Privacy
Policy

1. Who we are

Frizz is operated by Kamsa Holdings LLC (operating the Frizz app and website), a member-managed Wyoming limited liability company (entity ID 2026-002012908) of 30 N Gould St, Ste N, Sheridan, WY 82801, United States. Kamsa Holdings LLC is the data controller for the personal data described here.

Data protection contact and all data requests: legal@frizz.live. General support is support@frizz.live.

We have not appointed a Data Protection Officer or a UK/EU representative. If we are required to, or if the volume of users in those regions makes it appropriate, we will appoint one and name them here.

2. What we collect

Things you give us

• Email address, which is what your account is tied to. We send a six-digit code to it to confirm it's yours.
• Your Google account, if you sign in with Google. Google gives us your name, your email address and a Google account ID. We don't get your Google password or anything else from your Google account.
• Date of birth, to confirm you are 18 or over. We store the date so we do not have to ask again, and we do not show it on your profile.
• Profile details — display name, photos, bio, interests and mood tags.
• Your gender, which sign-up asks for and your profile shows. You can change it at any time.
• Optional profile answers — your sexuality and relationship status. You don't have to answer either. Each one shows on your profile only if you pick it, and you can clear it at any time by tapping your answer again. Your sexuality is special category data under the UK GDPR and GDPR, so section 4 sets out the basis we rely on for it.
• A verification selfie, if you choose to get verified. It's optional. See "Verification" below.
• Content you create — messages, whispers, voice notes, images, confession posts and comments, the reactions you leave on messages, your votes on confessions, and audio and video you stream in rooms.
• Reports and support messages, including anything you attach.
• Purchase records for coins and Power Pack. Card details go to the app store, not to us; we receive a confirmation and a transaction reference.

Things we collect automatically

• Device and technical data — device model, operating system, app version, language, and an app instance identifier.
• Activity on Frizz — rooms joined and hosted, and who you interact with and how often. This is what chemistry matching is calculated from. We also keep the days you opened the app, which is what your streak counts, and when you were last online, which friends and the people you chat with can see unless you turn it off. The app has no analytics tools. If it crashes or hits an error, the report includes the last few things that happened before it, such as the buttons you tapped and the addresses it was loading, so we can find the cause.
• Approximate location, as described in section 5.
• Online status — while the app is open we record that you are online and when you were last seen. Only your friends and the people you have a chat with can see it, never someone you have blocked or who blocked you, and you can hide it in Settings. When you type in a direct message, the other person sees that you are typing, unless you turn that off in Settings; that is not stored.
• Log and security data — IP address, timestamps, crash reports, and signals used to detect ban evasion and abuse.

Things we do not collect

We do not ask for your real name, your address, your contacts list, or government ID. We do not buy personal data from data brokers.

Verification

Getting verified is optional. You take a selfie copying a pose, and a moderator, a person, looks at it next to your profile photos to check they're you. Nothing compares the faces automatically. We don't run face recognition on the selfie, and we don't make a face template or any other biometric data from it.

The selfie is stored privately. Only you and our moderators can open it, and it's never shown on your profile. It's deleted as soon as a moderator has decided, whether they approve it or not, and with your account if you delete that first. We keep the decision itself (approved or turned down, why, and when) while your account is open.

3. Why we use it

• To create your account and verify that you are 18 or over.
• To run the service: put you in rooms, deliver messages, show profiles, calculate chemistry scores, and process purchases.
• To keep people safe: screen photos, public posts and streams, review reports, detect ban evasion, and enforce our terms.
• To support you when you contact us.
• To find and fix crashes and errors.
• To send you service messages. Marketing messages are sent only where you have opted in, and every one has an unsubscribe.
• To comply with legal obligations and to respond to lawful requests.

Automated decisions

Chemistry scores and room recommendations are produced automatically. They affect what you are shown and nothing else. Automated systems also flag content for review, but an account is never permanently banned by automation alone: a person reviews the case first, and you can appeal under section 9 of the Terms.

What you post in public is checked automatically when you post it: your profile photos, your intro video (through a few still frames taken from it on your phone), your bio and prompt answer, your confessions and comments, your Global Chat messages and what you write in live room chat. The check is done by a moderation model run by a service provider on our behalf, which receives the photo, the frame or the text and nothing else about you. No account identifier goes with it. The provider doesn't use any of it to train its models. If something is flagged, it is hidden from everyone but you, you are told (except where the flag is for sexual content involving a minor), and a moderator reviews it and can put it back up. A new intro video is shown to others only once its frames pass. A post that may be about self-harm is not hidden for that alone; a moderator may look at it.

Live video is not checked this way while it runs. If someone reports a live room, still images of the people on camera are taken for about a minute, checked the same way, and kept for a moderator to review.

Direct messages are private, and what you write in them is never checked this way. Photos sent in a direct message are checked for one thing only: sexual content involving a minor. Nothing else the check finds is acted on or kept. If a photo is flagged, it is hidden from the person it was sent to, kept for review, and looked at by a moderator, and we may have to report it to the authorities (section 6).

When someone sends you a direct message, or mentions you in Global Chat, the words of the message go to you in a push notification, so you can read it without opening the app. It's delivered through Expo's push service and Google's Firebase Cloud Messaging (Apple's push service on iPhone), and then the operating system that shows it. You can turn these off under Messages in the app's notification settings. Whether it shows on your lock screen is set by your phone: hide sensitive content on Android, or Show Previews on iPhone. Photos, voice notes and GIFs are never put in a notification, only that one arrived.

Another check acts on its own. If a photo, a frame of an intro video or a still from a reported live room is flagged for sexual content involving a minor, the account is suspended straight away and told only that it is restricted. A moderator then reviews it and either lifts the suspension or makes it a permanent ban. You can appeal under section 9 of the Terms. Any flagged profile photo is moved out of public view: it is kept until a moderator has decided, and deleted then, except one flagged for sexual content involving a minor, which is kept as evidence.

One check is automatic. When someone signs up, we compare their email address, phone number and Google account against the records of accounts that are currently suspended or banned (section 7). If one matches, the new account is refused. That only ever repeats a decision a person already made about the earlier account, and you can appeal it the same way.

The app also tells us which phone it is on, as an identifier we store only in hashed form. If that phone belongs to a suspended or banned account, a moderator is asked to take a look. Nothing happens to your account automatically, because phones are shared and sold on.

4. Legal bases

If you are in the UK or the EEA, we rely on the following bases under the UK GDPR and GDPR.

• Contract — to provide the service you signed up for, including your account, your profile and the gender it shows, rooms, messaging and purchases.
• Legitimate interests — to keep the platform safe, prevent abuse and fraud, secure our systems, and improve the product. We have weighed these against your rights and you can object under section 8.
• Legal obligation — age assurance, tax and accounting records, and responding to lawful requests.
• Consent — approximate location, camera and microphone access, push notifications, marketing, your relationship status if you add it, and your verification selfie if you ask to be verified. You can withdraw consent at any time in your device or app settings, which does not affect processing already carried out. If your selfie hasn't been reviewed yet and you change your mind, write to legal@frizz.live and we'll delete it.
• Explicit consent — your sexuality, if you add it to your profile. It's special category data, so we rely on Article 9(2)(a) of the UK GDPR and GDPR. You give it by picking an answer, next to a note in the app saying exactly that, and you withdraw it by tapping your answer again to clear it, in sign-up or on your profile. We then stop showing and storing it.
• Vital interests — where there is a risk to someone's life.

5. Location

When you sign up, Frizz can ask for your approximate location to fill in your country and city for you. Your phone turns it into a place name, and only that name is saved. Your coordinates never leave your phone, and we never ask for precise location. You can say no and type your city instead, or turn the permission off in your device settings.

6. Who we share it with

We do not sell your personal data. We do not share it for cross-context behavioural advertising, with one exception you should know about: KLIPY, which runs the GIF picker, may use your GIF searches and IP address for its own advertising, as described under KLIPY below.

We share it only with the following.

• Other users, but only what you put on your profile and what you post or send. Not your email address, not your date of birth, not your location.
• Service providers acting on our instructions under contract, and only for the purposes we set. By category:
  • hosting and database providers
  • real-time video and audio infrastructure
  • push notification services
  • content moderation technology
  • error monitoring services
  • analytics for this website only (section 12). The app has none
  • email delivery services
  • payment processing, which for app purchases means the Apple App Store and Google Play, plus RevenueCat, which checks a purchase is real and tells us what you bought. RevenueCat gets your Frizz account ID and the purchase, never your card details. It also receives technical information about your device, such as device type and operating system
  We keep a current record of the providers in each category and can tell you which they are on request at legal@frizz.live.
• KLIPY, for GIFs. The GIF picker in direct messages runs on KLIPY. Opening its GIFs tab contacts KLIPY straight away, because trending GIFs and categories load as it opens, and so does every search. These requests go straight from your phone to KLIPY, along with your device's IP address and a random ID made on your phone. KLIPY handles them under its own privacy policy, not on our behalf. KLIPY keeps a history of the searches and GIFs viewed, linked to the IP address that made them, and may use it to measure and target advertising, as its policy describes. We never send KLIPY your Frizz account or anything from your profile. We have not switched on advertising in KLIPY's results, so none appear in the picker. A GIF someone sends you is loaded from KLIPY too, so KLIPY sees your IP address then. When you send a GIF, only its link is stored with the message. If you'd rather KLIPY didn't have this, don't open the GIFs tab. Everything else in Frizz works without it.
• Expo, for app updates. When the app opens it asks Expo's servers whether a newer version of its code is available. That request carries the app version, the platform and a random identifier the app creates on first install, together with your device's IP address. It is not linked to your Frizz account. Expo handles it under its privacy policy.
• App stores, for purchases and subscription status.
• Law enforcement and regulators, where we are legally required, or where we believe in good faith it is necessary to prevent serious harm. This includes content involving the sexual abuse or exploitation of a minor.
• A buyer or successor, if the business is sold or reorganised. You will be told before your data becomes subject to a different policy.

7. How long we keep it

• Global chat messages — 24 hours, then deleted. A message with a report still open is kept until the report is decided.
• Voice notes and images in direct messages — deleted 30 days after the person they were sent to has seen them, or 180 days after they were sent if they never see them. One held for review is kept until the review is done.
• Text messages and whispers — kept while your account is open, unless you delete them.
• Live audio and video — not recorded or stored during normal use. If a live room is reported, still images taken from it are retained for up to 90 days, for moderation purposes only.
• Profile and account data — kept while your account is open.
• Verification selfies — deleted as soon as a moderator has decided (section 2).
• Automated check results — the result of a check on a post or message is kept for 7 days. One that flagged something is kept as the record of why it was hidden, and a profile photo's result is kept so a photo taken down can't simply go back up.
• Deleted accounts — everything is deleted within 30 days, with these exceptions. Your confessions and comments stay on the wall, with you removed as their author, so other people's threads don't break. Anything under an open report is kept until the report is decided. Ban records are kept as described below. Google Play and the App Store keep their own records of your purchases, which we don't control. The purchase records the stores and tax law require are kept by them. You can delete your account in the app or without it.
• Device identifiers — a hash of the identifier of each phone you sign in on, kept while your account is open and used only to spot a returning banned account.
• Warnings, suspensions and bans — a record of each decision about your account (what it was, why, when, and until when) is kept while your account is open.
• Safety and ban records — when an account is suspended or banned, we keep a keyed hash of the email address, phone number, Google account ID and device identifier behind it, never the values themselves, together with the reason and when the ban ends. It is kept even if the account is deleted, so that a banned person cannot simply sign up again. A suspension's record is deleted when the suspension ends or is lifted; a permanent ban's is kept for up to 5 years.
• Transaction records — kept for as long as tax and accounting law requires, typically 6 to 7 years.
• Reports — kept for up to 2 years so that patterns of behaviour can be seen.

8. Your rights

Wherever you live, you can ask us to give you a copy of your data or to delete your account. You can delete it yourself in the app, under Settings, Account. If you don't have the app any more, our delete your account page says how to ask us. If you are in the UK or the EEA you also have the rights below.

• Access — a copy of the personal data we hold about you.
• Rectification — correction of anything inaccurate.
• Erasure — deletion, subject to the retention exceptions in section 7.
• Restriction — pause processing while a dispute is resolved.
• Portability — your data in a machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling for recommendations.
• Withdraw consent — at any time, for anything based on consent.

Write to legal@frizz.live. We respond within one month and will not charge you unless a request is manifestly excessive. Several controls are immediate in the app: your blocked list, notification settings, who can find you, and whether others see when you're online or typing, all under Settings.

You can complain to your data protection authority. In the UK that is the Information Commissioner's Office at ico.org.uk.

9. United States residents

A number of US states have comprehensive privacy laws, currently including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia. If you live in one of them you have the rights below. They are not absolute, and there are cases where the law lets us decline.

• Know and access — whether we are processing your personal data, and a copy of it.
• Correct — fix anything inaccurate.
• Delete — subject to the retention exceptions in section 7. The delete your account page says how.
• Portability — a copy of what you gave us, in a form you can take elsewhere.
• Opt out — of targeted advertising, the sale of personal data, and profiling that produces legal or similarly significant effects. We do none of those three ourselves. The GIF picker is the one place your data reaches a company that may use it for targeted advertising (section 6, KLIPY). You can avoid it by not opening the GIFs tab.
• No retaliation — using any of these will not get you worse service.

Depending on the state, you may also be able to ask which categories of third parties we disclosed personal data to. Section 6 lists those categories, and we will name the providers in any of them on request.

California

Under the CCPA as amended by the CPRA you may request the categories and specific pieces of personal information we have collected, the sources, the purpose, and the categories of third parties it was disclosed to; ask for deletion; ask for correction; and limit the use of sensitive personal information. We do not sell personal information. Your GIF searches and IP address reach KLIPY, which may use them for its own advertising (section 6). We have no control over that use, so if you'd rather avoid it, don't open the GIFs tab.

We collect the categories described in section 2, which map to identifiers, commercial information, internet activity, geolocation, audio and visual information, and inferences.

How to exercise any of this

Write to legal@frizz.live, or use the support page. We have to check you are who you say you are before we hand over or delete anything, so we may ask for enough information to match you to an account. Anything you send for that is used to verify you and for nothing else. An authorised agent may act for you with written permission, and we may ask them to prove it.

If we say no

You can appeal. Reply to the same address and say you are appealing, and we will tell you in writing what we decided and why. If we still decline, you can complain to your state attorney general.

Do Not Track

Browsers offer a Do Not Track setting, but no agreed standard ever emerged for what a site should do when it sees one, so we do not respond to it. California requires us to say that plainly. In practice it changes nothing here: as section 12 describes, this site runs no analytics at all until you agree to it, whatever your browser sends.

10. Security

Data is encrypted in transit and at rest. Access to production data is limited to the members of the company who need it, and is logged. We review and update our security practices on an ongoing basis.

No system is perfectly secure. Where a personal data breach is likely to affect your rights, the law requires us to notify the relevant supervisory authority within 72 hours of becoming aware of it, and to tell you without undue delay where the risk to you is high. We are bound by those obligations, and we keep a documented incident response process so that we can meet them: it sets out what counts as an incident, who is responsible, how we contain and assess one, and who has to be told.

11. International transfers

Your account, your profile, your messages and the files you upload (photos, voice notes and videos) are stored in our database and file storage in London, in the United Kingdom. The small server functions that send pushes and run checks run on our hosting provider's global network, usually in the region nearest the request.

Some providers process data in the United States: push delivery (Expo, and Google's Firebase Cloud Messaging), app update checks (Expo), content moderation, email delivery and purchase checks. Live video and audio go through our real-time provider's global network, through the server nearest the people in the room, which can be outside the UK and the EEA. Kamsa Holdings LLC is registered in the United States, but the people who run the service reach your data from the United Kingdom and the European Economic Area.

Two things are processed in the European Union. Crash and error reports from the app go to our error monitoring provider's EU servers, and analytics for this website stays on its provider's EU infrastructure (section 12).

Where your data leaves the UK or the EEA, we rely on the data protection terms each provider offers, which incorporate the European Commission's Standard Contractual Clauses and the UK Addendum where those apply. Ask us at legal@frizz.live which terms cover a particular provider and we will tell you. If any of this changes, this section changes with it.

12. Cookies and analytics

The Frizz app does not use cookies, and it has no analytics.

This website

We use a product analytics provider, one of the categories in section 6, to count visits so we can tell which parts of the site are worth keeping. We will tell you which provider it is on request at legal@frizz.live. It does nothing until you agree to it. On your first visit you are asked, and until you answer, and forever if you decline, no analytics event is sent and no analytics cookie or stored identifier is created.

If you agree, four kinds of event are sent: that you agreed, which pages you view, when you leave a page, and that you joined the waitlist. Nothing else is sent. The leaving event is what tells us whether a page was read or skipped past; it records that you left and when, not where you went. Each event carries the ordinary details of any web request: your browser, operating system, device type, the page you came from, and the IP address the request arrives from.

We do not record what you type, we do not capture your screen, and we do not build a profile of you. Every optional form of collection our analytics offers is switched off: autocapture of clicks and taps, session recording, surveys, page-speed measurement, heatmaps of where you scroll and click, dead-click detection, and error capture. Person profiles are off entirely, so the events are not gathered into a record of an individual.

Analytics data is processed in the European Union, on that provider's EU infrastructure, and is not transferred to the United States.

The script is served from this website rather than a third-party network, and the events are sent to this website too and forwarded on from our own servers. So your browser never connects to anyone but us, and opening a page tells no one else you were here.

That is about the events arriving reliably, not about hiding you. The provider still receives the events, including the IP address they came from, because we pass it on rather than replacing it with ours. Routing the requests through our domain stops them being dropped by content blockers; it does not make you anonymous, and we would rather say so than let the arrangement imply otherwise.

Aside from that, this site sets only what is strictly necessary to serve the pages, and no advertising or cross-site tracking cookie of any kind.

Changing your mind

Withdrawing is as easy as agreeing was. The button below forgets your choice and stops analytics immediately, and you will be asked again on your next visit.

Forget my choice

Clearing this site's data in your browser does the same thing. You can also ask us at legal@frizz.live and we will tell you what, if anything, is held.

13. Adults only

Frizz is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that an account belongs to a minor we close it and delete the data. If you believe a minor is using Frizz, tell us at support@frizz.live and we will act quickly.

14. Changes

We will post any update here with a new date at the top. If a change materially affects how we use your data we will give at least 30 days' notice in the app before it takes effect.

15. Contact

Privacy questions, data requests and complaints go to legal@frizz.live, or by post to Kamsa Holdings LLC, 30 N Gould St, Ste N, Sheridan, WY 82801, United States.