Privacy Policy

Obriy is provided by Vitalii Karaman (address: Rivne, Ukraine) — “we” below. We decide how and why your data is processed, which makes us the controller of personal data under the EU General Data Protection Regulation (GDPR) and the Law of Ukraine “On Personal Data Protection”.

For any privacy question, write to support@obriybrowser.com.

• Browsing stays on the device. History, bookmarks, tabs, groups, workspaces and sessions are stored only on your iPhone. We cannot see them.
• An account only for paid actions. You can view existing verdicts without signing in. New checks, the assistant and the OAi voice require signing in with Google or Apple.
• Results are shared, people are not. Verdicts, summaries and narrations are stored and given free of charge to anyone who opens the same content — without the name or account of whoever paid for them.
• No advertising. We do not sell data, show ads or build advertising profiles.

Most of what the browser does never leaves the device:

• history, bookmarks, tabs, groups, workspaces, sessions, saved articles and settings are stored only in the app;
• the ad and tracker shield works from lists built into the device — your requests to websites do not pass through our server;
• private tabs store nothing: once closed, their history, cookies and site data are gone;
• iOS voices for reading aloud, voice search and page translation (on iOS 18 and later) are provided by Apple; on older iOS versions translation opens the page in a third-party online translator, and that company’s rules apply;
• the websites you open receive your requests directly, as in any browser, and may collect data under their own rules. Signing in on websites (for example, YouTube) is ordinary browser sign-in and is not linked to your Obriy account.

• Looking up an existing verdict. When you open a video on YouTube, a post on Instagram, TikTok, Facebook or X, or check a photo, the app sends our server only the content identifier — the video ID, the post address or the file’s digital fingerprint (hash) — to find an existing result. No sign-in is needed, and the request is not linked to you.
• Account. When you sign in with Google or Apple, we receive and store your email, name (if provided) and the identifier of your Google or Apple account. We never see passwords. If you sign in with Apple and hide your email, we receive only Apple’s relay address.
• Session. After sign-in the app receives a session token. It is stored in the iPhone Keychain, and on the server only as a hash. A session lasts up to 60 days.
• Credits and payments. Balance, the transaction log (top-ups, charges, refunds) and payment orders: amount, currency, status and order number. You enter card details on the payment provider’s page — we neither receive nor store them.
• Your checks. What you sent for checking, when, what it cost and where you saw it (the page address) — so that the “My Checks” list is shown to you alone.
• Content to check. A video you submit is downloaded by our server from its source website, or received from the app if the post is visible only to you; photos are sent by the app. Files are kept — see “How long we keep data”.
• Page assistant. When you ask for a summary or a question, the app sends the page text (up to 60,000 characters), its address and title, and your question. We do not store the page text or your questions — only the number of processed tokens, the website and the price. Ready-made summaries and answers to preset prompts are stored together with a hash of the text (see “Shared results”).
• Reading aloud with the OAi voice. The app sends the article text, and the server turns it into audio. The text is not stored; the audio file is stored and served to anyone who listens to the same text.
• Notifications. If you allow notifications, we store the device’s push token, platform and language to let you know when a check is ready.
• Messages to us. If you contact support, we keep the correspondence to reply and resolve your request.
• Technical logs. The server and the website host record technical request data (IP address, time, requested address, device type) to protect the service from abuse and investigate failures.

Obriy is designed so that nobody pays twice for the same work. That is why results are stored by the content itself, not by person:

• the verdict for a video or photo is shown free of charge to anyone who opens the same video or photo;
• assistant summaries and answers to preset prompts (key facts, “in plain words”, translation, what to read next) are stored by a hash of the page text and the answer language, and served to anyone with the same text;
• a narrated article is served to anyone who listens to the same text in the same voice.

These results are stored without any personal identifier: other users cannot see who ordered a check or a summary. Answers to your own questions to the assistant are not stored and are never shown to anyone.

If a post or video is not accessible without your sign-in (for example, on a private account), the check result is tied to your account and shown only to you.

• Performance of a contract (our Terms of Use): account, checks, assistant, narration, credits and payments, the “My Checks” list, notifications that a verdict is ready.
• Legitimate interest: shared results without a personal identifier (so nobody pays twice for the same work), abuse prevention, troubleshooting, technical logs.
• Legal obligation: records of payments and credit transactions required by tax and accounting law.
• Consent: push notifications — an iOS permission you can withdraw in your iPhone settings.

We do not use your data for advertising and do not sell it.

To provide the service, we use companies that process data on our behalf and only for that purpose:

• AI content analysis providers (video and images), USA and EU — receive the content file to assess signs of generation.
• Language model and speech synthesis provider, USA — the page assistant and the OAi voice: receives the page text, your question or the article text. Requests are sent without the conversation being kept on the provider’s side for later requests; under its rules, request data may be retained for up to 30 days to detect abuse.
• Cloudflare (USA), R2 storage — storing files: videos, photos and audio.
• WayForPay (Ukraine) — card payments for credits.
• Google and Apple — account sign-in. Apple also delivers push notifications.
• Expo (650 Industries, USA) — push notification delivery: receives the device token and the notification text.
• Vercel (USA) — hosting of this website.
• Contabo GmbH, Germany (EU) — hosting of our server and database.

We may disclose data if required by law or a court order, or to protect people’s rights and safety.

Some processors are located in the USA and other countries outside the EU and Ukraine. For such transfers we rely on the safeguards provided by law: adequacy decisions (including the EU–US Data Privacy Framework for certified companies) or standard contractual clauses.

• Account — as long as you use it; deleted together with the account.
• Credit log and payments — as long as tax and accounting law requires; after account deletion, without any link to you.
• Check results, summaries and narrations — without a time limit: this shared library is what makes repeats free.
• Files (videos, photos, audio) — without a time limit, so that a result can be reviewed and confirmed.
• Notification tokens — while the device is linked to the account; deleted together with the account.
• Support correspondence — as long as needed to resolve the request and keep a record of requests.
• Technical logs — only as long as needed for security and troubleshooting.
• Page text for the assistant, your questions and article text for narration — not stored.

You can delete your account in the app: Account → Delete Account. Soon you will also be able to do this in your personal area on this website; until then, write to support@obriybrowser.com from the email address linked to the account.

What happens: your email, name, Google and Apple identifiers, sessions, notification tokens and your list of checks are deleted. Unused credits are forfeited. The credit log and payments are kept without any link to you, as the law requires. Shared check results remain — they contain no data about you anyway.

Depending on the law of your country (including the GDPR and the Law of Ukraine “On Personal Data Protection”), you have the right to:

• know what data about you we process and get a copy of it;
• correct inaccurate data;
• have your data deleted;
• restrict processing or object to it where it is based on legitimate interest;
• receive your data in a machine-readable format to move it to another service;
• withdraw consent (for example, turn off notifications) — this does not affect processing carried out before the withdrawal;
• lodge a complaint with a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, the data protection authority of your country.

To exercise these rights, write to support@obriybrowser.com. We will reply within one month and may ask you to confirm that the account is yours.

Data is transmitted only over an encrypted connection (HTTPS). The session token is stored in the iPhone Keychain, and on the server only as a hash. File storage is private; files are accessed through temporary signed links. Access to the server and database is limited to a small number of people.

No protection is perfect, but we take reasonable measures to safeguard your data and will notify you and the supervisory authority of a breach where the law requires.

This website uses no advertising or analytics cookies. It sets just one cookie — NEXT_LOCALE — to remember the language you picked in the switcher. When sign-in and credit top-ups arrive on the website, they will need essential session cookies, and we will update this section then.

Obriy is not intended for children under 13, and we do not knowingly collect their data. If the law of your country sets a higher age of consent for data processing (up to 16 in the EU), an account may be used below that age only with parental permission. Only adults, or minors with parental consent, may buy credits. If you believe a child has given us their data, write to us and we will delete it.

We may update this policy when the service or the law changes. The effective date is shown at the top of the page. We will announce significant changes in advance — in the app or by email.

Vitalii Karaman, Rivne, Ukraine. Email: support@obriybrowser.com.