Privacy Policy

Overview

Fresh Sky LLC ("we", "us", or "our") operates freshskyai.com and a public suite of specialized tools with three included previews followed by clearly disclosed monthly access, some AI-assisted and some local-first (collectively, the "Services"). This Privacy Policy explains how we collect, use, and protect information across our Services.

We are committed to protecting your privacy. The freshskyai.com website itself collects minimal data. Some of our individual product applications may collect and store additional data as needed to provide their functionality. Each product's specific data practices are described in its own privacy policy.

Information Collection

freshskyai.com website: We use Google Analytics 4 to measure aggregate page views, engagement, workspace activation, product-link clicks, subscription checkout starts, services inquiries, and completed payments. When a visitor arrives from an advertising campaign, we may retain campaign parameters and Google click identifiers (such as GCLID, GBRAID, or WBRAID) long enough to attribute a useful product visit or payment to that campaign. We do not use these identifiers to store AI queries or build our own profile of a visitor's sensitive interests.

Product applications: Some of our AI-powered applications may collect and store data to provide their services, including:

• Account profile information, including a verified email address, when authentication or a monthly plan is used
• Subscription tier, checkout status, renewal status, and billing-portal activity needed to provide paid access
• Anonymous practice-session state needed to complete an interactive workflow
• User feedback submitted through in-app forms
• Essential session cookies for application functionality

Payment card details are collected and processed by Stripe, not stored by Fresh Sky LLC. We receive transaction identifiers, subscription status, plan, amount, and customer contact details needed to provide monthly access, operate the billing portal, and process legally required or confirmed billing corrections. Stripe remains the system of record for billing and receipts. We do not use browser fingerprinting. Advertising click identifiers may be processed for campaign measurement as described above.

Commercial inquiries: When an organization requests a fit review, we collect its name, a contact name and work email, optional website, selected service, budget range, timeline, workflow goal, and consent. Advertising click identifiers, UTM query parameters, and other page-query values are not copied into the commercial lead record. Do not submit confidential records, credentials, payment-card data, student records, medical records, or legal case details. Commercial lead records are assigned a 180-day expiration target and are used only to evaluate and respond to the request. An internal daily cleanup removes expired records in bounded batches, so physical deletion may occur after the target date. You may request earlier deletion through the contact methods below.

Product-Specific Privacy

Each of our applications has its own privacy policy with details specific to that product's data handling practices. Please refer to the privacy policy within each application for full details.

Public education applications are designed for de-identified scenarios and reject several common student-identifier patterns before AI provider calls. Their former Classroom and student-record features are disabled. Use of a public tool does not by itself establish FERPA compliance; schools remain responsible for district authorization, direct-control terms, and any required data-processing agreement.

FreshSky Mobile App

The FreshSky iOS and Android app is for adults in the United States. Saved Next-Step results and history remain only in an encrypted database on the device; its random encryption key is protected by the device keychain or keystore. Fresh Sky LLC does not upload that history for storage. Deleting local data erases both the database and its key.

When you sign in, we store an internal account identifier, linked verified Google or Apple login identities, hashed rotating refresh tokens, subscription entitlement facts, idempotency records, consent state, and generic push tokens. We do not silently merge accounts solely because two providers report the same email address. Optional mobile analytics is first-party, consent-based, schema-limited, pseudonymous, and excludes prompts, outputs, email addresses, advertising identifiers, and sensitive product content.

You may report an unsafe Next-Step result from inside the app. A safety report contains only the category you select, whether the result came from the AI or safe template path, the tool name, a random idempotency identifier stored only as a one-way digest, and the report time. The app sends no prompt, generated result, email address, account identifier, access token, or raw installation identifier with the report. Raw safety-report records are scheduled for deletion after 30 days.

Mobile notifications are optional and transactional only. They may cover security, billing status, completed asynchronous work, or material service interruptions and do not place sensitive work content on the lock screen. Account deletion immediately disables the account and starts resumable cleanup of sessions, push tokens, identities, and app-owned personal account data. Any deleted-account billing or audit record retained for accounting, tax, disputes, fraud prevention, or legal obligations is de-linked from the FreshSky account and minimized. FreshSky targets a retention period of up to seven years after account deletion and schedules the record for deletion through Firestore TTL. Firestore TTL deletion is asynchronous, so physical removal may occur after the target date. We may delete the record earlier when it is no longer needed. Seven years is a conservative retention target, not legal advice. See mobile account deletion instructions.

Cookies and Session Data

Our applications use essential session cookies required for functionality such as authentication, account status, security, and maintaining context during a session. These cookies:

• May persist for a limited period so you remain signed in or retain account state
• Are used for security and service functionality
• Are not sold to third parties

We also use Google Analytics and, when we run outreach campaigns, Google Ads conversion measurement. These services may use cookies or click identifiers to report whether an ad visit resulted in an important action. We do not enable personalized remarketing audiences for pages involving sensitive legal, health, benefits, financial, housing, abuse, or immigration topics. Fresh Sky AI does not use display advertising as an access or revenue requirement.

Analytics and Advertising Measurement

We use analytics and advertising measurement to understand which pages and campaigns lead to useful product visits, workspace activation, subscription purchases, or services inquiries. Data may include the page visited, referring campaign, browser or device information, coarse location, ad click identifiers, event timestamps, and payment value. Fresh Sky LLC stores privacy-limited daily event totals without storing card details, AI prompts, or raw browsing histories in those records.

Our privacy controls let you allow analytics and advertising measurement, allow analytics only, or reject nonessential storage. Personalized advertising remains disabled in every option. You can reopen the controls from the "Privacy choices" button. Disabling measurement does not prevent you from using the core Services.

Fresh Sky App Studio

App Studio sends the app idea and test input to the restricted privacy-profile AI provider pool to generate a temporary blueprint and response. Fresh Sky AI does not persist those prompts, blueprints, or outputs in a database. A signed blueprint token remains in the active browser tab and expires after 24 hours.

App Studio does not execute generated code, deploy software, connect external accounts, or accept API keys. Do not enter personal identifiers, student records, account numbers, medical records, confidential business information, or secrets.

AI Responses and Data Processing

When you use our AI-powered tools, your queries are sent to third-party AI providers to generate responses. Please note:

• Education applications do not cache user prompts or AI responses
• Third-party AI providers may process your queries in accordance with their own privacy policies
• Do not submit student records, Social Security numbers, financial details, medical records, or other sensitive personal information
• Education applications use the restricted education_deidentified provider profile. Depending on runtime configuration, it may use IAM-authenticated Google Vertex AI, Cloudflare, Ollama, Cerebras, SambaNova, or Groq only when account-level Zero Data Retention has been explicitly confirmed.
• Each session is stateless — no conversation history is retained between sessions

Commercial Automation

Fresh Sky AI may create an internal qualification brief from a commercial inquiry. Contact names, email addresses, and contact fields are removed before any workflow context is offered to an AI provider. The automation creates drafts for the business owner; it does not send email, schedule meetings, publish content, make payments, or enter contracts.

Privacy-limited agent task and run metadata is assigned a record-specific expiration date and is removed by the same bounded daily cleanup. Stripe remains the system of record for payment receipts.

Voluntary Contact Information

If you contact us via email (admin@freshskyllc.com) or through the contact form on our website, we may retain your name and email address solely for the purpose of responding to your inquiry. This information is:

• Never sold or shared with third parties
• Used only to respond to your specific request
• Deleted upon request

Data Security

All data transmitted between your browser and our Services is encrypted using HTTPS/TLS. Our applications are hosted on Google Cloud Run, which provides enterprise-grade security infrastructure.

Where personal data is stored by a product, it is protected by security measures including encryption at rest, access controls, Content Security Policy headers, and input validation. No public statement on this site replaces a school or district's own FERPA, COPPA, state-law, contracting, and security review.

Children's Privacy

Our Services are not directed to children under the age of 13. We do not knowingly collect any personal information from children. If you believe a child has provided us with personal information, please contact us at admin@freshskyllc.com and we will delete such information promptly.

Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page. Continued use of our Services after changes constitutes acceptance of the updated policy.

Contact Us for Data Requests

If you have any questions about this Privacy Policy, or wish to submit a data access, correction, or deletion request, please contact us:

Email: admin@freshskyllc.com

Location: Somerset, NJ, USA