Yes, you can add as many conditions as you need to a Rule, all conditions must pass for the rule to run. So, your scenario of "User Logged In" AND "Max Frequency" is a perfect use case.
And yes, for your second question, the value of the eVar is stored in Adobe for that identified user... so, som...