Privacy

Updated October 8, 2026

frenlock is an open beta on iPhone and Android. It runs on Solana devnet, a test network, with test tokens that have no value. There are no ads, and we sell nothing about you. Here is what goes where.

Signing in and your wallet

You sign in with your email address and a one-time code. Privy handles the sign-in, creates your Solana wallet and keeps it secure. frenlock never holds your wallet's private key. See Privy's privacy policy.

On Android you can sign in with a wallet app on your phone instead, through Solana's Mobile Wallet Adapter. The wallet app signs a sign-in message, Privy checks it and keeps your wallet address as your account, with no email. The wallet app keeps its keys and signs each transaction you make in frenlock; frenlock keeps only the wallet app's permission to ask, on your phone, until you log out.

On your phone

Your name and emoji, your friends list and the reasons you type when you ask to take out early are kept in a file on your phone, not on a server. Deleting the app deletes them, friends list included.

Friend cards

Your friend card is a link, frenlock.fun/c/…, that carries your wallet address, name and emoji, and your phone's push token if notifications are on. You choose who gets it, by sharing the link or showing its QR code. When a card or a guardian link opens in a browser, frenlock.fun draws the page from the link and the chain. It keeps no database of people.

The camera only reads QR codes, like a friend's card or a wallet address you send to. No photo is taken or saved. On Android, the scanner says so before the phone asks for the camera.

Notifications

Notifications between friends, like a request, an answer or a thank-you, go from one phone to another through Expo's push service. A notification carries the sender's name and emoji, the screen it opens and, depending on the kind, when a hold ends, the reason typed for an early exit, a vault's rule name or a sticker's words. A request also carries the sender's push token, so the answer can come back. A notification never carries an amount. Expo passes each one to Apple's push service on an iPhone and to Google's Firebase Cloud Messaging on an Android phone, which deliver it.

On the blockchain

Vaults live on Solana devnet, which is public. Anyone can see a vault's wallet address, its guardians' wallet addresses, its token, rules and amounts, and every request and answer. Names and emoji are never on chain. What is on chain can't be deleted.

The app reads the chain through Solana's public devnet endpoint. frenlock.fun reads it through Helius.

frenlock.fun

Updates, analytics, crashes

The app gets updates to its code from Expo (EAS Update). There is no analytics, ad tracking or crash reporting in the app or on the site. If you test through TestFlight, Apple can send us crash reports and the feedback you choose to send; Apple's privacy policy covers that.

Deleting your data

Email support@frenlock.fun to be taken off the news list or to have your Privy account deleted. Deleting the app deletes what it kept on your phone. What is on the blockchain stays there.

Contact

Questions: support@frenlock.fun.