← box fraise

Privacy

Effective April 2026.

I.

What we collect

When you create an account, we collect your email address and any display name you choose to provide. When you make a purchase or earn a loyalty steep, we record the transaction details necessary to maintain your balance and history.

We do not collect your location in the background. We do not build advertising profiles. We do not sell data to third parties.

II.

How we use it

Your email is used to send transactional messages — sign-in links, order confirmations, loyalty updates. You will not receive marketing email unless you explicitly opt in.

Your loyalty history is used to calculate your balance and display your steep record in the app. It is not shared with other users or businesses beyond what is necessary to credit your account.

Search queries on fraise.box are proxied to Brave Search. We do not log your search queries. Brave's privacy policy governs what Brave retains on their end.

III.

Credential security

Authentication tokens are stored in the iOS Keychain with biometric protection. They cannot be read by other apps or extracted from a locked device. Every request to our API is signed with HMAC-SHA256 and carries a single-use nonce to prevent replay attacks.

We do not store passwords. Sign-in is passwordless — we send a short-lived link to your email address.

IV.

Data retention

Your account and transaction history are retained for as long as your account is active. You may request deletion of your account and all associated data by contacting us through the support page. Deletion is permanent and irreversible.

V.

Third parties

We use the following third-party services:

Stripe — payment processing. Your card details are handled entirely by Stripe and never pass through our servers.

Resend — transactional email delivery.

Railway — infrastructure hosting for the API and this website.

Brave Search — private web search on fraise.box.

VI.

Contact

Questions about this policy or requests to access or delete your data can be sent through the support page or by replying to any transactional email from fraise.box.