Privacy Policy

Last updated 16 October 2026

Draft, awaiting legal review. This document is not yet in effect and is not legal advice.

This policy explains what Fralkeep collects, why, who it is shared with, how long it is kept and how to have it deleted. It covers the people who sign in to Fralkeep and the people whose voices are in a recording someone else made with it. Fralkeep is an early-access service and records only what this policy describes.

Who is responsible

Fralkeep is offered by Fral, in Ontario, Canada ("we"). Fral decides how your personal information is used and is responsible for it. Fral's privacy officer is accountable for Fral's privacy practices and answers privacy questions and requests at support@fral.app.

In short

• Fralkeep records a Discord voice channel only when a signed-in user starts a recording, and only while it is recording. Each voice is recorded separately, then transcribed and mixed into one MP3.
• A recording belongs to the person who started it. Only they can listen to it, read its transcript, download it or delete it.
• Fralkeep never reads text chat, video or screen shares, and never receives your Discord password, email address or messages.
• Fral does not sell personal information, show advertising, track you across sites or use your recordings or transcripts to train AI models.
• You can delete a recording, or everything Fralkeep holds about you, from your dashboard at any time.

What Fralkeep records

A recording starts only when a signed-in user chooses a voice channel in a server where Fralkeep's bot is installed and starts one. The bot then joins that channel, where everyone in it can see it, and its status reads "Recording a session" for as long as it records. It records the audio of everyone who speaks in the channel while it is there, including people who join after it started and other bots that play audio, each voice as its own lossless track. One recording lasts at most 6 hours. It ends when its owner stops it, when their recording time runs out, or when either the owner or the bot can no longer join the channel.

With each voice Fralkeep keeps the speaker's Discord user ID and when they spoke, so the transcript can say who said what. It does not store speakers' names. It does not record text messages, video, screen shares or anything outside the chosen voice channel.

From each recording Fralkeep makes:

• a transcript, by sending each voice's audio to Cloudflare's Workers AI speech recognition (below);
• an MP3, mixing every voice into one file, made on Fralkeep's own server;
• an archive, a second copy of the original audio kept so a recording can be recovered if a stored copy is damaged.

The person who starts a recording is responsible for telling everyone in the channel that it is being recorded and for any consent the law requires, as the Terms of Service say.

What else Fralkeep collects

When you sign in with Discord. Fralkeep asks Discord only for your identity and your list of servers (the "identify" and "guilds" permissions). It keeps your Discord user ID, username, display name and a reference to your avatar, when your account was made and when you last signed in, refreshed from Discord at each sign-in, and the version of the Terms and this policy you accepted then. Fralkeep never receives your email address, password or messages.

Your servers and channels. To show you where you can record, Fralkeep keeps the servers you share with its bot or can manage (each server's ID, name and icon, and whether you own or manage it), and reads from Discord your roles and any timeout in a server, and its voice channels and their permissions, to check that you and the bot may join the channel you choose. These are refreshed from Discord, never treated as current once they are a few seconds to a minute old.

Discord's authorization. Signing in gives Fralkeep a Discord token that can list your servers and nothing more. It is stored encrypted, used only for that list, and revoked at Discord when your sign-in ends.

Recordings and usage. For each recording: its server and channel, when it started and stopped, how it ended, the recording time it used and what its outputs lack and why. For your account: your recording time, plans, purchases and how you have used them.

Payments. Payments are made through Stripe, which collects your card or other payment details, and your name and email address for its receipt. Fralkeep never sees your card number. It keeps Stripe's identifiers for your customer record, subscription and payments, and what each payment bought, its amount, tax and currency, and any refund or dispute.

Support. When you write to support, Fralkeep keeps your request (a topic and your message), the email address you give for the reply, and the mail exchanged with you. A request never carries your recordings, and a message holding a payment card number is refused.

Cookies. Fralkeep sets three cookies, all its own: one that keeps you signed in (for up to 30 days; only a hash of it is stored), one that secures the sign-in with Discord (ten minutes), and one that remembers the server you last chose (a year). There are no analytics, advertising or tracking cookies, and no third-party scripts.

Network information. Your IP address is used to limit how many requests one address can make. Fralkeep does not store it. Cloudflare, which carries Fralkeep's traffic, processes it as part of delivering each request.

How Fral uses it

• To provide Fralkeep: sign you in, show your servers, check who may record which channel, record, transcribe, mix and store recordings, and show them to their owner.
• To meter recording time and take payment for it.
• To answer support requests, and reports of misuse.
• To keep Fralkeep secure and working: limits against abuse, detecting faults, and fixing them.
• To keep the records the law requires, such as tax records of payments.

Fral uses aggregate figures (how many recordings, how much time, what processing costs) to run the service. These name no one. Fral's staff do not listen to recordings or read transcripts. Their console shows counts and totals only, and names a person only when they look up a support request, which is recorded.

Fral keeps an archive of each recording's original audio so it can be recovered. Restoring one needs a credential only Fral's owner holds and runs outside the service; each restore is recorded. Fral restores a recording only to recover it for its owner, at its owner's request, or where the law requires it.

Legal bases. Where a law such as the GDPR asks for one: Fral processes account holders' information to perform its contract with them (the Terms); the voices of people in a recording someone else made, in the legitimate interest of the people recording to keep a record of their own conversation, which the notice in the channel and the rights below balance; payment records to meet its legal obligations; and anything else only with consent.

Who it is shared with

Fral shares personal information only with the service providers that run Fralkeep for it, each only as needed for its part, and with no one else unless the law requires it:

• Discord, for sign-in, your servers, and the bot that records.
• Cloudflare, which hosts Fralkeep's website, database and storage, transcribes recordings with Workers AI, and carries support mail.
• Akamai (Linode), whose server in a data centre runs Fralkeep's bot and mixes MP3s. Audio is held there only until it is uploaded to storage, and the files the bot keeps of a recording are removed when it is erased.
• Stripe, which takes payments. What you give Stripe at checkout is also governed by Stripe's privacy policy.

Fral does not sell, rent or trade personal information or Discord data, and does not share it with advertisers or data brokers. If the law compels Fral to disclose information, Fral discloses only what is required and, where allowed, tells the people concerned.

Where it is stored

Fralkeep's information is stored with Cloudflare and processed on Cloudflare's network and Akamai's servers, which may be outside your country, including in the United States. Information held there may be accessible to that country's authorities under its laws. Fral relies on these providers' contractual commitments, including their data processing terms and standard contractual clauses where the law requires them, to protect it.

Who can see a recording

Only its owner, the person who started it. Its audio, transcript and MP3 are shown and downloaded only after the owner signs in, through links that last minutes. Other Fralkeep users in the same server see only that a recording is in progress, and in which channel when they could join it themselves. People in a recording who are not its owner cannot see it in Fralkeep.

How long it is kept

• Recordings, transcripts, MP3s and archives are kept until their owner deletes them or all of their data. They have no expiry and are kept when a plan is cancelled.
• A deleted recording can be restored for 30 days, then is erased everywhere, including from the bot's server. Its owner can erase it at once instead.
• Audio on the bot's server is removed piece by piece as each is safely in storage. The bot's log of a recording stays until the recording is erased.
• A sign-in lasts up to 30 days. When it ends, its Discord token is revoked and deleted.
• Your servers' and channels' details are replaced each time they are read from Discord, and erased with your account.
• Support conversations close after 30 days waiting on you, and are erased 180 days after they close. Mail that could not be matched to a conversation is erased 180 days after it arrived.
• Everything else in your account is kept until you delete your data.

After you delete your data, only this is kept, naming no one:

• a record of each payment for the books (Stripe's identifiers, the product, amount, tax, when it was paid and any refund or dispute), for 6 years after the end of the year it last changed, as tax law requires;
• a receipt that the deletion happened, with counts of what was erased, for 6 years;
• a one-way keyed hash of your Discord user ID, kept so the same Discord account does not receive new-account free time twice. It cannot be turned back into your ID, and is used for nothing else.

Stripe keeps its own records of your payments, under its own privacy policy and legal duties.

Deleting your data

A recording. Its owner deletes it from the dashboard. It can be restored for 30 days, or erased at once with Erase now.

Everything. Delete my data, in the dashboard's Your data panel, erases your account: every recording you started with its transcripts, MP3s and archives, your sign-ins and Discord tokens, servers, recording time, usage and support conversations, and your Stripe customer records. It is permanent and cannot be undone. It cancels a Fralkeep Monthly plan at once without a refund, and unused recording time is lost; the dashboard says so before you confirm. Each step is checked, and the deletion completes only once nothing of the account remains, except what the list above keeps.

Your voice in someone else's recording. A recording belongs to the person who made it, so deleting your own data does not remove your voice from recordings other people started. Ask the person who made the recording to delete it, or write to support@fral.app and Fral will handle your request as the law requires.

Removing the bot from a server stops any recording in it. It does not delete recordings already made there, which belong to the people who made them.

Your rights

Depending on where you live, you may have the right to know what Fral holds about you and get a copy of it, to have it corrected or deleted, to object to or restrict how it is used, to take it elsewhere, and to withdraw consent. You can do most of this yourself: your dashboard shows your recordings and lets you download their MP3s and transcripts, your profile is refreshed from Discord every time you sign in, and Delete my data erases your account.

For anything else, write to support@fral.app. Fral answers within 30 days, may need to confirm the request comes from you, and does not charge for it. If you are not satisfied, you can complain to your privacy regulator: in Canada the Office of the Privacy Commissioner of Canada, in the European Union or the United Kingdom the data protection authority where you live.

Children

Fralkeep is not directed to children. It is for people old enough to use Discord where they live, at least 13, and someone under the age of majority needs a parent's or guardian's permission to use it. Fral does not knowingly collect information from children under 13 and deletes any it learns of.

Security

Fralkeep is served only over encrypted connections. Its database and storage are encrypted at rest by Cloudflare, Discord tokens are encrypted again by Fralkeep, sign-in cookies are stored only as hashes, and downloads need their owner's sign-in. Fralkeep's bot server admits nothing from the internet but its administrator's key-only sign-in. No system is perfectly secure: if personal information is exposed, Fral will tell the people affected, the regulators and Discord as the law and Discord's terms require.

Changes to this policy

When this policy changes in a way that matters, Fral will say so on this page and in the dashboard at least 30 days before the change takes effect, so you can delete your data first if you do not agree. The date at the top says when it last changed.

Contact

Questions, requests and complaints: support@fral.app, or the Support page once you are signed in.