Draft for legal review. This page has not been reviewed by counsel and is not yet in effect. Text marked [TBD: …] is a placeholder for a fact we have not confirmed yet.

Subprocessors

Status: draft for legal review. Last updated: October 8, 2026.

These are the companies that process personal data on our behalf to run Frndo. Each receives only what it needs for its job, and we require each to protect that data at least as well as our Privacy Policy does. We require that none of them use your data to train their own AI models or for their own marketing. [TBD: confirm a data processing agreement with each provider includes these terms.]

Core infrastructure

Google Cloud

  • Purpose: hosting for Frndo's servers, file storage, logging, and scheduled jobs.
  • Data: all app data, including account details, conversations, memories, location, calendar copies, and technical logs.
  • Location: United States (us-east1, South Carolina).

MongoDB Atlas

  • Purpose: Frndo's database.
  • Data: all app data, including account details, conversations, memories, location, calendar copies, and settings. Conversations, memories, and other sensitive fields are encrypted before they are stored.
  • Location: [TBD: Atlas cloud provider and region].

RunPod

  • Purpose: GPU servers that run Frndo's own AI models: the conversation model, the models that extract and search memories, and the text-to-speech model that gives Frndo its voice.
  • Data: your messages and recent conversation, relevant memories and profile, approximate location and other context Frndo uses to reply, results of lookups such as weather or places, and the text of Frndo's replies for speech.
  • Location: [TBD: RunPod data center region].

Sign-in

Apple

  • Purpose: Sign in with Apple.
  • Data: Apple verifies your sign-in and gives us your Apple account identifier and, if you choose, your name and email address. Speech recognition runs on your iPhone, so your voice is not sent to Apple or to us.
  • Location: United States and Apple's global infrastructure.

Answering your questions

These providers receive only the details needed to answer a specific request. None of them receives your name, email, or conversation history.

Google Places

  • Purpose: finding nearby places such as parks, hikes, and restaurants.
  • Data: your approximate coordinates and the search term.
  • Location: United States.

OpenStreetMap Nominatim (OpenStreetMap Foundation)

  • Purpose: turning coordinates into an address, and place names into coordinates.
  • Data: your coordinates, or a place name.
  • Location: [TBD: confirm; the public Nominatim service is operated from the EU and UK].

Open-Meteo

  • Purpose: weather.
  • Data: your approximate coordinates.
  • Location: [TBD: confirm; Open-Meteo is based in Switzerland].

Ticketmaster

  • Purpose: events near you.
  • Data: your approximate coordinates, a search term, and dates.
  • Location: United States.

Yelp

  • Purpose: events near you, when enabled.
  • Data: your approximate coordinates.
  • Location: United States. [TBD: confirm whether this provider is enabled in production]

NewsData.io

  • Purpose: local and topical news.
  • Data: your city or region, your country, and the news topics you're interested in.
  • Location: [TBD: confirm provider location].

SerpApi

  • Purpose: product search, and flight search when used.
  • Data: the search query, and for US users your city, state, and country.
  • Location: United States.

Duffel

  • Purpose: flight search.
  • Data: the route and dates you ask about. No passenger names.
  • Location: [TBD: confirm provider location; Duffel is based in the UK].

App reliability

Our telemetry service, Blip, is software we run ourselves, so it is not a subprocessor. The servers it runs on are provided by Railway.

Railway

  • Purpose: hosting for our telemetry service, Blip, which stores crash reports and app performance telemetry.
  • Data: crash and error reports, performance measurements, permission status, device model, operating system, language, and the monthly installation code described in our Privacy Policy.
  • Location: [TBD: Railway region for the telemetry service].

Website

Resend

  • Purpose: sending waitlist confirmation emails.
  • Data: your name and email address.
  • Location: United States.

Railway (website hosting)

  • Purpose: serving frndo.ai and storing waitlist entries.
  • Data: your IP address and browser information when you visit, and waitlist entries.
  • Location: [TBD: Railway region for the website].

Changes

We'll update this page before we add a new subprocessor that receives personal data. [TBD: whether to offer email notice of changes.]