Privacy

FrequencyOS helps a household run the home and stay connected. We keep the data we hold to what the app needs to work, and we never sell it.

What we store

Your email address (to sign you in) and a display name if you set one. The things you put in your household: recipes (including any photo, screenshot or file you upload so we can read a recipe from it), meal plans, grocery lists, calendar entries, chores, reminders, Talk signals, and weekly check-in answers, plus the household’s timezone so the week starts on the right day. A push token if you turn on Talk alerts. Basic subscription status if you upgrade.

Health things you type in

You can track measures you choose — a weight, a soreness score, whether you did something today, including any exercise measures you choose to track — and each reading is stored with the date you recorded it. You can also pick one from the Spectrum library instead of writing your own, in which case the app records which one you picked and which part of health it belongs to — sleep, food, substances, circumstance and so on — so the map can show what you are and are not tracking. You can also keep a plan with phases, and a care list of appointments to book, tests to ask for, referrals to chase and questions to bring, each with its status and any result you write down. Some of that is health information about you and it can be specific: the name of a test, the specialist you were referred to, what came back. It is stored so the app can show it back to you, and for nothing else. This part is yours alone. Unlike the household data above, your plan, your metrics and their readings, and your care list are visible only to you — no one else in your household can read them, not even a household admin, and that is enforced by the database rather than by the screen. Nothing here is scored, ranked or judged against a target, and none of it is used to advertise to you or shared with anyone.

Under Workouts on the You tab you can keep workouts (a name, the exercises you plan with their sets and reps, a note, and when you mark a session done); only your own account can read them, not even a household admin, apart from a workout you put on the calendar, which your household sees like any other calendar entry; removing a workout only hides it, and deleting your account deletes them all.

Staged protocols

From the Spectrum library you can start a staged protocol: a published programme, such as a balance progression or a FODMAP elimination and reintroduction, worked through one stage at a time. FrequencyOS keeps your place (which protocol, which stage, and when you started it) and whatever you choose to write down each day: the date, a rating from 0 to 10 if you want to give one, and a note. A note about what you ate or how you felt is health information, and it can be specific. It is stored with Supabase, like the rest of your data, in a table only your own account can read. No one else in your household can see it, not even a household admin, and that is enforced by the database rather than by the screen. Nothing is scored, ranked or compared, and you move to the next stage only when you press Advance. What you write is never sent to an AI service or to anyone else. You can end a run whenever you like. A single entry cannot be removed, and ending a run keeps its log, so deleting your account is what deletes your runs and logs.

Data about other people

Some of what a household keeps is about someone other than you, so it is worth saying plainly. If you add a household member who doesn’t have their own account — a child, say — we store the name you give them and the calendar entries, chores and reminders you attach to them. If you invite someone by email, we store the address you typed so we can send the invite, and we keep it whether or not they ever accept. Those people never agreed to anything with us, so treat adding them as your call to make: only add someone you have the standing to add, and use the name you would be comfortable them seeing. This data lives inside your household and is visible to your household the way the rest of it is. An invited address is kept for up to 48 hours after the invite is revoked, accepted or expires, then deleted; if the person never opens the invite at all, the account record it created for them is deleted within 30 days of the invite being sent. A household member without an account can be archived by an admin; their name and calendar stay with the household until the household is deleted.

How we use it

Only to run the app for you and your household — show your cookbook, sync your calendar, deliver a Talk signal, generate your grocery list. We do not use your data for advertising, and we do not track you across other apps or sites.

The services that run it: your data is stored with Supabase and served by Vercel; sign-in and invite emails are sent through Resend; Talk alerts are delivered by your browser’s push service or, in the apps, by Apple or Google. When you import a recipe from a link, the text of that page is sent to Anthropic to pull the recipe out of it, and the page itself may be fetched through Bright Data when a site blocks direct requests — the page, never your household data. When you import a recipe from a photo, screenshot or file, that image or file is sent to Anthropic to read the recipe from it, and nothing else goes with it. Anthropic processes it to answer that one request; it is not used to advertise to you. When something in the app breaks, a report of it goes to Sentry so we can fix it: the error, where in the code it happened, and the page’s address without anything after the “?”. We remove email addresses from it and never send what you typed into a form, your cookies or your account details.

What we never do

We never sell your data. We never license household insights. We never read your Talk signals for content — a Talk signal carries no message, by design.

Who can see your data

Members of your household can see shared household data (recipes, calendar, grocery, Talk signals, Tend sessions). Your plan, your metrics and their readings, your care list, your daily regulation state and your sleep verdicts are yours alone and are never visible to anyone else in the household. Your protocol runs and logs are yours alone in the same way. Your weekly check-in and Two-Key Reveal answers stay hidden until everyone in the household has answered — that lock is enforced by the database, not just the screen. No one outside your household can see your data.

Restwick, our other app

Restwick is a game from The Human Frequency about noticing and steadying how you feel. It is a separate app. It uses the same account system and the same database project as FrequencyOS, and three tables are shared between them: your daily regulation states (the state you chose, how strong it was, the words you picked for it, and five needs), your practices (the breathing and other exercises you did, and when), and Restwick’s game save. FrequencyOS reads your states and practices, and writes a daily state when you log one here, so what you record in either app can show up in both. FrequencyOS never opens the game save; it exists only so the game can be picked up on another device.

Those three tables are yours alone, in the same way as your plan and your care list. Every row belongs to your account, no one else in your household can read it, and the database enforces that, not just the screen. The one exception is a setting you turn on yourself, described below under “Sharing how you’ve been”.

Restwick for iPhone, version 1.0, keeps its save on your phone only. It does not connect to this database, so it puts nothing in these tables. When Restwick adds sync, you sign in to it with the same email address you use for FrequencyOS, and its states, practices and save are stored in these tables under your account. Deleting your FrequencyOS account (You → Settings → Danger zone → Delete account) deletes them too.

Sleep tracking

If you turn on sleep tracking on the You tab, FrequencyOS reads how long you slept straight from your phone — from Health Connect on Android or Apple Health on iOS. We don’t save that number. Each day, your phone compares that night to your own recent typical nights and keeps only the coarse result — short, typical, or long — never the minutes. That comparison happens on your phone; raw sleep data never leaves it. You see that word for each of your last seven nights on the You tab, and Restwick, if you use it, reads the same word to go gentler after a short night. Your sleep verdicts are never sold and never shared with anyone, including the people in your household — not even a household admin can read them. (Whether you’ve turned sleep tracking on is an ordinary setting, visible to your household like any other; what it finds is what stays private.) You can revoke access any time in your phone’s Health Connect settings — that stops any new reading from happening, but on its own it doesn’t delete what’s already saved. To delete it, turn sleep tracking off on the You tab in the app: that’s what erases every verdict already saved, not just future ones.

Sharing how you’ve been

On the You tab, you can choose to let your household see when you’ve had a hard week — based on how you’ve been logging your daily state in Restwick, not on your weekly check-in or Two-Key Reveal answers (those stay hidden the way this page already describes), and never on your sleep data. What’s shared is a single yes-or-no: that it happened, not which days or what state you were in. It only works both ways — you see the same about them only while you’re sharing too. Turning it off deletes the setting entirely, and from that moment neither of you can see the other. If your partner turns it off, you aren’t told; sharing simply stops.

Deleting your account

You can delete your account and personal data at any time from You → Settings → Danger zone → Delete account. This is immediate and can’t be undone. Shared household data created with others remains for the rest of the household.

Payments

Subscriptions are handled by Stripe on the web, and by Apple or Google (via RevenueCat) in the mobile apps. We store only your plan status, never your card details. Deleting your account does not cancel an App Store or Google Play subscription: billing continues until you cancel in your store settings. You can manage Apple subscriptions here. If you are the last member of your household, we attempt to cancel its Stripe subscription before deleting the household; otherwise the household and its subscription stay with the people still in it.

Contact

Questions: jaredhmn@gmail.com. The Terms of Use cover the rest of the relationship.