Privacy Policy

1. Who we are

Frolic is operated by The Frolic App Pty Ltd (ACN 697 066 265, ABN 61 697 066 265), a company registered in Victoria, Australia. We are based in Melbourne, VIC, Australia. We are subject to the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

2. What we collect

We collect the following personal information when you use thefrolic.app:

• Account and event data: name, email address, and phone number (optional) when you create or RSVP to an event.
• Activity preferences: your selected activities, do's, don'ts, and attendance choices.
• Expense data: receipt uploads, expense descriptions, and split amounts you voluntarily provide.
• Payment information: processed entirely by Stripe. Frolic does not collect, store, or have access to your credit card number, debit card number, or bank account details.
• Usage data: standard web server logs including IP address, browser type, and pages visited.

3. How we use it

Your information is used to:

• Coordinate your event and communicate with organisers and attendees.
• Process payments and expense splits via Stripe.
• Send transactional emails (e.g. payment confirmations, nudge reminders) via Resend.
• Improve the platform and fix technical issues.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-party services

We use the following third-party services to operate Frolic. Each has its own privacy policy:

• Stripe — payment processing. Frolic does not store your card details. All payment data is handled directly by Stripe in accordance with PCI DSS standards. See Stripe's Privacy Policy.
• Supabase — database and authentication, hosted in the Sydney (Australia) region. See Supabase's Privacy Policy.
• Resend — transactional email delivery. See Resend's Privacy Policy.
• Vercel — website hosting. See Vercel's Privacy Policy.

We do not share your data with any other third parties without your consent.

5. Cookies and analytics

We use minimal session cookies required for the platform to function (e.g. authentication tokens). We do not use advertising cookies, tracking pixels, or third-party analytics that identify individual users.

6. Data retention

We retain your personal information for as long as your event is active, plus 12 months after the event date for dispute resolution and legal compliance. You may request earlier deletion at any time.

7. Your rights

Under the Australian Privacy Principles, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion of your personal information.
• Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs.

To exercise any of these rights, email tom@thefrolic.app.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of Frolic after changes constitutes acceptance of the updated policy.

9. Contact

Questions or concerns about this policy? Contact us at tom@thefrolic.app.

The Frolic App Pty Ltd · ACN 697 066 265 · Melbourne, VIC, Australia