Privacy Policy

Last updated: October 16, 2026

What we collect

• Account details — email and display name (email sign-in), your Google account ID, name and email (Google sign-in), or your phone number (phone sign-in). Passwords are stored only as salted scrypt hashes; we cannot read them.
• Your creations — prompts, optional reference photos, and the videos generated for you.
• Usage and security data — how many videos you generated today (to apply plan limits), your IP address (for rate limiting and guest limits), and your plan.
• Payments — handled by Stripe. We store your plan and Stripe customer/subscription IDs; we never see or store your card number.

What stays on your device

Your Library (videos you generated) is stored in your browser’s IndexedDB on your device. Settings and your sign-in token are stored in your browser’s local storage. Erase them any time with More → Erase library or by clearing site data.

How we use it

To run the app: sign you in, generate and show your videos, enforce plan limits, take payment, prevent abuse, and keep Explore working. We do not sell your data and we do not show ads.

Who else touches it (only if the operator turns it on)

• Google — to verify Google sign-in.
• Twilio — to text your verification code (phone sign-in).
• Stripe — to process subscriptions.
• An inference provider (for example Replicate) — only if the operator runs generation through one; your prompt and photo are sent to it to make the video. If the operator runs the model on their own GPU, prompts and photos never leave their server.

FRANK does not ask you to sign in to any separate third-party AI service.

Explore is public

Videos you share to Explore, with your chosen display name and caption, can be seen by anyone who opens the app until you remove them.

How long we keep things

Generated videos and reference photos are deleted automatically after a retention period (14 days by default) unless the video is shared to Explore. Sessions expire after 30 days. Deleting your account removes your profile, sessions, videos, reference photos and Explore posts right away; payment records may be kept by Stripe as the law requires.

Your choices

• Delete your account and server-side videos in More → Delete account.
• Remove an Explore post with Remove on the post, or delete the video from your Library.
• Use FRANK as a guest to avoid giving an email or phone number (guests cannot share to Explore or buy a plan).

Children

FRANK is not for children under 13 (or the minimum age in your country). If you believe a child has an account, tell us and we will remove it.

Security

Connections should be served over HTTPS; passwords are hashed; session tokens are stored hashed on the server. No system is perfectly secure.

Changes

If this policy changes, the date above changes. Material changes will be announced in the app.

Questions or requests: open an issue at github.com/joeyfrogge-jpg/frank/issues. This page is provided with the FRANK project; the operator of the server you are connected to is responsible for its accuracy and should have it reviewed for their jurisdiction.