OBL
Privacy Policy
App name: OBL ("Obambulare")
Effective date: 27 May 2026 · Last updated: 27 May 2026
This Privacy Policy explains how OBL ("we", "us", "our") collects, uses, stores and shares information when you use the OBL mobile and web application (the "App"). By using the App you agree to this Policy.
If you do not agree with this Policy, please do not use the App.
1. Who we are
OBL is operated by the OBL team. You can contact us about privacy matters at:
Email: team.obambulare@gmail.com
2. What information we collect
We collect only what is necessary to run the App.
2.1 Information you provide directly
- Account identifier ("seed phrase") — a three-word identity automatically generated for you when you first open the App. We use this to link your data across devices. We do not collect your real name or email address through this identity.
- Profile name — an optional display name you set yourself.
- Friends list — the names and seed phrases of people you add as friends.
- Memories — when you save a "memory" you provide a title and optional description, the date, the location you tagged (place name + latitude/longitude), photos, videos and voice recordings you choose to attach, and the friends you tag in the memory.
2.2 Information collected automatically
- Approximate or precise location — when you create a memory or pin a location on the globe. Location data is only collected when you actively use a location feature; we do not track your location in the background.
- Device push token (iOS only) — if you grant notification permission, so we can send you alerts about friend requests and shared memories.
- Basic diagnostic logs — server-side request logs (timestamp, IP address, request path, response status) kept for up to 30 days for security and debugging.
2.3 Information we do NOT collect
- We do not collect your real name, email address, phone number, or government ID.
- We do not use third-party advertising or analytics SDKs (no Google Analytics, no Facebook SDK, no AdMob).
- We do not sell, rent, or trade your data.
3. How we use your information
We use your information solely to:
- Provide the core features of the App (display your memories on the globe, share them with friends you choose).
- Authenticate you across devices via your seed phrase.
- Send you notifications you have opted into.
- Operate, maintain, and improve the App.
- Detect and prevent abuse, fraud, or security incidents.
- Comply with legal obligations.
We do not use your data for profiling, targeted advertising, or training third-party AI models.
4. Legal basis for processing (UK / EU users)
Under the UK GDPR and EU GDPR, we process your personal data on the following bases:
- Performance of a contract — to provide the App you have asked to use.
- Legitimate interests — to keep the service secure, prevent abuse, and improve features.
- Consent — for optional features such as push notifications and location access. You can withdraw consent at any time in your device settings.
5. How we share your information
We share information only in these limited situations:
- With friends you choose — when you tag a friend in a memory or send a friend request, that user can see the memory, your display name, and the photos / videos / audio attached.
- Service providers (data processors) we rely on to run the App:
- Replit, Inc. — hosting (servers, database, object storage). Replit Privacy Policy
- Clerk, Inc. — authentication infrastructure. Clerk Privacy Policy
- Apple Inc. — App Store distribution and Apple Push Notification service. Apple Privacy Policy
- OpenStreetMap / Nominatim — reverse-geocoding location names. Location coordinates are sent without your identity attached.
- Legal requirements — if required by law, court order, or to protect rights, safety, or property.
- Business transfer — if OBL is ever acquired, merged, or sold, your data may be transferred to the new owner under the same Privacy Policy.
We do not sell your personal data.
6. International transfers
Our servers and service providers may be located outside the UK / EEA (primarily in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.
7. How long we keep your data
- Account and memories — kept until you delete them or request account deletion.
- Server logs — up to 30 days.
- Backups — up to 90 days after deletion before permanent removal.
8. Your rights
Depending on where you live, you may have the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — correct inaccurate data.
- Erasure — request that we delete your account and associated data ("right to be forgotten").
- Restriction — ask us to limit how we use your data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time for processing based on consent.
To exercise any of these rights, email team.obambulare@gmail.com. We will respond within 30 days.
UK users can also complain to the Information Commissioner's Office (ICO). EU users can complain to their national data protection authority.
Account deletion
You can request deletion of your account and all associated data by emailing team.obambulare@gmail.com from a device that can prove ownership of the seed phrase, or by using the in-app delete option (Settings → Delete Account). Apple also provides an "Account Deletion" link from your App Store listing.
9. Children's privacy
OBL is not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact team.obambulare@gmail.com and we will delete it.
10. Security
- All data in transit is encrypted with HTTPS (TLS 1.2+).
- Data at rest is encrypted by our hosting provider (AES-256).
- Photos, videos, and voice recordings cached on your device are protected by iOS full-disk encryption when your device is locked.
- Access to production systems is restricted and logged.
No system is 100% secure. We cannot guarantee absolute security but we work to minimise risk.
11. Permissions we request on your device
- Camera — to take photos and videos for memories.
- Microphone — to record voice memos.
- Photo Library — to attach existing photos or videos to memories.
- Location — to tag memories with your current location (only when you use the feature).
- Notifications — to alert you to friend requests and shared memories.
You can revoke any of these in iOS Settings → OBL at any time.
12. Changes to this Policy
We may update this Policy from time to time. Material changes will be highlighted in the App and the "Last updated" date above will change. Continued use of the App after changes means you accept the updated Policy.
13. Contact us
OBL — Privacy
Email: team.obambulare@gmail.com