This policy explains how The Framework collects, uses, and shares personal data when you use our website, app, audio course, personal subscriptions, organization-funded access, and related services.
Last updated: August 10, 2026.
The Framework is operated by The Framework App, Marcel Salathé, Chemin Du Léman 3, CH-1135 Denens, Switzerland. For privacy questions or requests, contact us at support@theframeworkapp.com.
An organization administrator may provide your email address to purchase and manage a named access pass for you. We identify the organization in the access email we send to that address.
Organization administrators can see the email address attached to a pass, whether the pass has been claimed, its access dates and status, its renewal setting, and the related organization charges. They cannot see your listening history, bookmarks, course progress, or other activity inside the course.
We use trusted service providers to run The Framework. They process data for us or provide services that are necessary for the product:
We use essential session cookies for security, form protection, and sign-in. We do not use advertising cookies, third-party tracking pixels, or cross-site tracking. Plausible Analytics is used for aggregate website analytics and does not set cookies. See our Cookie Policy.
Payments are processed by Stripe. We do not store full card numbers or card security codes. Stripe may collect payment details, billing details, fraud prevention signals, and related transaction data under its own terms and privacy policy.
We keep personal data only as long as needed for the purposes above. Account and progress data are kept while your account exists. If you delete your account, we delete the active account record, sign-in sessions, app settings, and listening progress. Organization purchase, pass, access-term, consent, charge, and invoice records may remain where needed to provide an active pass or meet contractual, billing, accounting, tax, security, fraud-prevention, chargeback, and legal obligations. Operational logs, error reports, backups, and security records are kept for limited periods according to our providers' retention settings and operational needs.
You can delete your account from Settings in the app. You can also contact us to request access, correction, deletion, restriction, or portability of your personal data, to ask where organization access data came from, or to object to certain processing. Some requests may be limited by contractual, legal, security, accounting, fraud-prevention, abuse-prevention, or chargeback obligations. You can also manage or cancel your personal subscription through the account page and Stripe customer portal.
Our providers may process data in Switzerland, the European Economic Area, the United States, and other countries where they operate. Where required, we rely on appropriate contractual, legal, and technical safeguards for these transfers.
We use HTTPS, secure session cookies, access controls, private media delivery, error monitoring, and provider security features to protect the service. No online service can guarantee perfect security, but we work to keep data protected and limited to what the product needs.
The Framework is not directed to children under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has provided personal data, contact us and we will take appropriate steps to delete it.
We may update this policy as the service changes. If a change is material, we will take reasonable steps to notify users, such as updating this page or sending a service message.