Frank privacy notice

Information Frank handles

When you create an account, Frank stores your name, email address, sign-in credentials or provider account link, and household membership. You may add cooking preferences, budget, pantry items, meal plans, recipes, shopping lists, allergies, nutrition goals, messages, photos or receipts. Frank also stores connection settings, permissions, action history and usage records needed to run the service.

If you choose Google sign-in, Google gives Frank your account identifier, verified email address and name. Connecting Gmail, Outlook, YNAB or a grocery store is a separate choice; each connection accesses the data described when you connect it.

How Frank uses it

Frank uses this information to sign you in, plan meals, manage your kitchen and grocery work, answer your requests, run optional connections, deliver service emails, prevent abuse and support billing. When you use an AI feature, the information needed for that request can be processed by the model provider. A connected assistant receives only the information allowed by the permissions you grant it.

Who receives it

Other members of a household you join can see its shared plans, pantry and shopping work. Service providers process data to operate Frank, including hosting, transactional email, AI, payment and the outside services you choose to connect. Frank does not store full payment card numbers; payment checkout is handled by the payment provider. A grocery store receives information you approve sending to it.

Your choices

You can edit kitchen information, disconnect optional providers and revoke assistant access in Frank. Disconnecting does not undo a change already made or erase information a provider already received. To request account and associated data deletion, use Delete your Frank account. We aim to complete requests within 30 days and will explain any shared household, billing, security or legal records we must retain.

Gmail and Google user data

If you choose to connect Gmail, Frank asks Google for read-only access (the gmail.readonly scope). Frank uses it only to find grocery order and receipt emails from a short list of grocery retailers, such as Instacart, Kroger, Safeway, Walmart, Costco and Amazon, and to turn the items and purchase details in them into pantry and grocery-budget updates. Every update waits for you to review it unless you turn on automatic updates in Receipts. Where automatic updates are offered and you have turned them on, Frank applies only the updates it is sure about, emails you each time with a link to change or undo them, and still asks first about anything uncertain. Automatic pantry updates and automatic budget recording are separate choices, both off until you turn them on, and you can turn them off at any time. Recording a purchase in a connected budget app notes a purchase you already made; Frank never spends, pays or moves money. Frank checks the sender before it opens a message. It does not read, summarize or use your other email, and it does not send, delete or change anything in your mailbox.

Frank keeps the connection tokens, encrypted, so it can check for new receipts. It keeps the grocery items and purchase details it extracts and a record that a message was imported. Where Frank shows you the receipt it read, on that receipt’s page in Frank, it is showing a cleaned-up copy it keeps so that you can check what it did: the sender, the subject and the receipt lines, not the rest of the message or your mailbox. Frank keeps such a copy for up to 90 days. You can remove it sooner from the receipt, and it is deleted when you delete your account. That copy is shown only to the person whose inbox it came from unless they choose to share it; other members of the household see the purchase and what changed, not the email. Frank does not sell Gmail data, does not use it for advertising, and does not allow people at Frank to read it except with your consent for support, to investigate abuse, or to meet legal requirements. Items taken from receipts may be processed by Frank’s AI service provider to match them to your pantry, only to provide that feature to you, and not to train general AI models.

Frank’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect Gmail in Frank at any time, which deletes the stored tokens and asks Google to revoke access, or revoke it in your Google Account permissions.

Security and contact

Frank uses encrypted connections and limits account access by sign-in and granted permissions. No security measure is perfect. For privacy questions or data requests, email cody@hoptimism.ai.