Privacy Policy

Introduction

obyo is operated by Braviata LLC. This privacy policy explains what data we collect, how we use it, and your rights regarding your personal information. We keep things straightforward because we believe privacy policies should be readable.

What We Collect

When you use obyo, we collect:

• Account information: Your email address, username, and password (stored securely hashed, never in plain text). If you sign in with Google, we receive your name and email address from Google — we do not receive or store your Google password.
• Listening data: The courses you save, your listening progress, and streaks — so we can track your learning.
• Content you create: Course ratings, votes, course suggestions, and any courses you commission.
• Payment information: Processed securely through Stripe. We do not store your credit card details — Stripe handles that entirely.
• Basic usage data: Standard server logs (IP address, browser type, pages visited) to keep the platform running and secure.
• Aggregate analytics: Privacy-friendly, cookieless usage analytics — like which courses are popular, how far people get through them, and which pages people visit — so we can understand what's working and make the app and listening experience better. This is measured in aggregate and is not used to build an advertising profile of you. See Analytics below.

How We Use Your Data

• To provide and improve the obyo learning platform.
• To track your listening progress and learning activity.
• To send you essential emails (account verification, password resets).
• To send you optional emails (listening reminders, weekly progress digests) — you can unsubscribe from these at any time from your settings page or via the one-click unsubscribe link in any email.
• To credit you as a course's creator by username, when you choose to be credited.
• To process payments for course generation.
• To moderate content and enforce our terms of service.

We do not sell your personal data to third parties. We do not use your data for advertising. We do not share your email with marketers.

Third-Party Services

We use the following third-party services to operate obyo:

• Anthropic (Claude) — AI model used to generate course content. Source URLs and publicly available content from those URLs are sent to Anthropic during generation. Your personal account data is not shared.
• Brave Search — Used by the AI during course generation to research the broader topic. Search queries are based on the course topic, not your personal data.
• Stripe — Payment processing. Stripe receives your payment details directly — we never see or store your card number. See Stripe's privacy policy.
• Google Gemini — Used to generate course cover images. Course titles and topics are sent to Google's Gemini API for image generation. No personal data is shared. See Google's privacy policy.
• Google OAuth — If you choose to sign in with Google, Google shares your name and email address with us. See Google's privacy policy.

Data Storage & Security

• Your data is stored on secure servers with encrypted connections (HTTPS).
• Passwords are hashed using industry-standard algorithms and never stored in plain text.
• We use token-based authentication to protect your account.
• Access to user data is restricted to essential personnel only (which, being a one-person operation, means one person).

Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your account, listening progress, saved courses, ratings, and other personal data are permanently deleted.
• Payment records are retained with your personal information removed, as required for accounting and legal compliance.
• Courses you funded remain in the obyo library per our terms of service, but your personal information is disassociated from them.

Your Rights

You have the right to:

• Access your data: Use the data export feature in your account settings to download everything we have about you.
• Correct your data: Update your profile, email, and username anytime from your settings page.
• Delete your account: You can permanently delete your account and personal data from your settings page. See the Data Retention section above for details on what happens to your data.
• Stay anonymous: Choose not to be credited as the creator on courses you fund.
• Opt out of non-essential emails: Unsubscribe from listening reminders and digests at any time via your settings or the link in any email.

Cookies

We use a single essential cookie to keep you logged in (your authentication token). We do not use advertising cookies, and our analytics are cookieless (see Analytics below). We do not use cookies to track you across other websites.

Analytics

We use privacy-friendly, self-hosted analytics to understand how obyo is used in aggregate — for example, which courses are popular, how far listeners get through them, and which pages people visit. We use this to fix problems and improve the app and the listening experience.

• Our analytics run on our own servers — usage data is not sold or handed to a third-party ad network.
• They use no cookies and do not track you across other websites or apps.
• They do not collect an advertising identifier (such as Apple's IDFA) and are not used to build an advertising profile of you.
• Measurement is aggregate and is used to make obyo better, not to target ads.

Children's Privacy

obyo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will remove it.

Changes to This Policy

We may update this policy from time to time. We'll update the "Last updated" date at the top and do our best to notify you of significant changes. Continued use of obyo after changes constitutes acceptance.

Contact

For any privacy-related questions or requests, contact us at [email protected].