Legal
Privacy Policy
Last updated: October 4, 2026
Plain-English summary: How Fro collects, uses, shares, and deletes your information. If anything here conflicts with your rights under local law, local law wins.
1. Who we are
Fro, Inc., a Delaware corporation, is the data controller for the information described here. Fro is a marketplace for local services delivered at your address: customers book, providers travel, and payment is held until the work is confirmed. You can contact us at:
- Email: support@froservices.com
2. What we collect, at a glance
The table below is a summary. Each row is expanded in the sections that follow. A category-by-category breakdown formatted for the App Store privacy label and Google Play's Data safety form is on the App Privacy & Data Use page.
| Identity and contact | Name, email, phone, username, bio, photo | Running your account |
| Location | Approximate location, booking address, provider live position | Finding and delivering services |
| Payments | Stripe references, card brand and last four | Charging, payment holds, and payouts |
| Identity documents | Government ID, selfie, professional licences | Verification and fraud prevention |
| Content | Messages, proof photos, service media, reviews | Delivering and evidencing bookings |
| Device and usage | Push token, installation ID, in-app interactions | Notifications and ranking quality |
| Launch waitlist (website only) | Email address, site language, whether you signed up to book or to work, and optionally a trade, a city, and a mobile number | One announcement when Fro launches |
3. What you give us
- Name, email, phone number
- Username, bio, and profile photo
- City, state, country
- Primary address and precise coordinates for your service location
4. Location data
Fro is a location-first product. Here's exactly how we handle location:
- Customers: We use approximate location to show nearby services and store the precise address you provide for bookings. Customers are never tracked in the background.
- Providers: We collect precise location (latitude, longitude, accuracy, heading, and speed) while a booking is active so the customer can watch you approach. Location is collected in the background on both iOS (UIBackgroundModes: location) and Android (ACCESS_BACKGROUND_LOCATION).
- Privacy guarantee: Background location is collected only during an active booking, is visible only to that booking’s customer, and stops when the job ends. We hold one current position per active booking, overwritten as the provider moves. It is not a movement history.
- Demand map: Data shown to providers on the demand map is aggregated into geographic cells and cannot identify individual customers.
5. Device permissions
Fro asks for the smallest set of permissions the product needs, and each one is requested at the moment it is used rather than at launch.
- Location, while using the app: shows your position on the map and finds services inside your radius. Decline it and you can still browse and book by typing an address.
- Location, in the background: providers only, and only while a booking is in progress, so the waiting customer can follow the arrival.
- Notifications: booking status, messages, payment events, and team offers. Each category can be set to Off, Muted, or Alerts in Profile → Notifications; promotional messages are off by default.
- Camera and photo library: profile photos, service photos and videos, and the before/after proof attached to a booking. Used only when you choose to attach something.
6. Identity documents
Stripe Identity may capture a government ID and a selfie for customer verification. Providers uploading a professional licence provide the licence number, issuing authority, region, expiry, and front/back document images, stored in a private bucket readable only by reviewing admins.
Fro does not run third-party criminal background checks, and does not claim to. What we verify is stated plainly on the Trust & Safety page.
7. Payment information
We store Stripe customer and Connect account identifiers, card brand and last four digits, bank name, last four, and Stripe Financial Connections identifiers. Full card numbers and CVV never reach Fro's servers, because Stripe tokenizes them. Providers are paid into their own Stripe Connect account, and Stripe collects the tax and banking information it needs to make those payouts directly.
8. Content and communications
Messages and attachments, before/after proof photos, service photos and videos, comments, reviews, and dispute threads (read by Fro admins when you open a case). Contact details are not exchanged between customer and provider before a booking is confirmed, and messaging stays inside the app.
9. If you are a provider
Offering services means some of your information is shown to customers so they can choose and book you:
- Your name, username, photo, and bio
- Your services, prices, photos, and videos
- Your ratings, reviews, and completed-booking record
- Your live location, to a customer, while their booking is active
Fro also uses your booking record (completions, cancellations, and reviews) to decide where your services appear in search. Stripe receives the identity, tax, and bank details needed to pay you; see the Provider Addendum.
10. Device and usage data
- Firebase Cloud Messaging tokens
- Platform and app state
- A persistent
installation_idgenerated once per app installation that persists across logout and account changes - Engagement events used to rank search and the Discover feed
- Referral click attribution
None of this is used to track you across other companies' apps or websites, and none of it is shared with advertisers.
11. Data stored on your device
Fro is offline-first: a local SQLite database caches your profile, threads, messages, and notifications so the app works without a connection. It is removed when you delete the app.
12. Launch waitlist on this website
Everything above describes the Fro app. This section describes the one thing this website collects on its own: the “Be first to know when we launch” form, which appears on the home page, on /join, and in the footer of every page.
If you enter your address there, we store your email address, which language version of the site you were reading, and which of the two options you picked — whether you are here to book a service or to offer one. Submitting the form is your consent, and consent is the legal basis we rely on; there is no other way onto this list and no other use for it.
What we deliberately do not store alongside it:
- No IP address
- No device, browser, or operating system details
- No referring page, and no record of where you were before
- No advertising, campaign, or tracking identifiers
- No cookies are set by the form
We use it to send one announcement when Fro launches, in the language you were reading and worded for the side of the marketplace you told us you are on. Providers hear from us before customers do, because somebody offering a service has to be verified and set up before there is anything for anybody to book. It is not linked to any Fro account, it is never sold or shared, and it is kept until that announcement has been sent or until you unsubscribe or ask us to remove you, whichever comes first. Every email we send from it carries a one-click unsubscribe link, and you can ask to be removed at any time by writing to support@froservices.com.
If you said you offer services, we ask two more things — and those are optional too. Once your email address is saved, providers see a short step asking what kind of work they do and which city or metro area they work in. Either can be left blank, and the whole step can be skipped in one click. We ask because Fro can only open a city once enough providers there can answer the bookings, so this is what decides which cities open first and who we contact when they do. Neither question is asked of anyone who signed up to book.
A mobile number is optional, and separate. Once your email address is saved, the form offers a second, entirely optional step: a mobile number, so we can text you at launch as well. It is never required, and the form will not send it unless you tick the box agreeing to receive that message. If you would rather not have texts, ignore that step — nothing about your email signup changes.
If you do give a number, we store the number, the moment you agreed, and the exact wording you agreed to — the sentence itself, in the language you were reading it in, kept word for word rather than as a reference to it. We do that so that if we ever change what we are asking permission for, there is no question about what any particular person actually said yes to. The wording you agreed to is: one text message from Fro when the app launches. That is the whole of it — not a subscription, and not the start of a series.
Message and data rates may apply. Reply STOP to any message to opt out, or HELP for help. You can also ask us to remove your number at any time by writing to support@froservices.com.
We do not share or sell mobile opt-in data or phone numbers with third parties, and we never share them for marketing purposes. A number is used to deliver the one message you asked for and nothing else.
13. Who we share with
| Supabase | Hosting, database, storage, realtime |
| Stripe | Payments, payment holds, Connect payouts, Identity, Financial Connections |
| Google Firebase | Push notifications and crash reports |
| Google Maps | Maps, geocoding, and routing |
| Google and Apple Sign-In | Optional authentication |
| Other users | Limited to what a booking requires |
| Legal/safety | Disclosures as required by law |
14. What we do not do
Fro runs no third-party analytics SDK. We do not use Firebase Analytics, Sentry, Mixpanel, or advertising networks. The app does run one third-party crash-reporting SDK, Firebase Crashlytics, which records a stack trace and basic device information when the app crashes; those reports carry no account identifier and are deleted after ninety days. Fro does not sell personal information and does not share it for cross-context behavioural advertising. Because nothing in the app tracks you across other companies’ properties, Fro never shows the App Tracking Transparency prompt.
15. App Store and Play disclosures
The App Store privacy label and the Google Play Data safety form describe the same collection this policy does, grouped into each store's own categories. We publish that mapping in full, covering every data type, its purpose, whether it is linked to you, and every permission the app requests, on the App Privacy & Data Use page, so you can check the label against the policy without taking either on trust.
16. Why we process data (legal basis)
- Contract: Bookings, payments
- Legitimate interests: Safety, fraud prevention, ranking quality
- Legal obligation: Tax, financial records
- Consent: Marketing, optional permissions
17. How long we keep it
- Account data: As long as the account is open
- Financial records: Seven years, covering a six-year tax review window plus a year of margin
- Messages, attachments, and job photos: Kept with the booking record, which outlives the account
- Live location: Only for the life of the booking plus a short operational window
- Dispute records: Until the case closes
- Which versions of our terms you accepted, and when: Kept after the account closes, as evidence of the agreement
- On-device cache: Until you delete the app
18. Your rights
Depending on where you live, you may have the right to:
- Access your data
- Correct inaccurate data
- Delete your data
- Export your data (portability)
- Object to processing
- Withdraw consent
California residents may also opt out of the sale or sharing of personal information; Fro does neither. To make a request, email support@froservices.com from your account address.
19. Deleting your account
You can delete your account and personal data at any time from inside the Fro app: Profile → Delete Account. If you have already uninstalled the app, the Delete your account page does the same thing: it emails a six-digit code to confirm the account is yours, then runs the identical process. Both routes take effect immediately and complete 30 days later.
Deleting from the app signs you out and puts the account on hold for 30 days. During the hold your profile is hidden and your services and package deals are paused, but nothing is erased. Sign in again before the 30 days are up and choose “Keep my account” to restore everything exactly as it was; signing in alone does not cancel it. After 30 days it cannot be undone.
Some records survive deletion. Booking and payment records are kept seven years, because US tax law allows a six-year window for reviewing under-reported income, and we keep one further year as margin. Messages, attachments, and job photos are kept because the other party to that booking co-owns them and keeps their copy, as are reviews you wrote, anything tied to an open dispute, chargeback, or refund, and the record of which versions of our terms you accepted. Everything else is removed: profile, saved addresses, sign-in credentials, identity documents, saved payment methods, device tokens, and live location.
20. Security
Row-level security on every table, encrypted transport, private storage buckets, tokenized payments, and admin access limited to case review.
21. Children
Fro is not directed to anyone under 18. Do not create an account if you are under 18.
22. International transfers
Data is processed in the United States.
23. Changes
Material changes to this policy are announced in-app before they take effect.
24. Contact
Email: support@froservices.com
