Privacy Policy

Last updated: May 31, 2026

1. What is this privacy policy about?

Kernvox OÜ (“Kernvox”, hereinafter also referred to as “we” or “us”) operates the Fronti platform (fronti.app), a free online portal for cross-border workers (frontalieri) commuting between Italy and Switzerland. We collect and process personal data about visitors to our website, registered users of our services, recipients of communications, and other individuals who interact with our platform (hereinafter also referred to as “you”). In this privacy policy, we inform you about how we collect, use, store, and protect your personal data. This policy applies to all services provided through fronti.app, including our calculators, comparators, tools, blog, and any related digital services.

If you disclose information about other persons (e.g. family members) to us, we assume that you are authorized to do so and that this data is correct.

2. Who is responsible for processing your data?

The data controller responsible for the processing of your personal data is:

For any questions or requests related to data privacy, please contact us at team@fronti.app.

3. What data do we collect and for what purposes?

When you use fronti.app or otherwise interact with us, we collect and process various categories of personal data for the following purposes:

Provision of services

When you use our tools (fiscal simulator, insurance comparator, LPP calculator, exchange rate calculator, commute planner, checklist, etc.), we process the data you enter to provide you with calculations, comparisons, and personalized results. If you create an account, we store your profile data (name, email, municipality, salary, tax agreement, tariff code, insurance type, transport mode) to personalize your experience across sessions and pre-fill calculator fields.

Account and authentication

If you register for a Fronti account, we collect your name and email address. We use magic link authentication (passwordless) — we send a one-time login link to your email. We store your session data securely via our authentication provider (Supabase). Your account data is stored until you request its deletion.

Buongiorno dashboard

For registered users, we provide a personalized daily dashboard that displays weather data (fetched from Open-Meteo API based on your municipality and workplace), live exchange rates (fetched from Frankfurter API / ECB data), real-time public transport connections (fetched from Swiss Transport OpenData API), and upcoming tax deadlines. We do not share your personal data with these third-party APIs — we only send location identifiers (city names) to fetch public data.

Communication

When you contact us via email or through forms on our website (e.g. expert referral requests, newsletter signups), we process your name, email address, phone number, and message content to respond to your inquiry or fulfill your request.

Lead generation and referrals

When you request an appointment with a tax expert through our “Trova un Commercialista” directory, we collect your name, email, phone number, municipality, and the nature of your inquiry. With your explicit consent, we share this information with the selected professional so they can contact you. We do not share your data without your consent.

Analytics and improvement

We collect technical data (IP address, browser type, device type, pages visited, time of visit) to understand how our services are used and to improve them. We use privacy-first analytics and do not build advertising profiles.

Exchange rate and transfer comparison

Our exchange rate widget and cost comparison tools process salary amounts you enter to calculate transfer costs across different services. If you are logged in, we may use your profile salary to pre-fill these fields. We do not share your salary data with third parties.

Affiliate tracking

When you click on affiliate links (e.g. Wise, Revolut), we track the click event for our internal analytics. We do not share your personal data with affiliate partners — only an anonymized click is registered on their platform through standard affiliate tracking mechanisms.

Blog and content

When you read our blog articles, we collect standard technical data (see Analytics above). We do not require registration to read content.

4. What is the legal basis for processing your data?

We process your personal data based on:

• Your consent — for example, when you create an account, subscribe to communications, or request an expert referral (Art. 6(1)(a) GDPR).
• Performance of a contract — when processing is necessary to provide you with the services you requested (Art. 6(1)(b) GDPR).
• Legitimate interests — for improving our services, ensuring security, preventing fraud, and conducting analytics, provided these interests are not overridden by your rights (Art. 6(1)(f) GDPR).
• Legal obligations — when we are required to process data to comply with applicable laws (Art. 6(1)(c) GDPR).

5. Who do we share your data with?

We may share your personal data with the following categories of recipients:

• Infrastructure providers: We use Supabase (database, authentication, storage), Vercel or similar hosting providers, and Resend (transactional emails). These providers process data on our behalf under data processing agreements.
• Tax professionals: When you use our “Trova un Commercialista” service and explicitly consent to sharing your data, we forward your contact details and inquiry to the selected professional. They process your data under their own responsibility.
• Affiliate partners: We do not share personal data with affiliate partners. Affiliate tracking uses standard redirect links that do not contain your personal information.
• External APIs: We fetch public data from Open-Meteo (weather), Frankfurter/ECB (exchange rates), Swiss Transport OpenData (public transport schedules), and SBB (disruption alerts). We send only city names or station names — never your personal data.
• Legal requirements: We may disclose data if required by law, court order, or to protect our rights.

We do not sell your personal data to third parties.

6. International data transfers

Your data is primarily processed and stored in the European Union (Supabase region: Frankfurt, Germany). Some service providers may process data outside the EU/EEA. In such cases, we ensure adequate protection through Standard Contractual Clauses (SCCs) approved by the European Commission or other legally recognized mechanisms.

Kernvox OÜ is established in Estonia, a member state of the European Union, and is subject to the GDPR.

7. How long do we retain your data?

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

• Account data: Retained until you delete your account.
• Calculation and simulation data: If saved to your account, retained until you delete the data or your account.
• Lead referral data: Retained for 24 months after the referral, then deleted.
• Communication data: Retained for 12 months after the last interaction.
• Technical/analytics data: Retained for 12 months in aggregated form.

After the applicable retention period, data is deleted or anonymized.

8. What are your rights?

Under the GDPR, you have the following rights:

• Right of access: You can request information about the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate personal data.
• Right to erasure: You can request deletion of your personal data (“right to be forgotten”). If you have a Fronti account, you can delete it from your Profile page — this permanently removes all your data.
• Right to restrict processing: You can request that we limit the processing of your data in certain circumstances.
• Right to data portability: You can request to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: You can object to the processing of your data based on legitimate interests, including for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at team@fronti.app. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for Kernvox OÜ is:

9. Cookies and similar technologies

We use cookies and similar technologies to operate our website, remember your preferences, and analyze usage. Specifically:

• Essential cookies: Required for basic functionality (authentication sessions, language preferences). These cannot be disabled.
• Analytics cookies: Used to understand how visitors interact with our website. We use privacy-first analytics that do not create advertising profiles.
• Session storage: We use browser sessionStorage to cache exchange rate data (for performance) and localStorage for checklist progress (for returning visitors). This data stays on your device and is not transmitted to our servers.

You can manage cookie preferences through your browser settings. Blocking essential cookies may affect the functionality of our services.

For more details, see our Cookie Policy.

10. Third-party services

Our platform integrates with the following third-party services:

• Supabase (supabase.com) — Authentication, database, file storage. Data processed in EU (Frankfurt). Privacy policy
• Frankfurter API (frankfurter.dev) — Exchange rate data from ECB. No personal data transmitted. Open source.
• Open-Meteo (open-meteo.com) — Weather data. Only city coordinates transmitted, no personal data. Privacy policy
• Swiss Transport OpenData (transport.opendata.ch) — Public transport schedules. Only station names transmitted. Open data.
• SBB Open Data (data.sbb.ch) — Rail disruption information. No personal data transmitted.
• Formspree (formspree.io) — Form submissions for the coming-soon page. Privacy policy
• Resend (resend.com) — Transactional emails. Privacy policy

11. Children's privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 16, we will promptly delete it.

12. Changes to this privacy policy

We may update this privacy policy from time to time. The current version is always available at fronti.app/privacy. We will notify registered users of significant changes via email. Previous versions are replaced by the new version upon publication.

13. Contact

If you have any questions about this privacy policy or wish to exercise your rights, please contact us: