Privacy policy

Last updated: August 23, 2026

Fran is a voice companion for daily conversation. This page explains, in plain words, what information we handle when you use Fran, why we handle it, and the choices you have. Fran is operated from Sweden and follows the EU General Data Protection Regulation (GDPR). If anything here is unclear, write to us at hello@lovefran.me.

What we collect

• Your phone number. We use it to sign you in with a one-time SMS code and to place and receive your calls. It is stored in encrypted form.
• Your conversations. Conversations on your account are kept as written transcripts, together with the memories Fran keeps (interests, people, and plans you mention) so the next chat can continue where the last one ended.
• Browser demo conversations are not linked to an account. Their transcripts and memories are discarded.
• Settings and preferences, such as your daily call time and phone-call delivery channel, and your consent choices.
• Payment details. If you buy a subscription, payment is handled by Stripe. We never receive your full card number.
• Security records. We keep limited technical logs, such as hashed identifiers and hashed IP addresses, to prevent abuse and limit repeated sign-in attempts.
• Optional website analytics. If you allow analytics, Umami receives page views, broad referral and campaign information, device and browser type, language, screen size, coarse country, and fixed sign-up step events from public pages. We never send phone numbers, verification codes, names, care notes, conversation content, or audio to analytics.

How we use it

We use this information to provide the service, to let Fran remember context between conversations, to keep the service safe, to process payments, and to meet our legal obligations. When you consent, we also use aggregate analytics to understand how people find the public site and move through sign-up. We do not sell your personal information, show advertising, or use advertising trackers.

Who helps us run Fran

A small number of service providers process data on our behalf, only as needed to run the service: Supabase (sign-in and database), 46elks (SMS and phone delivery), OpenAI (the AI that understands and responds during conversation), LiveKit (voice-call transport), Meta (WhatsApp calls, if you choose WhatsApp), Stripe (payments), Vercel (website hosting), and Umami (cookieless aggregate website analytics).

Cookies

We use only cookies that are strictly necessary for a feature you ask us to provide. Supabase authentication cookies keep you securely signed in. The mira_guest_session cookie keeps a browser demo isolated and expires after seven days. These cookies are not used for analytics or advertising, and rejecting analytics does not limit the site or service.

Umami analytics is cookieless, but we still ask before loading its script or sending it any information. Until you choose Allow analytics, no request is made to Umami and analytics actions are discarded rather than saved for later. Your choice and its time are stored only in this browser's local storage, without an account or device identifier, for up to six months. This local record is necessary to remember the choice you made.

You can refuse or allow analytics with equally available choices and the prompt disappears after your answer is saved. To change the choice before it expires, clear Fran's stored site data in your browser and reload the page; the prompt will appear again. This does not undo processing that took place while analytics was allowed. We also respect a browser's Do Not Track setting.

Your choices and rights

• On your Memories page you can read everything Fran remembers and edit, pause, or delete any of it. Deleting a memory does not delete the transcript it came from.
• You can change or switch off the daily call whenever you like.
• Under the GDPR you can ask us to access, correct, delete, or export your information, or to restrict or object to how we use it. Email us at hello@lovefran.me and we will help, including deleting your account and its data. You can also complain to your data protection authority. In Sweden, that is IMY (Integritetsskyddsmyndigheten).

How long we keep information

We keep your information while your account is active, or for as long as needed for the purposes above. If you ask us to delete your account, we delete the personal information associated with it, except where the law requires us to keep certain records. Consented website analytics is retained only as long as needed to understand and improve the public sign-up journey, subject to the configured analytics-service retention period.

Children

Fran is designed for adults. It is not directed to children, and we do not knowingly collect information from children.

Not a medical or emergency service

Fran is an AI companion. She is not a medical, monitoring, or emergency service, and conversations with Fran are not a substitute for professional care. If you are in crisis, contact your local emergency number.

Changes to this policy

If we change this policy, we will post the new version here with an updated date.

Contact

Questions about privacy? Write to hello@lovefran.me.