Last updated: August 13, 2026
On this page
Frisyn is built so that we, the people who run it, cannot tell who you are. We don't ask for your name, email address, phone number, or a username. You're identified only by a sequential account number, like User #7. We never link your account to your real-world identity, and we've designed our systems specifically so we can't.
When you use Frisyn, we do not ask for, collect, or store:
There is no sign-up form asking "who are you." Creating an account only requires a password you choose. That's it.
To make the app work — and to stop the same person from creating unlimited accounts to get around bans or abuse the platform — we store a small, deliberately limited set of data:
| Data | What it is | Why we store it |
|---|---|---|
| Account number | A sequential number assigned when you sign up (e.g. #7) | This is your public identity in the app. It's not derived from anything personal. |
| Profile | Basic account-level data tied to your account number (e.g. settings/preferences you've set) | Lets the app remember your preferences and account state. |
| Hashed password | A one-way cryptographic hash of the password you set | To let you log back in. We never store your password in readable form — not even we can see it. |
| Recovery code | A one-time code generated at sign-up, stored hashed on our servers | Lets you regain access if you forget your password. Since there's no email/phone to send a reset link to, this code is the only recovery method — save it somewhere safe. |
| Hashed device fingerprint | A one-way hash derived from your device's Android ID | Enforces "one account per device" to reduce spam and abuse. The raw Android ID is never stored — only an irreversible hash of it. See below for more detail. |
| Posts, comments, reactions, messages | The actual content you create in the app | This is the app. Content is linked to your account number, not to you personally. |
| Audit / security logs | Technical records of certain actions (e.g. sign-up, login attempts, moderation actions), including a temporarily-logged IP address | Abuse prevention, rate-limiting, and security investigation. Explained in detail below. |
Anonymity on Frisyn isn't just a promise — it's how the system is built:
Everything above describes what we collect and store about you, which, by design, contains no personal information. It doesn't cover what you might choose to type into a post, comment, or message yourself.
If you include your own name, contact details, photo, workplace, or other identifying information in something you post, that information becomes visible to anyone who can see the content — and it's outside what our anonymity protections can undo. We'd encourage you not to include identifying details about yourself in your content.
The same goes for other people: posting someone else's personal or identifying information without their consent (doxxing) is against our Terms of Service and may result in content removal and an account ban. If you see this happening, use the in-app Report button.
Like virtually every online service, our backend (Firebase Cloud Functions) generates operational logs when actions happen — account creation, login attempts, content moderation events, and similar. It's important you understand what these are and aren't:
To prevent spam, brute-force attacks, and abuse (e.g. mass account creation or flooding the app with content), our servers temporarily log the IP address associated with certain requests. This is standard practice for any backend service and happens automatically at the infrastructure level. IP addresses:
| Data type | Retention |
|---|---|
| Account, account number, profile, auth record (password, recovery code, device fingerprint), your posts, your comments/replies, your direct-message conversations | Kept until you delete your account. Deletion is immediate and permanent — see "Deleting your account" below for exactly what's included. |
| Reactions you've left on other users' posts or comments | Not individually deleted when you delete your account — retained only as anonymous, aggregate counts with no link to any account. See below. |
| Audit & security logs (including temporarily-logged IP addresses) | Automatically purged after approximately 90 days, regardless of whether your account is still active. |
No. Frisyn does not sell, rent, or share your data with advertisers, data brokers, or other third parties for marketing purposes. We currently run no advertising and no third-party analytics or tracking SDKs in the app. The only party with access to Frisyn's backend data is the infrastructure provider we run on (see below), and only in their role as a hosting/infrastructure provider — not as an independent user of your data.
We may disclose limited information (such as what's described in this policy) if legally required to do so — for example, in response to a valid court order — but given that we do not collect PII, there is generally very little we're able to hand over even if asked.
Frisyn's backend runs on Google Firebase (Firestore database and Cloud Functions). Google acts as our infrastructure provider, storing and processing data on our behalf to run the app. We do not currently use Firebase Analytics, Crashlytics, or Cloud Messaging — if that changes in the future, this policy will be updated before those services go live.
Self-service
You can permanently delete your account at any time, entirely on your own, directly in the app:
Profile → Delete Account → re-enter your password → Confirm.
We require you to re-enter your password before the deletion goes through. This isn't friction for its own sake — it means that if your unlocked phone is ever lost, stolen, or picked up by someone else, they can't delete your account without knowing your password. No email or support ticket is involved either way; deletion is fully self-service.
Once confirmed, a server-side function immediately and permanently deletes:
Two things work a little differently, and we want to be upfront about both:
Note: entries already written to the isolated audit/security log system (see above) age out on their own retention schedule (~90 days) rather than being deleted instantly, since they exist for security purposes and are not linked to your content once your account is gone.
Frisyn is intended for users 18 years of age and older. We do not knowingly allow anyone under 18 to create an account or use the app. Because we collect no PII, we have no reliable way to independently verify age at sign-up beyond requiring users to confirm they meet this requirement — if we become aware that an underage user has created an account, we will delete that account and its associated data.
We take reasonable technical measures to protect the data we do hold — including hashing passwords and device fingerprints, restricting access to audit logs, and relying on Google Firebase's infrastructure-level security. That said, no system is 100% secure, and we can't guarantee absolute security of any information.
Because Frisyn holds no personal information tied to your real-world identity, most traditional "access/export/correct my data" requests aren't applicable in the usual sense — there's no name or email to look up. In practice, your rights are exercised directly through the app:
We may update this Privacy Policy as Frisyn evolves — for example, if we add new features, third-party services, or backend changes. If we make material changes, we'll update the "Last updated" date at the top of this page. Continued use of the app after changes take effect means you accept the updated policy.
This policy is governed by the laws of India.
Frisyn does not maintain a general support inbox, since we don't collect contact information from users and want to keep our own footprint minimal too. For in-app concerns (reporting abusive content or users), use the Report button available on posts, comments, and messages within the app.
For legal inquiries or law enforcement requests only, contact: legal@frisyn.app