Privacy Policy

1. Information we handle

• Account and profile: your university or invited email address, authentication password, user ID, display name, selected avatar, university and campus, and settings such as language. Passwords are hashed by Supabase's authentication service and are not stored in the app's local storage. Information needed to maintain your signed-in session is also stored on your device.
• Content you create: posts, comments, poll content, marketplace listings, direct messages, attached images, and information included in reports or support inquiries.
• Interactions and settings: votes, saved posts, favorite listings, conversation and message status, notification preferences, and block and report records.
• Notification information: push notification tokens and app installation identifiers when notifications are enabled.

Campus information is selected by you; we do not collect GPS location. We do not collect student ID images. Email verification confirms access to the email address, not current enrollment or legal identity.

2. How we use information

We use information to authenticate accounts; provide posts, polls, listings and conversations; show content relevant to your selected university or campus; apply your profile, saved items and preferences; deliver notifications; prevent misuse; respond to reports and inquiries; and maintain the service. Authentication emails include confirmation codes needed for registration and password setup.

We do not use this information to serve advertising or track you across other companies' apps and websites for advertising purposes.

3. What other users can see

Posts, comments and listings display their text and images together with information such as your display name, avatar and campus. Your email address is not shown on public posts. Avoid including your own or anyone else's real name, student number, contact details or other personal information in text or images.

Direct messages are visible to the conversation participants. The operator may review content as needed to respond to reports or investigate misuse. Direct messages are not end-to-end encrypted. Authentication information, personal settings, and block and report records are not displayed as public posts.

4. Service providers and storage

Primary app data is stored in Supabase's Tokyo region and managed with access controls. We use Resend to deliver authentication emails and share recipients' addresses and information needed for delivery. Push notifications use Expo's notification service and Apple's notification infrastructure, which handle notification tokens, notification content and other information needed for delivery.

Some processing and storage by these providers, including email and notification delivery, may take place outside Japan. We share information needed to provide the relevant functions.

5. Retention and account deletion

We retain account information and content while your account is in use to provide the relevant features. You can edit your profile and settings in the app. “My Data” shows retrieved posts and settings.

You can delete your account from the app's Settings. During deletion, you can choose to keep posts and comments with their link to your account removed, or delete them. Related data such as listings and conversations, and the associated images, are deleted. If you keep posts, personal information you wrote in the text is not automatically removed. We cannot retract copies that other users have saved outside the app.

Retention and deletion of provider backups and operational records are subject to each provider's practices. Contact us below if you have questions about deletion or how information is handled.

6. Your choices

You can change profile information such as your display name, avatar and campus, as well as language and notification settings. Push notification permissions can also be changed in your device settings. You can report problematic posts or conversations using the in-app reporting menu and block users.

To review, correct or delete personal information, use the available in-app controls or contact us below. Depending on the request, we may ask for information needed to confirm the relevant account.

7. Contact

Operator: Frigg Inc.
Contact: Frigg contact form

Include “Pazz” and a description of your request in the subject or message. Do not send passwords or verification codes. You can also report misuse or problematic content through the app.

8. Policy updates

If our information practices change, we will explain the changes on this page or in the app and update the date above.