Privacy Policy

Last updated November 1, 2026

MonyCompany Inc. (“we,” “us,” or “our”) operates Frida, a personal agent for iPhone, offered in the United States and Canada. Frida keeps your conversation, and what it knows about you, on your phone. This policy explains what reaches us, what leaves your phone, who receives it and why, and what you can ask us to do about any of it.

Frida sends what you share with it to the AI services and the advertising partner named in section 3. Before it sends anything to them, Frida asks you to agree, and by signing in to Frida you agree to this policy.

1. Information we collect

Sign in with Apple. Frida offers no other way in. We request your name only, not your email address. Apple also returns a stable identifier for your account. Both are held in the iOS Keychain on your device. When you sign in, Frida shows our server the sign-in token Apple issued, so it can check which Apple account is using Frida. Our server keeps only a one-way digest of that identifier, never the identifier itself, and the date you started using Frida, so your weekly usage limit follows your account rather than your phone. Your weeks are counted from that date. Frida also passes on the one-time code Apple issues at sign-in. Our server exchanges it with Apple for a token, kept encrypted, which it uses for one thing only: to end Frida’s access to your Apple sign-in when you delete your account.
Your phone’s registration. A random identifier Frida creates for your phone, a secret that proves requests come from it, when it last reached our server, and its time zone, which we use to count your week.
Usage records. For each request Frida makes to an AI model: when it was made, which model answered, how long it took, its size and cost, and the names of the tools it used, such as “weather” or “search”. Never the words of your messages or of Frida’s answers. We keep these for 14 days, to run the weekly usage limit, keep costs in check, and find faults. We also keep monthly and daily totals of how much each phone used, and which weeks, counted from the day you started, you asked Frida anything. Daily counts of how many people used Frida, with nobody named in them, are kept to run the company.
Purchases and bookings. If you buy something through Frida, our server keeps what is needed to place and track the order: what you bought, its price, and its status. Your name, email, phone number, and delivery address are deleted from it within 7 days of the order’s last change. When our payment partner completes a checkout on a store’s own website for you, our server keeps what it was for: the product, the store and the address of its page, the most you approved paying, your answers to the store’s questions, and how it ended. The rest of each order and checkout record is kept until you delete your account, so Frida can show you what you bought. If you connect a payment wallet, our server holds the connection so it can request payment when you approve a purchase. If you save a card for shopping, it is kept in our payment partner’s vault, and our server keeps only its brand, last four digits, and expiry date. Card numbers are never stored by us. When you book a flight, our server keeps the booking site’s answer, with its status, total, and booking reference, for 3 days, so your phone can still learn how it ended if it lost its connection. It never keeps the card.
Places you mark. If you mark a place as Been or To try, our server keeps the place’s identifier, your mark, the rating you give it, and the month you marked it, never the day, until you remove the mark or delete your account. This lets Frida show how many people have been to a place or want to try it. Other people see only these totals, and an average rating once at least three people have rated a place, never who marked it.
Your computer. If you use Frida’s computer, our server holds each job’s task while it runs and for a day after it ends. It keeps a record of whether the job finished, the summary Frida wrote of what it found, and the names of the files it made for 14 days, and the names of the files on your computer for as long as your computer exists. For each website it publishes for you, our server keeps its address, its title, the folder it came from, and a picture of its first screen. The files themselves are described in section 3.
Notifications. The token Apple gives Frida to send your phone notifications, so we can tell you when a job on your computer finishes or a reply you are waiting for arrives. If Gmail is connected, so that Frida can sort your new mail or watch for a reply, our server also keeps a one-way digest of your Gmail address, never the address itself, for as long as it watches.
Templates. If you submit a template for other people to use, we review it before anyone else sees it, then keep it, with the name you publish it under, until you withdraw it or delete your account. We also keep which templates your phone has started, scheduled, or saved, so each template can show how many people use it.
Server logs. Our server writes short-lived logs to find faults. They record errors and timings, the words of shopping searches, and the network (IP) address a request came from, but not your name or your account. The results of a shopping search are also kept for a day under its words, so the same search is answered faster for anyone who makes it.
Support and access requests. What you write to us, and the address you write from.
Diagnostics. Crash and performance reports, if you have allowed your device to share them. These reach us through Apple, aggregated, and do not contain your conversation.

Frida sets no cookies of its own and has no third-party analytics. A web page you open in Frida can set its own cookies, as it can in Safari, kept apart from Safari’s. Frida never reads your advertising identifier, and nothing in it follows you across other companies’ apps and websites. Because it does not track you that way, it has nothing to change in response to a browser’s “Do Not Track” signal.

2. What stays on your device

Your conversation, the memories Frida forms about you, the habits and tastes it observes, what you tell it about yourself, the cards it draws, the work it has scheduled, how it has sorted your mail, your reservations and flights, the route of a walk or run you track, notes it has read aloud to you, and its cache of photographs are written to the app’s private storage on your phone. This includes anything Frida reads for you from an account you connect, which becomes part of the conversation. Your conversation, memories, habits, tastes, and what you told Frida about yourself are encrypted there with a key held in your iCloud Keychain. A copy of them in an iCloud backup cannot be read without one of your own devices, and a backup restored onto a new iPhone still opens. Widgets you add show a little of this, such as your next plan and the emails waiting for a reply, on your Home Screen and Lock Screen.

Your Apple account identifier, your name, the contact and delivery details you save, the cards and travelers you save for flights, and the tokens for the accounts you connect are held in the iOS Keychain on your phone. A saved card’s number and security code open only to your Face ID or passcode, when you pay. We do not keep any of it, apart from what section 1 describes, and we cannot recover any of it for you.

3. What leaves your device, who receives it, and why

Frida needs outside services to answer you. Each receives only what its part of the job requires.

AI services

These are the AI services Frida uses, by name. Requests to them go from your phone through our server, which adds our keys and passes them on without keeping what they say.

Fireworks AI runs the AI models that write every answer. It receives your message, the conversation so far, photos and files you add and the words read from them, what Frida remembers about you, the name of your neighborhood, and the results of anything Frida looked up or read for you, including from accounts you connect. If Gmail is connected, it also receives the sender, subject, and opening lines of your new mail, so Frida can sort it. It also runs the agent that works on your computer, and receives what that agent reads there.
OpenAI runs voice calls with Frida. During a call it receives your voice, what Frida remembers about you, the recent conversation, and the text of Frida’s answers so they can be spoken.
Google (Gemini) makes and edits pictures. It receives the words describing the picture and any photos you give it, including a photo you take of yourself or your room to see a product on it.
Reducto reads documents. When you attach a Word, PowerPoint, or Excel file, or a scanned PDF, the whole file is sent to it so Frida can read its words.
ElevenLabs reads aloud. When you have a note read to you, it receives the note’s words, a passage at a time, with a few sentences on either side so they sound natural. When you play a phrase on a phrase card, it receives the phrase and its language.

With requests to Fireworks AI and OpenAI, Frida includes an identifier derived one way from your phone or your Apple account, so they can detect abuse. It is never your name or your Apple account identifier itself.

We use these services under terms, or with settings, that do not allow them to train their models on what we send. Some keep what they receive for a limited time to detect abuse, as their own policies describe. Your precise location is never sent to an AI service. It is told the name of your neighborhood, and nothing finer.

Koah, our advertising partner, shows the ads in Frida. It receives every second question you ask, with Frida’s answer to it, so the ad it may show under them fits what you were talking about. Once Frida has read your email, your calendar, or another account you connect in a conversation, only your questions from that conversation go, never its answers. Koah also receives what an ad needs to be shown and counted: details of your phone such as its model, screen size, iOS version, language and region, connection type, and whether location services are on; an approximate location worked out from your IP address; a random identifier created on your phone for this app; and which ads you saw and tapped. It is never sent your advertising identifier, your name, your precise location, or the memories Frida holds about you, though an answer can mention something Frida remembers. Koah tells us it does not link what it receives to your identity, or use it to follow you across other companies’ apps and websites. Tapping an ad opens the advertiser’s page, which sees your IP address as any website does.

Other services

Search, map, and weather services receive a search query, the address of a page, or the name of a place, film, book, or song. If you allow location, Apple’s map and weather services receive it, so “nearby” means nearby and a forecast is for where you are. No other service receives your precise location.
Websites you open. A link you open in Frida, and the preview Frida shows for a link, load from that website, which sees your IP address as any website does.
Your computer. If you use Frida’s computer, the company that hosts it receives each job’s task and the files you give it: files from the conversation, and things you choose from your library. Your email and calendar are never sent to it. Its machines are in the European Union. The files stay on your computer, so later jobs can use them, until it has gone unused for 30 days or you delete your account; they also pass through our server, which deletes them within a day of the job ending. A website you ask it to publish goes to a website host and is public at its address until you take it down, until 30 days after it was last published, or, if you move it into a hosting account of your own, for as long as you keep it there.
Accounts and servers you connect receive the requests Frida makes on your behalf, with the permission you granted, including the parts of the conversation a request needs. That includes a server you add yourself by its address.
Shopping and payment partners receive what you search for and, when you buy, what you are buying, your name, email, phone number, and delivery address, and the payment you approved, so the store can fulfill the order. When a partner completes a checkout on a store’s own website for you, it also receives the store’s page, your instructions, and your answers to any questions the store asks.
Restaurant booking partners receive what you are looking for and, when you book, your name, phone number, email, and a card if the restaurant requires one. These go to the restaurant’s booking system.
Travel booking partners receive the trip you are searching for and, when you book a flight, each traveler’s name, gender, and date of birth, the seats you choose, your email and phone number, your billing address, and the card you pay with, so the airline can issue the ticket.

How these services must protect it

We share your information only with services bound, by their agreements with us or by the terms they offer developers, to protect it at least as well as this policy does: to use it only to provide their service to us, never to sell it, and to keep it secure. What each one keeps, and for how long, is also set out in its own privacy policy.

4. Gmail and Google Calendar

If you connect Gmail, Frida asks Google for permission to read your email, to send email from your account, and to add and remove labels on it. If you connect Google Calendar, it asks to read your calendars and to change the events on them. Frida uses the label permission only to put its own labels on your email and take them off again. It never deletes, archives, or moves email, marks it read, or changes what a message says. Google lists each permission on its sign-in screen before you agree.

What Frida accesses. Gmail: the messages, conversations, and attachments it searches or opens to answer you, the sender, subject, and opening lines of new mail it sorts, your list of labels, and your mailbox’s address. Google Calendar: your list of calendars and the events on them.
How it is used. Only to provide the features you ask for: answering questions about your email and your schedule, showing messages and events in the conversation, sorting new mail under labels such as Needs reply, Waiting, Meeting, and Travel and showing those labels in Gmail too, adding to Gmail a label you make in Frida and removing it when you remove it, sending the replies, forwards, and emails you write in Frida, moving, editing, and deleting your events, answering invitations, creating events that invite the people you name, and showing your Google events alongside the calendar on your phone.
Nothing goes out without you. Frida sends an email only when you press Send on it, and waits a few seconds first so you can undo it. It sends a calendar invitation only after you confirm it. It changes an event only when you move, edit, or delete it yourself on a calendar card, or answer an invitation there. When an event has guests, Google tells them about the change or your answer, as Google Calendar does. It puts an event on your calendar only when you ask it to, or when you book a table or a flight. Labels are the one change Frida makes in Gmail on its own, and only you can see them.
Where it goes. Frida reads your Google data from your phone, directly from Google, and sends your email, labels, and calendar changes from your phone straight to Google. What it reads is sent to Fireworks AI to produce your answer and to sort your mail, during a voice call to OpenAI, and to ElevenLabs if you have a note that quotes it read aloud. It reaches them through our server, which passes it on without storing it. It is never sent to Koah or any advertiser, never sent to your computer, and never stored on our servers. When your mailbox changes, Google’s notification service tells our server, so Frida can wake your phone to look. That notice names your Gmail address, which our server keeps only as a digest, and never contains a message. An email you send is kept on your phone until Google confirms it has gone, so it still goes if Frida is closed, and a record that it went is kept on your phone for 90 days so it is never sent twice. How Frida sorted your mail is kept on your phone for 45 days.
Pictures in email. When you open an email laid out with pictures, such as a newsletter or a receipt, the pictures load from the sender’s servers, as they do in most mail apps. That can tell the sender the email was opened.
What we never do. We do not sell Google user data. We do not use it for advertising or to train AI models, ours or anyone else’s. We do not use it to determine creditworthiness or for lending. Nobody at MonyCompany reads it, unless you ask us to for a specific message, it is needed to investigate abuse or keep Frida secure, or the law requires it.
How to revoke access. Tap Disconnect beside Gmail or Calendar in the app, or remove Frida at myaccount.google.com/permissions. Delete Account in the app revokes both.

Frida’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Permissions the app asks for

Each is asked for when it is first needed, never at launch, and Frida works without any of them. Once iOS has an answer on file, only Settings can change it.

Calendar and Reminders, to answer questions about your week, put holds on your calendar, move, edit, and delete the events you change on a calendar card, show your next event in the Next up widget, and keep your lists in sync.
Location, as described in section 3. Optionally always, so an errand tied to arriving somewhere works with the app closed. While you track a walk or a run, Frida keeps measuring with the phone locked, and iOS shows that it is.
Microphone, only while you are on a voice call with Frida or recording a voice memo.
Speech Recognition, to write down a voice memo. It is transcribed on your phone. The recording never leaves it, and only the words are sent, as your message.
Camera, to take a photo to send in the conversation; to read a card you hold up, which is read on your phone and never photographed or sent; and to take a photo of you or your room to see a product on it, which is sent to Google as section 3 describes.
Photos, to show your photos when you add one to the conversation or try something on, and to save a picture Frida made when you press Save. A photo leaves your phone only if you add it.
Motion, to count steps while you track a walk or a run. It stays on your phone.
Face ID, to confirm it is you before a payment or a booking. iOS handles this; Frida never sees your face data.
Apple Music, to play what you ask for.
Notifications, for timers, moments you asked about, replies you are waiting for, and work you scheduled.

6. How we use it

To let you sign in and keep you signed in; to run what you ask Frida to run, including placing orders and bookings you approve; to apply the weekly usage limit; to show how many people have marked a place or use a template; to answer you when you write to us; to fix faults and improve the app; to show ads that fit the conversation they appear in, as section 3 describes; to investigate reports of abuse; and to meet legal obligations.

7. How we share it

The services described in section 3, and the company that hosts our server, only for the purposes described there.
Other Frida users, who see a template you publish and the name you publish it under, and the totals for places people have marked, which never say who marked them.
Apple, which handles sign-in, notifications, maps, weather, app distribution, and any diagnostics you have chosen to share.
Legal authorities, where the law requires it, and an acquiring party in a merger, acquisition, or sale of assets.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. The ads in Frida are chosen from the conversation they appear in and your approximate location, not from what you do in other apps and websites.

8. Connected accounts

You choose which accounts to connect. Each is connected through the provider’s own sign-in, so you authorize with that provider and grant only the permissions you are shown. A server you add yourself is reached with the sign-in or key you give it. The tokens are stored in your device’s Keychain and used from your device. A payment wallet and a card saved for shopping are the exceptions: our server holds their connection, as section 1 describes. You can disconnect an account at any time in the app, or revoke it in that provider’s own settings.

9. Your choices, retention, and deletion

The AI services and ads are part of how Frida works, so the way to stop sending to them is to stop using Frida: sign out, or delete your account as described below.

Delete Account in the app (open your library, tap the person button, then Delete Account) erases your conversation and every thread, the memories, habits, and tastes Frida formed, what you told it about yourself, work it had scheduled, your saved details, cards, and travelers, your reservations and flights, the routes of your walks and runs, how it sorted your mail, the grants for every connected account and the servers you added, anything it put on your Lock Screen or in a widget, email still waiting to be sent, its notifications, the notes it read aloud, its cache of photographs, and how you set the app up.

It also deletes everything our server holds for your phone: your payment wallet connection, which is revoked with the wallet provider; a card saved for shopping, which is deleted from our payment partner’s vault; any checkout still in progress, which is stopped; every record of your purchases and bookings; your computer, with every file on it and every copy of it, and the websites it published that we still host; the files of its jobs; the places you marked, from every phone signed in to your account; the templates you shared, and the record of those you took; your usage records; your notification token and the digest of your Gmail address; and your Sign in with Apple grant, which is revoked with Apple. If your phone is offline at that moment, this happens the next time Frida opens with a connection.

One thing outlives it, briefly: the digest of your Apple account identifier, the date you started using Frida, which weeks you used it, and how much of the week’s usage limit you had used, so that deleting your account and signing in again does not start a fresh week. It is deleted within ten days. Server logs expire on their own within weeks. The key in your iCloud Keychain that encrypted your conversation and memories stays where it is, because another of your devices may still need it. With the files deleted, it opens nothing.

Deleting your account cannot reach what the services in section 3 already received; each keeps it as its own policy describes. Deleting the app removes what is on your phone but cannot reach our server, so use Delete Account first, or write to us and we will delete it. We keep support correspondence until we have finished acting on it.

Calendar events and reminders Frida wrote for you stay in your own apps, email you sent stays in your mailbox, and labels Frida put in Gmail stay until you remove them there. Deleting an account is not license to reach into them.

10. Security

We use encryption in transit, encrypt your conversation and memories on your phone, keep credentials and tokens in the iOS Keychain, encrypt the tokens our server holds, and keep your content on your device rather than on a server of ours. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Because your data lives on your device, the passcode, Face ID, and backup settings on that device are part of protecting it.

11. Your rights

You can delete what is on your phone yourself, as described in section 9. You can also ask us to access, correct, export, or delete personal information we hold. Depending on the state or province you live in, you may have further rights over how your data is used, such as withdrawing your consent, and we will not treat you differently for using them. Write to alex@mony.company and we will respond within a reasonable period, and within 30 days where the law requires it.

The person in charge of protecting personal information at MonyCompany is our chief executive, whom you can reach at alex@mony.company. If you are in Canada and are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d’accès à l’information.

12. Children’s privacy

Frida is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, write to us and we will remove it.

13. Where Frida is offered, and where data is processed

Frida is offered only in the United States and Canada, and we operate from the United States. Information that reaches us, and requests your device makes to the services in section 3, may be processed in the United States, in the European Union where your computer runs, or anywhere those services operate. Where the law requires it, we apply appropriate safeguards to those transfers.

If you are in Canada, your information is processed outside Canada, mostly in the United States, under the laws of the places where it is processed. Courts, law enforcement, and national security authorities there may be able to obtain it.

14. Changes

We may update this policy. We will post the new version on this page and change the date above. If a change is a material one, we will tell you in the app before it takes effect.

15. Contact

Questions about this policy: alex@mony.company.

Frida · MonyCompany Inc