Skip to main content
Frequency

Legal

Privacy Policy

Effective date: November 1, 2026

1. Introduction

Frequency ("we," "us," or "our") operates the website at frequencycaps.com and related services. We are committed to protecting your privacy and being transparent about how we handle your personal information.

This Privacy Policy explains what data we collect, why we collect it, how we use and share it, and what rights you have. By using our website or services, you agree to the practices described below.

2. Information We Collect

Information You Provide

  • Account information: name, email address, and password when you create an account.
  • Profile data: wellness preferences, program selections, and assessment responses you share with us.
  • Purchase information: billing address, shipping address, and payment details processed through PayPal or Authorize.Net.
  • Communications: messages you send us, intake form responses, and journal entries you create within our platform.
  • Voice interactions: when you use our voice features, audio is streamed to ElevenLabs for a live conversation. New live sessions have audio recording disabled at ElevenLabs. Their transcripts are saved privately to your Frequency account; provider transcripts are retained for up to one day and deleted after verified capture. Separately recorded journal entries may retain audio in your account until you delete them.

Information Collected Automatically

  • Usage data: pages visited, features used, time spent, and navigation patterns.
  • Device information: browser type, operating system, screen resolution, and device identifiers.
  • Location data: approximate location derived from your IP address.
  • Cookies and similar technologies: see our cookie disclosures in Section 7 below.

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our platform and services.
  • Process orders and send transactional communications.
  • Respond to your requests using the AI providers listed below. Journal memory is on by default when you start a session or save a new entry, unless you have already turned it off. Existing entries are not added automatically.
  • Send you updates, newsletters, and marketing communications (with your consent).
  • Analyze usage patterns and improve our products.
  • Detect, prevent, and address security issues or fraud.
  • Comply with legal obligations.

4. Third-Party Services

We work with trusted third-party service providers to operate our platform. Each provider receives only the data necessary to perform its function:

  • Supabase: database hosting and authentication. Your account data and application data are stored securely on Supabase infrastructure.
  • PostHog: product analytics. Collects usage data on public pages after your cookie choice. Advertising trackers and session replay are excluded from member pages, including journals, the sanctuary, and orders. You may change your public-site cookie choice at any time.
  • ElevenLabs: voice AI processing. When you talk with Mark AI, ElevenLabs runs the live conversation using hosted DeepSeek, with Google Gemini and then OpenAI as backups, and speaks using the authorized Mark voice. After you accept the voice notice, ordinary voice conversations can receive a few relevant saved memory excerpts when journal memory is on and the session is included. Whole earlier journal entries and attachments are not sent. Future Self voice sharing remains a separate choice for your reviewed perspective. When you choose narrated welcomes, rituals or meditations, their text is sent to ElevenLabs using Mark’s cloned voice. Personalized meditation text can include details from eligible saved memories. Generated history is deleted before the audio is delivered. If that cleanup cannot be confirmed, playback is unavailable and you can read the text or retry. Narration audio is not publicly cached.
  • OpenRouter, Cloudflare Workers AI and OpenAI: written journal responses, insights and meditation scripts use DeepSeek through OpenRouter, with Cloudflare Workers AI as a backup. OpenRouter requests require zero-retention endpoints and deny provider data collection. When memory is on, included entries, extracted facts and current text used to find relevant memories are sent for text embeddings. Embeddings use OpenAI models through OpenRouter, or directly through OpenAI when configured. Provider processing is described separately from the journal and memory records you choose to keep in your Frequency account.
  • PayPal and Authorize.Net: payment processing. These providers handle your payment information directly. We do not store your full payment card details on our servers.
  • Resend: email delivery. Your email address and message content are shared with Resend to deliver transactional and marketing emails.
  • Klaviyo: email marketing. When you sign up through one of our forms, such as the newsletter, a guide, a webinar or a ceremony, or when you place an order or renew a subscription, we send Klaviyo your email address, your name if you gave it, and the details of that sign-up or order, so we can email you and measure how our emails perform. After you choose Accept, the pages and products you view can also be sent to Klaviyo when we know your email address.
  • Vercel: web hosting and content delivery.
  • Sentry: error monitoring. Collects technical error data to help us identify and fix issues.
  • ShipStation: order fulfillment and shipment tracking. It receives the delivery details needed to fulfill your order.
  • AssemblyAI and ElevenLabs: speech-to-text. While you speak in the journal, your voice streams to AssemblyAI or ElevenLabs so your words appear on screen. A finished recording that still needs text is sent through OpenRouter, which requires zero-retention endpoints, to AssemblyAI or ElevenLabs.

Your journal and memory choices

Original journals remain separate from generated memories. When memory is on, eligible saved memories can personalize written and voice journal conversations and guided meditations. Meditations use your selected reflection and include relevant history according to your account memory setting and entry or session exclusions. You can inspect each memory and its source, correct or forget it, exclude an entry, and export your data from your personal wiki. Turning memory off removes stored personal memories and stops historical recall. Deleted or excluded sources cannot be used to regenerate memories from those sources. Voice consent can be revoked in Settings.

Generated meditations are saved in your private Library with their script, source, estimated duration, and any rating or comment you choose to add. You can edit feedback, delete a saved meditation, or export it with your account data. Deleting its source reflection also removes the saved meditation. Saving narrated audio for private replay is a separate, optional choice. When enabled, eligible recordings are kept in your account and replayed without sending the same script for another synthesis. Turning this choice off removes saved audio while keeping the written meditations. Source privacy changes, voice-consent withdrawal and account deletion also remove affected recordings. When your account and source allow memory, a small amount of relevant feedback from your earlier eligible meditations may help personalize its pacing, tone, or imagery. This is personal context for your request, not global model training.

Keyword search reads your own saved entries without sending them to an AI provider. Search by meaning requires a separate choice and journal memory must also be on. It sends the full text of eligible entries you approve, and meaning-search queries you submit, through OpenRouter for embeddings. Existing entries are not selected automatically. Private, held and Future Self entries remain keyword-only. You can remove entries from the search index or turn search by meaning off without deleting your writing. Turning memory off also removes this index. Search queries are not stored in browser history.

5. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

  • Service providers: as described in Section 4, to operate our platform.
  • Legal requirements: when required by law, subpoena, or legal process.
  • Safety: to protect the rights, property, or safety of Frequency, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.
  • With your consent: when you explicitly authorize us to share your information.
  • Advertising measurement: we share data with Meta (Facebook and Instagram) to measure and improve our ads: the advertising cookie identifiers described in Section 7 and, when you buy or sign up, a hashed email address and order details. Meta may combine this with what it knows about your activity on other sites and apps. If you choose Decline or your browser sends Global Privacy Control, we either do not send this to Meta, or we send it under Meta's Limited Data Use setting, which lets Meta use it only to provide services to us.
  • Partners and affiliates: when you arrive through a partner or affiliate link, we record that link so we can credit and pay the partner. For affiliate networks we report that their link led to an order, with the order number and amount.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

  • Account data: retained while your account is active and for 30 days after deletion request.
  • Purchase records: retained for 7 years to comply with tax and accounting obligations.
  • Analytics data: retained for up to 24 months, then aggregated or deleted.
  • Communications: retained for the duration of the business relationship unless you request earlier deletion.

7. Cookies and Tracking Technologies

We use the following types of cookies:

  • Essential cookies: required for the site to function (authentication, security). These cannot be disabled.
  • Analytics cookies: PostHog, Google Analytics (loaded through Google Tag Manager) and Microsoft Clarity help us understand how visitors use our site. On public pages, Clarity also records how each page is used, such as clicks, scrolling and mouse movement. These are only set with your consent: they load after you choose Accept, and Google and Microsoft may connect this data with what they learn on other sites.
  • Advertising cookies: Meta's _fbp and _fbc let us measure whether our ads lead to visits and purchases. The Meta pixel itself loads only after you choose Accept.
  • Partner and affiliate cookies: frequency_affiliate, ss_subid and ss_click record which partner or affiliate link brought you to us, so we can credit that partner.

In the United States and most other countries, advertising and partner cookies are set when you first visit. Choosing Decline on the cookie banner, or using a browser that sends the Global Privacy Control signal, turns them off and removes any already set. In the European Union, the European Economic Area and the United Kingdom they are set only after you choose Accept. We do not respond to the older Do Not Track browser signal.

You can manage your cookie preferences at any time using the cookie settings banner on our site, or by adjusting your browser settings.

8. Your Rights

All Users

Regardless of your location, you have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Request deletion of your personal information.
  • Opt out of marketing communications at any time.
  • Withdraw consent for analytics tracking.

California Residents (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights:

  • Right to Know: you may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: you may request that we delete your personal information, subject to certain exceptions (e.g., completing a transaction, legal obligations).
  • Right to Opt-Out of Sale: we do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" link.
  • Right to Non-Discrimination: we will not discriminate against you for exercising any of your CCPA rights.

To exercise your CCPA rights, contact us at privacy@frequencycaps.com or use the contact information below. We will verify your identity before processing your request and respond within 45 days.

European Residents (GDPR)

If you are in the European Economic Area (EEA) or United Kingdom, you also have the right to:

  • Data portability: receive your data in a structured, machine-readable format.
  • Restrict processing: request that we limit how we use your data.
  • Object to processing: object to processing based on legitimate interests.
  • Lodge a complaint: file a complaint with your local data protection authority.

9. Data Security

We implement industry-standard security measures to protect your personal information, including encryption in transit (TLS/SSL), encrypted storage, access controls, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this page and, where appropriate, through email or an in-app notification. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us: