detail to match the account with reasonable certainty. We only use what you send us for verification and then delete it.
- Authorized agents. An agent may act for you with your written permission, which we may confirm with you directly. A person acting under a power of attorney or as a court appointed conservator or guardian should send the document.
- How fast. We confirm receipt within 10 business days and answer within 45 calendar days. If a request is genuinely complex we may take one additional 45 day extension, and we will tell you why before we do.
- Cost. Free. If a request is manifestly unfounded or repetitive we may charge a reasonable fee or decline, and we will explain why first.
- Appeals. Reply to our answer, or write with Appeal in the subject line, and we will review it and respond within 45 days. If we still say no, we will tell you how to contact your state attorney general.
- Limits we have to observe. We may not be able to delete something we are required by law to keep, information needed to complete a transaction you asked for, or records we need to detect security incidents or defend a legal claim. We will tell you specifically what we kept and why.
If someone else set up your account and you want it in your own hands, or out of theirs, write to us and we will work it out with you.
17California residents#
This section is for residents of California and is provided under the California Consumer Privacy Act as amended by the California Privacy Rights Act.
Categories collected in the last 12 months
| Statutory category | Collected | Disclosed for a business purpose to |
|---|---|---|
| Identifiers, such as name, email address, phone number, internet address, account identifiers | Yes | Model, messaging, email, network, and hosting providers |
| Customer records under Civil Code 1798.80, such as contact details and a hashed password | Yes | Hosting provider |
| Protected classifications, such as age or health status | Only if you volunteer it in a conversation | Model provider |
| Commercial information, such as a subscription or task payment record | When you pay for the service | Payment processor |
| Biometric information | Only if you turn on voice lock: voice prints, per language you teach Frankie and per kind of print, collected from you with your consent, used only to recognize your voice, disclosed to nobody | No |
| Internet or network activity, such as request logs and feature usage | Yes | Network and hosting providers |
| Precise geolocation | No. Time zone only. | Not applicable |
| Audio, electronic, visual, and similar information, such as voice audio, photographs, documents, and generated pictures | Yes | Model provider |
| Professional, employment, or education information | Only if you volunteer it | Model provider |
| Inferences, such as conversation summaries and remembered facts | Yes | Model provider |
| Sensitive personal information: account credentials, health related content, and the contents of mail and messages where we are not the intended recipient | Yes | Model, messaging, and email providers |
Sale, sharing, and sensitive information
We have not sold personal information and have not shared it for cross context behavioral advertising in the preceding 12 months, and we do not do so now. We have not sold or shared the personal information of any consumer we know to be under 16 years of age, because our service is not offered to anyone under 18. We use sensitive personal information only for the purposes permitted by section 7027(m) of the California Consumer Privacy Act regulations, which means providing the service you requested, security, and legal compliance. You therefore have nothing to limit, but you may still send us a request to limit and we will honor it.
Retention
Section 13 states the retention period for each category. We do not keep personal information for longer than is reasonably necessary for the disclosed purpose.
Your California rights
Know, access, correct, delete, portability, opt out of sale and sharing, limit the use of sensitive information, and no retaliation for exercising any of them. Section 15 describes each one and section 16 says how to use them. You may designate an authorized agent. We respond within 45 days with one permitted 45 day extension.
Shine the Light
California Civil Code section 1798.83 lets residents ask about personal information shared with third parties for those third parties' own direct marketing. We do not share personal information for that purpose, so there is nothing to report, and we will confirm that in writing on request.
Notice of financial incentive
We do not offer any financial incentive or price difference in exchange for personal information.
18Other state disclosures#
Comprehensive consumer privacy laws are in force or coming into force in many states, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Florida, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, and Rhode Island. Our practice is to give everyone the same rights rather than sort people by address, so section 15 is what applies to you wherever you live. A few state specific points are worth stating outright.
- No targeted advertising, no sale, no profiling with legal effects. These are the three activities most of these laws let you opt out of. We do none of them, so opt out mechanisms would be theater. Section 12 explains how we treat an opt out signal anyway.
- Consent for sensitive data. Virginia, Colorado, Connecticut, and several others require consent before processing sensitive data. Your act of giving that information to the assistant, in order to get the answer you asked for, is that consent, and you may withdraw it by writing to us and asking for the information to be deleted.
- Maryland. We do not sell sensitive data, and we collect only what is reasonably necessary to provide the service you asked for.
- Colorado, Connecticut, Virginia, and others. You have the right to appeal a refused request, described in section 16, and if the appeal is refused you may contact your state attorney general.
- Nevada. Nevada residents may direct us not to sell covered information. We do not sell it. Submit any such direction to our privacy request form. Nevada consumer health data is covered by section 6.
- Washington. Section 6 is the consumer health data notice required by the My Health My Data Act.
- Illinois, Texas, and Washington biometric laws. Section 7 explains the one biometric identifier we can hold, the optional voice lock print: it is created only with your prior written consent, kept only as long as the feature or the account lasts, never sold, never disclosed, and deletable by you at any time. We do not collect any other biometric identifier.
- Data broker registration. We are not a data broker in California, Texas, Vermont, or Oregon, because we do not sell data about people we do not have a direct relationship with.
19Adults only, and information about children#
FrankieGPT is for adults. Everyone who uses it, including a person an account was set up for, must be 18 or older. We do not knowingly collect personal information from anyone under 18, and certainly not from anyone under 13. There is no child mode, no teen mode, and no parental consent path, because there is no version of this product intended for a minor.
We do not sell or share the personal information of minors, we show no advertising, and we build no profiles, so the practices that state age appropriate design laws are aimed at do not exist here. We do not collect a date of birth, which means we rely on the promise in the Terms of Service rather than on age verification.
A child's information can still reach us in ordinary use: a grandchild appears in a photograph you share, or is named in a conversation, or writes to your assistant address. We treat that information under this policy, we never use it for anything beyond answering you, and we delete it on request. A parent or guardian who believes we hold information about their child should write to our privacy request form and we will delete it promptly and confirm. If we learn that an account is being used by someone under 18, we close it and delete its contents.
20Illness, death, and shared devices#
Three ordinary life situations affect privacy more than any setting does, and it is better to say so than to leave them unaddressed.
- A shared device is a shared account. Anyone who picks up a phone or a tablet where you are still signed in can read every conversation, every stored letter, and every note. If a household device is used by more than one person, sign out when you finish, or use separate accounts.
- Someone who helps you may see everything. There is one level of access. A family member who has your password, or who set the account up, can read all of it. That is worth knowing before you tell Frankie something you would not tell them.
- Death and incapacity. Section 8 of the Terms of Service explains who can close an account and what happens to its contents. In short: a properly documented representative can have an account closed and deleted, and we do not hand over the contents of someone's conversations to a relative without a court order, the applicable digital assets law, or clear written directions from the account holder. Conversations often contain other people's information, and those people did not agree to have it read.
21De-identified and aggregate information#
We look at counts: how many accounts set a reminder this week, how often an endpoint fails, how large a typical upload is. Information used this way is aggregated or stripped of anything that identifies a person. We maintain it in that form, we do not try to re-identify it, and we require anyone who receives it to do the same. Aggregate figures are not personal information and are not subject to the rights in section 15.
22Automated decisions and profiling#
Frankie's answers are generated automatically, which is the entire point of the product. We do not use automated processing to make decisions that produce legal or similarly significant effects about you: no credit, insurance, housing, employment, education, or health care decisions are made here, and no eligibility scoring of any kind happens. Automated systems do decide narrow operational things, such as blocking a request that trips a rate limit or flagging an account for abuse review, and a person reviews any account suspension. If you believe an automated action was wrong, write to us and a human will look at it.
23Security incidents#
If personal information is exposed in a way that triggers a legal notification duty, we will notify affected users and the required authorities within the time the law allows, without unreasonable delay. The notice will say what happened, what information was involved, what we have done, and what you can do. As a health related application that is not covered by HIPAA, we also recognize our obligations under the Federal Trade Commission's Health Breach Notification Rule and will follow it where it applies.
24Where information is processed#
Our servers are in the United States, and the providers that process information for us do so in the United States. If you use the service from another country, you understand that your information will be transferred to and processed in the United States, where the privacy laws are different from those where you live. The service is designed and offered for people in the United States.
25Getting this notice in another form#
A privacy policy nobody can read protects nobody. Every page on this site, including this one, carries an accessibility button that enlarges text, increases spacing, switches to a dyslexia friendly typeface, turns on high contrast or dark mode, highlights links and headings, and adds a reading guide. Press Alt and 0 together to open it from the keyboard.
Frankie will also read this page aloud to you, in English or Russian, if you ask him. And we will send this policy in large print, as plain text, or in another format you can use, at no charge. Write to our privacy request form or see the accessibility statement.
26Other companies and their websites#
When Frankie shows a search result, cites a source, or gives you a phone number or a map link, following it takes you somewhere we do not control. Their privacy practices are their own. Read their policies. Sending an email or a text message likewise puts that content into other companies' systems, where their retention and disclosure rules apply.
27Changes to this policy#
We will update this page when our practices change. The effective date and the last updated date at the top always tell you which version you are reading. If we make a material change, such as collecting a new category of information or using it for a materially different purpose, we will give notice by email to the address on your account or by a notice in the app before the change takes effect, and we will obtain consent where the law requires it. We keep the previous version and will send it to you on request.
28How to reach us#
Privacy questions and requests: our privacy request form
Support and account help: our contact form
Legal notices: our legal notice form
Mail: DotNet Holdings LLC, 1401 21st St Ste R, Sacramento, CA 95811
Effective August 3, 2026. Last updated August 31, 2026.
Back to top