Privacy Policy

Last updated: March 8, 2026

Introduction

obyo is operated by Braviata LLC. This privacy policy explains what data we collect, how we use it, and your rights regarding your personal information. We keep things straightforward because we believe privacy policies should be readable.

What We Collect

When you use obyo, we collect:

  • Account information: Your email address, username, display name, and password (stored securely hashed, never in plain text). If you sign in with Google, we receive your name and email address from Google — we do not receive or store your Google password.
  • Profile information: Any bio or display name you choose to set, and your public/private profile preference.
  • Reading data: Your course library, reading progress, and streaks — so we can track your learning.
  • Content you create: Course ratings, reviews, discussion posts, notes, highlights, corrections, and course suggestions.
  • Payment information: Processed securely through Stripe. We do not store your credit card details — Stripe handles that entirely.
  • Basic usage data: Standard server logs (IP address, browser type, pages visited) to keep the platform running and secure.

How We Use Your Data

  • To provide and improve the obyo learning platform.
  • To track your reading progress and learning activity.
  • To send you essential emails (account verification, password resets).
  • To send you optional emails (study reminders, weekly progress digests) — you can unsubscribe from these at any time from your settings page or via the one-click unsubscribe link in any email.
  • To display your public profile and course funder credits (if your profile is public).
  • To process payments for course generation.
  • To moderate content and enforce our terms of service.

We do not sell your personal data to third parties. We do not use your data for advertising. We do not share your email with marketers.

Third-Party Services

We use the following third-party services to operate obyo:

  • Anthropic (Claude) — AI model used to generate course content. Source URLs and publicly available content from those URLs are sent to Anthropic during generation. Your personal account data is not shared.
  • Brave Search — Used by the AI during course generation to research the broader topic. Search queries are based on the course topic, not your personal data.
  • Stripe — Payment processing. Stripe receives your payment details directly — we never see or store your card number. See Stripe's privacy policy.
  • Google Gemini — Used to generate course cover images. Course titles and topics are sent to Google's Gemini API for image generation. No personal data is shared. See Google's privacy policy.
  • Google OAuth — If you choose to sign in with Google, Google shares your name and email address with us. See Google's privacy policy.

Data Storage & Security

  • Your data is stored on secure servers with encrypted connections (HTTPS).
  • Passwords are hashed using industry-standard algorithms and never stored in plain text.
  • We use token-based authentication to protect your account.
  • Access to user data is restricted to essential personnel only (which, being a one-person operation, means one person).

Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • Your profile, study progress, notes, ratings, and other personal data are permanently deleted.
  • Discussion posts are anonymized (author removed, content replaced) to preserve conversation threads for other users.
  • Payment records are retained with your personal information removed, as required for accounting and legal compliance.
  • Courses you funded remain in the obyo library per our terms of service, but your personal information is disassociated from them.

Your Rights

You have the right to:

  • Access your data: Use the data export feature in your account settings to download everything we have about you.
  • Correct your data: Update your profile, email, and username anytime from your settings page.
  • Delete your account: You can permanently delete your account and personal data from your settings page. See the Data Retention section above for details on what happens to your data.
  • Control your visibility: Set your profile to private at any time to hide it from other users.
  • Opt out of non-essential emails: Unsubscribe from study reminders and digests at any time via your settings or the link in any email.

Cookies

We use a single essential cookie to keep you logged in (your authentication token). We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

Children's Privacy

obyo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us and we will remove it.

Changes to This Policy

We may update this policy from time to time. We'll update the "Last updated" date at the top and do our best to notify you of significant changes. Continued use of obyo after changes constitutes acceptance.

Contact

For any privacy-related questions or requests, contact us at [email protected].

obyo is operated by Braviata LLC.