Privacy Policy

This Privacy Policy for FriendRex describes how we process your personal information when you use our Services. Version v1.1 introduces three material changes over v1.0: named AI sub-processors, the CCPA “Do Not Sell or Share” opt-out (with Global Privacy Control honored), and the COPPA under-13 hard-block flow.

1. Information We Collect

• Account Data, Date of Birth, Profile Data, Content You Create, AI Interactions, Payment Data (via Stripe).
• Automatically: Log and Usage Data, Firebase Analytics events (only with consent), Device Data, Push Notification Tokens.

2. AI Features & Sub-Processors (NEW in v1.1)

Rex AI is routed by tier. Free tier uses Google Gemini. Pro tier uses OpenAI gpt-4o-mini. Gold tier uses OpenAI gpt-4o with Anthropic Claude as a fallback. Each provider receives your prompt and the last 20 turns of conversation. None of them trains on your data under our DPAs.

3. CCPA Opt-Out (NEW in v1.1)

FriendRex does not sell personal information. We honor the Global Privacy Control (GPC) browser signal and provide a manual opt-out via the “Do Not Sell or Share My Personal Information” page.

4. COPPA Under-13 Hard Block (NEW in v1.1)

Every account is age-gated at signup. Server-side, we re-compute age from the submitted date of birth; if the user is under 13, the account and all associated data are deleted within 30 days of creation. An immutable audit row is retained as evidence of the block. The audit row contains no identifiers that could be used to re-identify the child.

5. Recipients of Personal Data (Sub-Processors)

See /sub-processors for the live register.

6. Your Rights

Access, correction, deletion, export, and opt-out of analytics — all available from Settings → Data & Storage or by emailing privacy@friendrex.app.