Privacy Policy

Who we are

Frozz AI ("Frozz AI", "we", "us", "our") is a mobile software house based in Gresik, East Java, Indonesia. We design, build, and publish mobile applications for Android and iOS.

For apps published under the Frozz AI developer account, Frozz AI is the data controller responsible for your personal data, as defined under Indonesia's Personal Data Protection Law (Undang-Undang No. 27 Tahun 2022 tentang Pelindungan Data Pribadi, "PDP Law") and other applicable laws.

Scope

This policy applies to all mobile applications published by Frozz AI on the Apple App Store and Google Play Store (each an "App"), to the website frozzai.biz.id, and to related services we provide (together, the "Services").

An individual App may show an additional in-app privacy notice describing data practices specific to that App. Where it does, that notice supplements this policy. If you are using an app that Frozz AI built for another company and that is published under that company's name, that company's privacy policy applies instead.

Data we collect

We collect only the data needed for an App's features to work. Depending on the App and the features you use, this may include:

Data you give us

• Account data — name, email address, phone number, password (stored in hashed form), and profile photo if you choose to add one.
• User content — text, photos, files, messages, or other content you create, upload, or submit in an App, including prompts sent to AI features.
• Support communications — messages you send us by email, WhatsApp, or in-app forms, and the details you include.
• Purchase information — records of in-app purchases or subscriptions. Payments are processed by Apple or Google; we do not receive or store your full card details.

Data collected automatically

• Device information — device model, operating system and version, app version, language, and time zone.
• Identifiers — an app-specific installation ID, push notification token, and, only where you allow it, advertising identifiers (IDFA / Android Advertising ID).
• Usage data — features used, screens viewed, session length, and interactions within the App.
• Diagnostics — crash logs, performance data, and error reports.
• Approximate location — derived from IP address, used for security and regional settings.

Data collected with your permission

• Precise location, camera, photos, microphone, contacts — only if an App feature needs it and only after you grant permission. See Device permissions.

We do not intentionally collect sensitive (specific) personal data such as health, biometric, financial account, or religious data unless an App clearly requires it for a feature you choose to use, in which case we will ask for your explicit consent first.

How we use data

• To provide, operate, and maintain the Apps and their features.
• To create and manage your account and authenticate you.
• To process AI features you request, such as generating responses or recommendations from your input.
• To process purchases and verify subscriptions with Apple or Google.
• To send service notifications and, where you opt in, push notifications or updates.
• To respond to support requests and feedback.
• To monitor performance, fix bugs, and improve the Apps.
• To detect, prevent, and address fraud, abuse, and security issues.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell your personal data. We do not use your user content to train AI models without your explicit consent.

Legal basis

We process personal data on one or more of the following grounds recognised by the PDP Law and similar laws:

• Contract — processing needed to provide the Services you request.
• Consent — for example, for optional permissions, marketing, or personalised advertising. You may withdraw consent at any time.
• Legal obligation — where the law requires us to process or retain data.
• Legitimate interests — such as keeping the Services secure and improving them, balanced against your rights.

Device permissions

Apps request device permissions only when a feature needs them, and explain why at the time of the request. Common examples:

• Camera / Photos — to take or upload images within the App.
• Microphone — for voice input or recording features.
• Location — for location-based features such as maps or nearby results.
• Notifications — to send reminders and updates.
• Contacts — only for features like inviting friends, and never uploaded without your action.

You can grant or revoke permissions at any time in your device settings. Some features may not work without the relevant permission.

Sharing & third parties

We share personal data only as described here:

• Service providers — trusted vendors that host data or provide infrastructure on our behalf, under contracts that require them to protect your data. Depending on the App, these may include Google Firebase (authentication, database, analytics, Crashlytics, cloud messaging), Supabase (database and authentication), Cloudflare (hosting and security), and AI model providers used to process AI features.
• Platform providers — Apple and Google, for app distribution, payments, and subscription verification.
• Legal reasons — when required by law, court order, or a lawful government request, or to protect the rights, safety, and property of Frozz AI, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your consent — in any other case, only when you ask us to.

Third-party services have their own privacy policies, which we encourage you to read.

Analytics, ads & tracking

We use analytics and crash reporting to understand how the Apps perform. This data is used in aggregated or pseudonymised form wherever possible.

If an App shows advertising or uses data to track you across apps and websites owned by other companies, we will ask for your permission first. On iOS this is done through Apple's App Tracking Transparency prompt. On Android you can reset or delete your Advertising ID in your device settings. If you decline, you will still be able to use the App, but you may see non-personalised ads.

Data retention

We keep personal data only as long as needed for the purposes described in this policy:

• Account data and user content — while your account is active, and deleted within 30 days after you delete your account.
• Diagnostics and analytics — typically up to 14 months.
• Support communications — up to 24 months after the request is resolved.
• Transaction records — as long as required by tax and accounting laws.

Backups are overwritten on a rolling basis and may persist for up to 30 additional days.

Account & data deletion

You can delete your account and the associated personal data at any time:

• In the App — where an App has accounts, go to Settings → Account → Delete account.
• By email — send a request to hallo@frozzai.biz.id with the subject "Data Deletion Request", stating the App name and the email or phone number linked to your account. You do not need to reinstall the App to make this request.

Deleting an App from your device does not delete your account. Subscriptions are managed by Apple or Google and must be cancelled through your App Store or Google Play account settings.

Security

We use administrative, technical, and physical safeguards to protect personal data, including encryption in transit (HTTPS/TLS), encryption at rest where supported by our providers, access controls, and the principle of least privilege. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs that is likely to affect your rights, we will notify you and the relevant authorities as required by the PDP Law (within 3 × 24 hours where applicable).

International transfers

Some of our service providers store or process data on servers outside Indonesia. When we transfer personal data abroad, we take steps required by the PDP Law to ensure an adequate level of protection, such as working with providers that offer appropriate contractual safeguards.

Your rights

Subject to applicable law, you have the right to:

• Get information about how your personal data is processed.
• Access and obtain a copy of your personal data.
• Correct inaccurate or incomplete data.
• Delete your data, or restrict or object to its processing.
• Withdraw consent at any time, without affecting earlier processing.
• Receive your data in a commonly used format (data portability).
• Object to decisions based solely on automated processing that significantly affect you.
• File a complaint with the relevant data protection authority.

To exercise these rights, contact us using the details below. We will respond within the time required by law, and in any case within 30 days.

Children's privacy

Our Apps are not directed at children under 13 (or the minimum age required in your country), and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

If a specific App is designed for children or families, it will follow Apple's Kids Category rules and Google Play's Families Policy, and its in-app notice will explain any differences.

Changes to this policy

We may update this policy from time to time. When we do, we will change the "Last updated" date above. If the changes are significant, we will notify you in the App or by email before they take effect.

Contact us

For questions, requests, or complaints about this policy or your personal data: