Privacy Policy

R LLC, doing business as Frostbite (“Frostbite,” “we,” “our,” or “us”), is the controller of the personal information described in this Privacy Policy. This Policy applies to the Frostbite iOS application (the “App”), the Frostbite website, related online services, and the Frostbite Model Context Protocol server (the “MCP Server”). It explains what we collect, how we use and disclose it, how long we keep it, and the choices available to you.

Information We Collect

Account Information

We collect information used to create, authenticate, and maintain your account, including your email address, username, first and last name, date of birth, password or other authentication credentials, Frostbite account identifiers, and Apple or Google sign-in identifiers when you use those sign-in methods.

Profile and Skating Information

You may provide profile and skating information such as a biography, city, state, country, precise or approximate location, home rink, skating preferences and experience, disciplines, equipment and skate details, badges, social links, profile visibility choices, and related settings.

User-Generated Content and Uploaded Media

Frostbite’s user-generated content currently consists of profile pictures, journal entries and coach notes, and skill demonstration videos (“skill demos”). We also collect reports you submit about a user, including their profile picture or profile-related behavior, an individual journal entry, or an individual skill demo. If you grant camera or photo-library permission, Frostbite receives only the profile picture or skill demo you choose to capture or upload. Content and reports may include creation, upload, modification, or activity timestamps.

Journal entries may contain personal or sensitive information. Avoid including information you do not want other people to see, and review the entry’s privacy settings before sharing it. Profile pictures and skill demos may be visible to other Frostbite users depending on the applicable account, approval, and privacy settings.

Reports, Moderation, and Appeals

When a report is submitted, Frostbite collects and processes the complaint details and associated information, which may include the reporting user’s identifier, the reported user’s identifier, the reported resource type and resource ID, the selected category and subcategory, and the report’s moderation status and review information. If you contact us to appeal an account suspension or ban, we also process the appeal communication and the account information you provide with it.

We use report, moderation, and appeal information to investigate safety concerns, prevent abuse, enforce Frostbite’s rules, protect users and the service, review account restrictions, and respond to appeals.

Location, Rink, Session, and Calendar Information

With your permission, Frostbite may collect precise latitude and longitude, an IP-address-derived approximate location, location-update times, and check-in or attendance timestamps. We also process skate plans, rink and session searches, favorites, session activity and attendance, saved session filters, calendar-related information, and session data needed to provide scheduling and rink features. You can disable device location or calendar permission in iOS Settings, although related features may stop working.

Linked Accounts and Connected Applications

If you choose to connect another service, we process the identifiers, profile information, authorization codes, access tokens, refresh tokens, expiration information, and service data needed for that connection. Connected services may include Sign in with Apple, Google Sign-In, Instagram, TikTok, YouTube, LiveBarn, U.S. Figure Skating (USFS/USFSA), supported rink or scheduling services, and third-party applications authorized through Frostbite’s OAuth or MCP functionality. The exact information depends on the service and permissions you approve.

Frostbite does not receive your Apple or Google password. We do not access private social-media messages or post to a linked social account unless a feature clearly requests and you authorize that action.

Device, Network, Diagnostics, Analytics, and Advertising Information

We and our service providers may process APNs push tokens; app or device registration identifiers; device model; operating-system, app, and SDK versions; locale; timezone; notification settings; IP address; request and security logs; timestamps; crash and performance diagnostics; feature and app-interaction information; and advertising information such as advertisements displayed and interactions with them. These categories may be collected automatically by Frostbite, Apple platform services, hosting infrastructure, analytics or diagnostics tools, and the advertising SDK described below.

Subscriptions and Transactions

We receive subscription status, entitlement information, product identifiers, transaction identifiers, purchase dates, expiration or renewal information, and related App Store records needed to provide Frostbite Premium and support purchases. Apple processes App Store payments. Frostbite does not receive or store your payment-card number or bank-account number from Apple.

How and Why We Use Information

• Create, authenticate, operate, secure, and support Frostbite accounts.
• Personalize profiles, settings, recommendations, and skating experiences.
• Provide rink discovery, session search, calendars, attendance, skate plans, journals, skills, and equipment features.
• Provide friendships, coaching relationships, journal-sharing controls, skill demos, and other available community features.
• Deliver service messages, smart alerts, in-app notifications, and APNs push notifications.
• Process Premium entitlements, subscription status, transaction support, and purchase restoration.
• Measure feature usage, diagnose crashes and performance issues, improve reliability, and develop Frostbite.
• Display and measure advertising in eligible versions of the App.
• Detect abuse, secure accounts and systems, prevent fraud, enforce our policies, and comply with law.
• Respond to support requests, investigate reports, and moderate potentially unsafe or prohibited content.

Advertising, Tracking, and Consent

Frostbite displays advertisements through Google Mobile Ads (AdMob). Frostbite configures these advertisements as non-personalized: ads are not selected using your activity across other companies’ apps or websites. Google may nevertheless process limited device and SDK information, IP address, app and advertisement interactions, crash or performance data, and advertising data to deliver ads, prevent fraud, limit repetition, measure aggregate performance, and operate its services.

Frostbite does not provide your name, email address, journal content, uploaded photos or videos, or precise location to Google for ad personalization. Frostbite does not access Apple’s advertising identifier (IDFA), does not use AdMob data to track you across apps or websites owned by other companies, and therefore does not currently request App Tracking Transparency (ATT) permission. Because Frostbite configures ads as non-personalized, Frostbite does not currently provide an in-app ad-personalization toggle. Where a platform or applicable law requires a separate advertising or storage choice, the available consent controls will be presented before the processing that requires consent. You may also manage applicable privacy permissions in iOS Settings.

Google’s processing is governed by the Google Privacy Policy. If Frostbite later introduces tracking as Apple defines that term, Frostbite will update this Policy and request ATT permission before tracking begins.

How We Disclose Information and Third-Party Services

We do not sell personal information. We disclose information only as needed to provide requested features, operate and secure Frostbite, comply with law, or complete a business transaction subject to appropriate protections. Relevant recipients and providers include:

• Apple: Sign in with Apple, App Store subscriptions and transactions, APNs push delivery, device permissions, and Apple-provided platform diagnostics.
• Google: Google Sign-In, YouTube APIs when linked, and Google Mobile Ads/AdMob.
• Meta/Instagram and TikTok: account authorization and the profile information needed when you choose to connect those services.
• LiveBarn: account linking and rink-stream functionality you request. Frostbite stores protected connection credentials needed to maintain the link.
• U.S. Figure Skating (USFS/USFSA): membership, coach, test, competition, or related skating information you request through a linked account.
• Rink, scheduling, and calendar providers: session, registration, schedule, or calendar functionality you request, including supported DaySmart services and Google calendar functionality.
• DigitalOcean and infrastructure providers: cloud hosting, databases, object storage, signed media delivery, content delivery, networking, backups, and security.
• Analytics, crash-diagnostics, email, and support providers: limited technical, contact, and diagnostic information needed to measure reliability, send service email, and respond to support requests.
• Moderation and AI systems: profile pictures may be processed by automated nudity-screening tools operated on Frostbite’s infrastructure. Reports, journal entries, and skill demos may be reviewed by authorized Frostbite administrators or moderators. Separately, an AI or agent provider receives information when you expressly connect and instruct its client through Frostbite’s MCP or OAuth features.
• Legal authorities when required by law or necessary to protect users, Frostbite, or the public.

If you link Google or YouTube, Frostbite uses the limited account or channel information needed to provide the selected feature. Frostbite’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

MCP Server and Connected AI or Agent Clients

The MCP Server lets you connect a compatible third-party client, such as an AI assistant, agent, or developer tool (“MCP Client”), to Frostbite. When you authorize a connection, the MCP Client may request Frostbite data or perform Frostbite actions on your behalf using your authorized account access.

Information Made Available to an MCP Client

Frostbite applies its normal authentication, authorization, feature-access, administrator or moderator permissions, and privacy controls to MCP Server requests. Depending on the tools you use and your permissions, an MCP Client may receive or submit information such as account and profile information, rink and session information, skating records, journal content, relationships, and other information available through the Frostbite features you authorize.

Connecting through the MCP Server does not change Frostbite’s underlying privacy settings or grant an MCP Client access that Frostbite does not authorize. Requests involving another user’s information remain subject to that user’s applicable Frostbite privacy settings and the caller’s permitted relationship or role.

Independent Practices of MCP Clients

Once Frostbite returns information to an MCP Client at your direction, that client and its provider may collect, process, retain, display, transmit, or use that information under their own terms, privacy policy, and settings. For example, an AI platform may retain prompts, tool results, or conversation history according to its own policies. Frostbite does not control those independent practices. Before connecting an MCP Client, review the provider’s terms, privacy policy, security practices, and any available data-retention or training controls.

Do not authorize an MCP Client you do not trust. You are responsible for the MCP Clients and accounts you choose to connect and for the instructions you give them.

Authorization Tokens and Connection Security

Frostbite uses authorization credentials, including access tokens and, where applicable, refresh tokens, to identify an authorized MCP Client and protect the MCP Server. We use these credentials to authenticate requests, enforce access controls, prevent misuse, and maintain service security. MCP Clients may store credentials as needed to maintain an authorized connection; their handling of those credentials is governed by their own practices. Never share your Frostbite password, authorization codes, access tokens, or refresh tokens with an untrusted person or service.

User Choices and Controls

• Profile and visibility: update profile information and use available visibility settings for journals, skates, skating experience, relationships, attendance, and other supported resources.
• Blocking and reporting: block users, remove relationships, and report a user—including their profile picture or profile-related behavior—an individual journal entry, or an individual skill demo for review.
• Device permissions: manage location, camera, photo-library, calendar, and notification permissions in iOS Settings.
• Advertising: Frostbite currently serves non-personalized ads and does not use IDFA or ATT-authorized cross-app tracking. Any consent control required for eligible advertising processing will be presented where applicable.
• Linked accounts: unlink available Apple, Google, Instagram, TikTok, YouTube, LiveBarn, USFS/USFSA, calendar, and other connections through available App controls. You may also need to revoke Frostbite in the third-party provider’s account settings.
• You may stop using a connected MCP Client at any time. Disconnect or revoke access through the MCP Client or Frostbite account controls when available, and contact support if you need assistance with Frostbite-side access.
• Deletion: delete your profile picture through its dedicated control and request account deletion through the App. Contact [email protected] for privacy assistance.

Content Moderation

Profile pictures are subject to automated nudity screening and may also be manually reviewed or removed. Frostbite does not currently claim automated moderation of journal entries or skill demos. Reports may be reviewed by authorized Frostbite administrators or moderators. Please include enough accurate information in a report to identify the user or content and help us investigate.

When Frostbite determines that content or conduct violates our rules, we may remove the affected profile picture, journal entry, or skill demo, limit access to a feature, or restrict, suspend, or permanently ban the responsible account. Frostbite may take action when it identifies a violation even if no report was submitted. Frostbite does not guarantee that user-generated content is accurate or appropriate, or that reported content will be reviewed or removed immediately.

For safety or moderation concerns, use the available in-app report control or contact [email protected]. Additional information is available in our Community Guidelines and Reporting and Moderation Help.

Appealing an Account Suspension or Ban

If your Frostbite account is suspended or permanently banned, you may appeal by emailing [email protected] from the email address associated with your Frostbite account. You do not need to be logged in. Include your account email address, Frostbite username, and an explanation of why you believe the restriction is incorrect. Appeals are reviewed manually, and Frostbite will respond within a reasonable timeframe when possible.

Data Retention, Deletion, and Security

Retention depends on the type of information, why it was collected, whether you maintain an account or connection, security and support needs, legal obligations, and backup schedules:

• Account and profile data: generally retained while your account remains active and then deleted or deidentified when the account is deleted, unless retention is required for security, fraud prevention, disputes, or law.
• User-generated content and uploaded media: generally retained until you delete the content or your account, subject to sharing context, moderation or legal holds, operational backups, and temporary storage or CDN caches. Deleting a profile picture removes it from active profile-picture storage; cached or backup copies may persist temporarily until they expire or are overwritten.
• Reports, moderation records, and appeals: retained as reasonably needed to investigate concerns, prevent repeated abuse, enforce our rules, document moderation decisions, review appeals, resolve disputes, protect users and Frostbite, and comply with legal obligations.
• OAuth and linked-account data: retained while the connection remains active or as needed to refresh it. Unlinking deletes the Frostbite connection and stored credentials where supported. Depending on the provider, you may also need to revoke Frostbite through the provider’s settings. Expired, revoked, or replaced credentials may be retained briefly for security or troubleshooting before deletion.
• Location, rink/session, attendance, calendar, and skate-plan data: retained while needed for the feature, your account history, safety and integrity, or the visibility and deletion choices available in the App.
• Request logs, security records, and crash diagnostics: retained for a limited operational period based on troubleshooting, abuse prevention, system security, and legal needs, then deleted or deidentified.
• Analytics and advertising data: retained in aggregate or event-level form for the periods configured by Frostbite or the applicable provider and governed by that provider’s retention controls.
• Subscription and transaction records: retained as needed to provide entitlements, restore purchases, handle disputes, maintain financial records, and meet legal obligations.

Account deletion removes the account and database records linked through Frostbite’s active account-deletion process. Some information may remain temporarily in backups, logs, separately stored media, records needed to protect the service, content involving other users, or records we must retain by law. We delete, isolate, or deidentify such information according to its purpose and operational retention cycle. You may contact us if you need assistance deleting separately stored content or revoking a connection.

Children’s Privacy

Frostbite is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that a child under 13 provided personal information, we will take appropriate steps to delete it. A parent or guardian who believes a child has provided information may contact us.

International Data Transfers

Frostbite and its providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live. Where required, we use appropriate contractual or other safeguards for international transfers.

Contact and Changes to This Policy

R LLC, doing business as Frostbite, is responsible for this Policy. If you have privacy questions, requests, or complaints, contact us at [email protected].

We may update this Privacy Policy as Frostbite, its providers, or legal requirements change. We will post the revised Policy and update the effective date above. Where required, we will provide additional notice or obtain consent.