Last updated September 8, 2026
MonyCompany Inc. (“we,” “us,” or “our”) operates Frida, a personal agent for iPhone. There is no Frida server. The app runs on your device, stores what it knows on your device, and talks to outside services directly from your device. This policy explains the little that reaches us, everything that leaves your phone and where it goes, and what you can ask us to do about any of it.
That is the whole list of what comes to us. Frida has no cookies, no advertising identifiers, no third-party analytics, and no tracking SDKs.
Your conversation, the memories Frida forms about you, the habits it observes, the cards it draws, the work it has scheduled, and its cache of resolved photographs are written to the app’s private storage on your phone. Your Apple account identifier, your name, and the authorization tokens for any service you connect are held in the iOS Keychain on your phone. None of it is uploaded to us. We cannot read it, and we cannot recover it for you.
Because there is no server, this is per device. Signing in on a second phone connects nothing and carries nothing across.
Frida is useless without a model, and a model runs somewhere else. Requests go from your phone to the services below directly — they do not pass through us.
| Who | What is sent | When |
|---|---|---|
| Google (Gemini API) | Your message, the conversation so far, the standing memories Frida holds about you (which include your name), and the results of any tool it ran for you. | Every turn you take. |
| Exa | A search query, or the address of a page to read. | Only on turns where the model decides it needs the open web. |
| Google Places | The name of a place to resolve, and — if you have allowed location — your coordinate, so “nearby” means nearby. | When a card needs a real point on a real map. |
| Wikipedia and Wikimedia Commons | The name of a subject, to find a photograph of it. | When a card needs a picture and Places has none. |
| Services you connect (Linear, Notion, Granola, Stripe, Sentry, Ramp) |
The request the agent is making, with the token you granted. | Only for services you have connected, and only when a turn calls for one. |
The model is sent requests with storage switched off. Frida sets store: false on every call and replays the conversation from your device each turn, so the thread lives on your phone rather than in a copy held by the provider. What Google, Exa, and the rest do with a request they receive is governed by their own terms and privacy policies, not by this one.
Your precise location is never sent to the model. If you allow location, the coordinate stays on your phone. The model is told the name of the neighbourhood you are in — “Seongsu-dong, Seoul” — and never the number. The coordinate itself is used locally, and passed to Google Places only to search around you.
Each is asked for at the moment it is first needed, never at launch, and Frida works without every one of them. Once iOS has an answer on file, only Settings can change it.
To let you sign in and keep you signed in; to run what you ask Frida to run; to answer you when you write to us; to fix crashes and improve the app; to investigate reports of abuse; and to meet legal obligations.
We do not sell or share your personal information for advertising, and we do not train models on your content.
You choose which services to connect. Frida connects to Linear, Notion, Granola, Stripe, Sentry, and Ramp through each service’s own OAuth flow, so you authorize with that provider and grant only the scopes you are shown. Ramp is requested read-only. The resulting tokens are stored in your device’s Keychain and used from your device; they never pass through our servers, because we have none.
An agent acts inside the permissions you grant it and can read and, where you have granted it, write in a connected account on your behalf. You can disconnect a service at any time in the app, or revoke it in that provider’s own settings. Data already brought onto your device stays there until you delete it.
We keep the support correspondence you send us until we have finished acting on it. There is nothing else of yours on our systems to keep.
Delete Account in the app — the + button, then the row with your name on it — erases your conversation and every thread, the memories and habits Frida formed, work it had scheduled, the OAuth grants in the Keychain, anything it put on your Lock Screen, notifications waiting or already delivered, and the cache of photographs it downloaded. Deleting the app removes the same material.
One thing is deliberately left alone: calendar events and reminders Frida wrote for you stay in Calendar and Reminders. Those are yours, in your own apps, put there at your request; deleting an account is not licence to reach into them.
We use appropriate technical and organizational measures: encryption in transit, credentials and tokens held in the iOS Keychain, and your content in the app’s private storage on your device rather than on a server of ours. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. Because your data lives on your device, the passcode, Face ID, and backup settings on that device are part of protecting it.
You can delete everything yourself, in the app, as described in section 8. You can also ask us to access, correct, export, or delete personal information we hold, and to stop sending you email. Depending on where you live you may have further rights over how your data is used. Write to seungyong@usemony.com and we will respond within a reasonable period.
Frida is not directed to children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us information, write to us and we will remove it.
We operate from the United States. Information that reaches us, and requests your device makes to the services in section 3, may be processed in the United States or anywhere those providers operate. Where the law requires it, we apply appropriate safeguards to those transfers.
We may update this policy. We will post the new version on this page and change the date above, and we will tell you directly if the change is a material one.
Questions about this policy: seungyong@usemony.com.
© 2026 MonyCompany Inc. All rights reserved.