Effective Date: March 29, 2026
Last Updated: October 5, 2026
FREDvested LLC, a Maryland Limited Liability Company
FREDvested LLC (“FRED,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use the FRED mobile application and/or our website (collectively, the “App”).
By using the App, you agree to the collection and use of information in accordance with this Privacy Policy and applicable laws.
Depending on the services you use, we may collect the following information:
| Category of Personal Information Collected | Source of Information | Purpose for Collection | Categories of Third-Party Recipients |
|---|---|---|---|
| Personal identifiers: such as your full name, your date of birth, residential address, business address, any correspondence address, account name, social security number, passport number, email address, telephone numbers, or other contact information. | From you and documents you share with us | To create and manage your account, to verify your identity, to communicate with you, to prevent fraud, to satisfy our legal Know Your Customer (KYC)/Anti-Money Laundering (AML) obligations, to calculate your Freedom Date, to track your progress as an input to Freedom Date projections, to provide educational and financial tools within the App, to facilitate opening a brokerage account, and to comply with sanctions screening obligations. | Registered broker-dealer partner (to assist with KYC/AML obligations and if you open a brokerage account), Database and backend hosting provider |
| Customer records information: such as your name, signature, social security number, physical characteristics or description, address, telephone number, government identifying documents, tax identification numbers, company registration information, beneficial ownership information, authorized signatory information, beneficiary information, account verification information, and other records information. | From you and documents you share with us | To verify your identity, to allow us to conduct financial transactions involving your account, to satisfy our legal KYC/AML obligations, to comply with sanctions screening obligation, to facilitate opening a brokerage account, and to ensure the App accurately records your actions and activities. | Registered broker-dealer partner (to assist with KYC/AML obligations and if you open a brokerage account), Database and backend hosting provider |
| Characteristics of protected classifications: nationality and age information. | From you and documents you share with us | To verify your identity, as part of your Freedom Date calculation, to satisfy our legal KYC/AML obligations, to facilitate opening a brokerage account, and to comply with sanctions screening obligations. | Registered broker-dealer partner (if you open a brokerage account), Database and backend hosting provider |
| Commercial information: financial goal inputs, including your desired monthly retirement income, your current monthly investment amount, your target retirement age, as well as records of securities purchased, obtained, or considered through a brokerage account (if one is opened). | Your use of the App | To facilitate opening a brokerage account, to ensure the App accurately records your actions and activities, and to provide educational and financial tools within the App. | Registered broker-dealer partner (if you open a brokerage account), Database and backend hosting provider |
| Financial Transaction Data: One-time or subscriptions to the App, your payment history for the App | Your use of the App | To record your purchase of services from us | Database and backend hosting provider, Payment processor |
| Communications: communications we have with you, which may include your email address, customer support correspondence, documentation you upload through email or directly to the App, electronic signatures, and customer feedback surveys. | From you, such as when you sign up for our email list | To provide customer support, to provide you with information about the App (including your use of it), to facilitate opening a brokerage account, and to make requests related to the App, including requesting information required to meet our legal obligations. | Registered broker-dealer partner (if you open a brokerage account), Database and back end hosting provider, Marketing email provider |
| Geolocation data: location data, including your IP address. | From your interaction with the App, including directly from your browser | To accurately route communications to/from the App and to secure the App against cyberattacks, including to investigate suspicious activity and possible fraud. | Database and back end hosting provider, Analytics provider, Security and hosting provider |
| Internet activity data: account activity, including browser type, operating system, device identifiers, login history, security logs, authentication logs, error logs and crash reports, security events, browsing history, search history, support requests, and other information regarding your interactions with the App. | From your interaction with the App, including directly from your browser | To ensure that the App is operating as intended and to secure the App against cyberattacks, including to investigate suspicious activity and possible fraud. | Database and back end hosting provider, Analytics provider, Security and hosting provider |
All of these categories of information have been collected and shared in the past twelve (12) months. This takes place because financial companies need to share their customers’ personal information to ensure the continued operation of the business in a safe and compliant manner.
Note that certain of the items described above are considered “sensitive personal data.” We limit our processing of sensitive personal data to what is required to provide our services and satisfy our regulatory obligations.
Payment card numbers (processed directly by third-party payment providers)
Bank account numbers
Biometric data
Information you provide to us. We collect information when you interact with our services and use the App. Certain areas of our website and online resources allow you to submit your information to us. We collect your information on the bases of: (i) contract (such as information provided in connection with seeking our services); (ii) consent (such as when you sign up for our services or agree to be included on our mailing list); and (iii) legitimate interest (promoting our services and/or customizing our website).
Automatically through our services. As you navigate our App and use our services, we may use technologies to collect information that may include Personal Information. Information collected automatically may include usage details, IP addresses, operating system, and browser type, and information collected through cookies, web beacons, and other tracking technologies including details of your interactions with our website. To automatically collect information, we use the techniques described below:
Cookies. Our website may use a tracking technology called a “cookie.” A cookie is a small data file that a website can place on your computer’s hard drive where your internet browser files are kept. This file is then stored on your computer. Cookies enable us to recognize when a computer being used to browse our website has previously visited the website or online resource. Cookies can also be used to enable a website to “remember” the information a visitor has previously inputted. Cookies may be placed on your computer by our security and hosting provider as a necessary security measure. Our website also uses Cloudflare Turnstile to distinguish human visitors from automated traffic. Cloudflare's collection and processing of data through Turnstile is described in the Cloudflare Turnstile Privacy Addendum, available at https://www.cloudflare.com/turnstile-privacy-policy/.
Most internet browsers allow you to change your settings to notify you when you receive a cookie, which lets you choose whether or not to accept it, or to automatically refuse all cookies. Please be aware that some functionality on our website and online resources relies on the use of cookies and may not be available should you choose to refuse all cookies. You may also delete and manage cookies through your internet browser.
Web Beacons. On certain web pages or in e-mails we send to you, we and/or our analytics provider may utilize a technology called a “web beacon” (also known as an “action tag”, “pixel tags,” “single-pixel GIFs” or “clear GIF technology”). Web beacons also help analyze the effectiveness of the website by measuring the number of visitors to a website or how many visitors clicked on key elements of a website.
If you click a link in a marketing e-mail or invitation, we may track this action through a web beacon. You may avoid having this activity tracked by visiting our website without using the link and then navigating to the content you are interested in.
Browser Storage. We store UTM attribution in your browser’s local Storage and session Storage.
Do Not Track Signals. Our website does not support “Do Not Track” browser settings at this time.
Your data is stored on a MySQL database hosted on Railway, a cloud infrastructure service, connected to our Java Spring Boot backend. We implement industry-standard security measures including encryption in transit (TLS) and access controls to protect your data.
Sensitive data handling:
Federal law requires FRED to maintain records related to its provision of investment advice. As a result, while you may request deletion of your account and associated data at any time (see Section 8), we will need to retain certain data even after the receipt of a deletion request to satisfy our regulatory obligations.
We will retain our email marketing list for as long as the business is in operation. This includes keeping the list of addresses that have opted out from our marketing so that we do not contact them again.
Retention periods may vary depending upon the nature of the information and applicable legal requirements.
Our analytics provider is provided with information on page views, referrer sites, browser types, operating systems, device types, and the country/region/city of connections. We also forward the visitor’s IP address to the analytics provider, which uses it to derive location and to generate a daily-rotating visitor hash for counting unique visitors. Our analytics provider does not store IP addresses and the salt for the visitor hash is deleted every 24 hours.
We may also retain information if it is required to resolve disputes, enforce our contractual rights, or because it is the subject of a government inquiry. In these instances, we will limit our retention to what is reasonably required to address the dispute and any potential follow up.
We do not sell your personal information. We may share your information in the following circumstances:
If you choose to open a brokerage account, we transmit the necessary KYC and identity information to Alpaca Securities LLC, our registered broker-dealer partner, for the purpose of account opening and regulatory compliance. Alpaca’s own privacy policy governs their use of your information. It may be found at: https://s3.amazonaws.com/files.alpaca.markets/disclosures/PrivacyPolicy.pdf.
We may share data with trusted third-party service providers who assist us in operating the App, including:
These providers are contractually obligated to use your data only for the purposes we specify and to maintain appropriate security standards.
We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
If the App is involved in a potential or actual sale of assets, merger, acquisition, business transfer or other change of control of all or part of the company, we may share your information with other entities involved in the transaction. We may share your information as part of the negotiations performed in connection with such a transaction or at its completion. We will require any such successor business entity to provide the same or greater protections as those provided in the Policy and we will notify you of any changes that could affect your Personal Information. In the event of a business transfer, we will notify you via email or a prominent notice provided through the App before your data is transferred. Unless we are otherwise required by law to retain your information or to provide it to the other entity, in the event of a business transfer you may request the deletion of your information from our records.
We take reasonable and appropriate measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
Encrypted data transmission (TLS/HTTPS)
Encrypted storage of sensitive fields (SSN, passwords)
Role-based access controls on backend systems
Regular security reviews
However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.
In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
The App is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take reasonable measures to delete that information promptly and will not use the information for any purpose other than where it is necessary to protect the child or others (such as to alert a parent or other authorities to the child’s use or attempted use).
Subject to applicable laws, you have the following rights with respect to your personal information:
Access: Request a copy of the personal information we hold about you
Correction: Request correction of inaccurate or incomplete information
Deletion: Request deletion of your account and associated personal data, subject to legal retention requirements
Opt-out of marketing: Unsubscribe from promotional emails at any time using the unsubscribe link in those emails
Data portability: Request a copy of your data in a portable format
To exercise any of these rights, contact us at [email protected]. You must include your name and contact information (mailing address, phone number, and/or e-mail address) so that we may verify your request and indicate in your message that you are making the request pursuant to the appropriate state’s law. If required for certain requests (such as requests for personal information), we may request additional information to verify your identity.
You may also submit a request to exercise any of the above rights through an authorized agent. If you do so, the agent must present us with signed written permission to act on your behalf, and we may seek to verify your identity. Authorized agents may submit requests as described above.
You have the right to not be discriminated against for the exercise of your privacy rights.
We will respond to requests within 45 days. We may need to verify your identity before processing certain requests.
In certain jurisdictions, if we decline to take action regarding your request, you are entitled to appeal that decision. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of our rationale, and the process by which you can appeal such a decision.
We may be required by law to retain your personal information even after the closure of your account and the termination of your use of the App.
The App may contain links to other websites that are operated or owned by third parties. Please note that when you follow one of these links, you are navigating to another website. FRED does not monitor the privacy policies of the linked sites, and their policies may differ from ours. FRED is not responsible or liable for the privacy practices or the content of these third-party websites. If you access a third-party website from the App, you do so at your own risk.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the App and updating the “Last Updated” date at the top of this document. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.
If you have questions, concerns, or comments regarding this Privacy Policy, please contact:
FREDvested LLC Email: [email protected]
or write to us at:
FREDvested LLC, PO Box 2406, Rockville, MD 20847
This Privacy Policy was last updated on October 5, 2026. Prior versions are available upon request.
© 2026 FREDvested LLC