Privacy Policy

At Obscurify, we value your privacy and are committed to protecting your personal information. This policy explains what data we collect, how we use it, and how we protect your interactions with AI.

Data We Collect

• Account information: A scrambled (keyed hash) copy of your 16-digit account number and a random account handle. We cannot recover your account number from it. API keys are computed from your account and are not stored.
• Older accounts: Accounts created before account numbers may still have a username, a hashed password and an optional email. Password sign-in is being retired: when you sign in with your account number, your password is deleted. Deposit addresses issued to older accounts are kept so late payments are still credited.
• Login cookie: If you sign in, one cookie keeps you signed in for 30 days or until you sign out. Guests get no cookies.
• Security data: IP address and browser user agent, recorded only to prevent abuse (login sessions, security events and error logs) and deleted after 30 days. Guest chat also keeps your IP address in memory for up to an hour to limit how many free messages each visitor sends. When you create an account, we check in memory (as a scrambled value, for 24 hours) whether your IP address already got starter credit that day, so each address gets it once. This check isn’t saved and isn’t linked to your account.
• Usage counts: For each request we count its rough type (page visit, chat, image), whether it came over Tor and, for page visits, the website that linked here (just the domain, such as google.com). These counts carry no account, IP address or cookie. To count how many different accounts use the API each week, we also keep a scrambled marker for each one, made with a key that belongs to that week. When the week ends we delete the markers and the key and keep only the totals.
• Sign-up source: Your browser notes where you first arrived from (a link tag such as ?ref=, or the website that linked here) and keeps it in its own storage for 30 days. Only if you create an account does the sign-up page send it, and we add one to that day’s count for that source. It isn’t saved with your account, and we don’t record the time, so a count can’t be matched to an account. The note is deleted once you sign up.
• Affiliate links: If you sign up through an affiliate link, your account records that affiliate’s code. We pay the affiliate a share of what the account spends from money it paid in. Affiliates see only monthly totals across all their sign-ups, never individual accounts. The code is kept in your browser’s own storage (no cookie) for 30 days after you open the link, the sign-up page shows it, and you can remove it before creating your account.
• Billing information: User ID, invoice cost, number of tokens, model name, and timestamp.
• Payments: For each payment, the amount received, the payment reference (Stripe payment or BTCPay invoice) and the blinded vouchers we signed for it. No account is attached. When you redeem a voucher we record a hash of it so it can’t be spent twice, again with no link to the payment.

What We Don’t Collect or Store

• Your chat prompts or AI responses are not saved on our servers
• Tracking cookies
• Third-party analytics
• Advertising trackers

Local Conversation History

Our chat interface offers an optional conversation history feature. This history is stored exclusively in your browser’s local storage on your own device. We never upload, sync, or store your conversation history on our servers. This means:

• Your saved conversations never leave your machine
• Clearing your browser data will permanently delete your local history
• We have no access to or record of your saved conversations
• You can delete individual conversations at any time from the sidebar

How We Protect Your AI Interactions

Conversations: Conversations are held in memory for up to 1 hour for performance reasons, then permanently deleted. Your prompts and AI-generated outputs are never written to disk. Holding a conversation for a while lets your app send only your new message instead of the whole conversation each time.

Metadata Removal: We remove personally identifying metadata (such as your IP address) before forwarding your requests to underlying AI model providers. This means model providers cannot identify who submitted any given prompt.

Provider Policies: We send text requests only through zero-data-retention routes: our upstream providers commit, in their published policies, not to train on or retain your data, and we keep data collection and content logging turned off on our accounts with them. Models that have no zero-data-retention route, including many free models, are not offered. We don’t have separate contracts with these providers, so these protections depend on them honoring their published policies. Image generation requests follow the image provider’s own policies.

User Ownership: You retain all intellectual property rights in your prompts and AI outputs. We claim no ownership over the content you create or receive through our service.

Temporary Prompt Caching

To reduce repeated processing, AI providers may temporarily reuse parts of a prompt. For Claude requests, we request a five-minute cache lifetime, which may refresh when reused. Other models may use their provider’s automatic caching. Obscurify does not share conversations or AI responses between users; conversations are held in memory for up to 1 hour for performance reasons, then permanently deleted. We do not add your account ID or session ID to provider cache requests. Personal information you write in a prompt is still sent for inference.

Text requests use only zero-data-retention routes with data collection and content logging disabled. These routes can still use temporary in-memory caching. A provider is used only after we confirm zero-data-retention routing and disabled content logging for our account and API key. These protections depend on the providers honoring their published policies.

Payments and Blind Vouchers

You add credit by buying a voucher and redeeming it to your account. Your browser hides (blinds) the voucher before we sign it, so when it is redeemed we can check it is genuine but cannot tell which payment it came from. Purchases are made without your account: no session cookie or API key is sent, and the order has no account attached.

What we can still see: the payment itself, the IP address the purchase came from, and when a voucher is redeemed. Use Tor or a VPN, and let the voucher wait before it goes on your balance (the default), for the most privacy. The full explanation is in Blind Payments: How We Can’t Tell Who Paid.

Card payments are processed by Stripe: your card details go to Stripe, not to us. Stripe’s privacy policy applies to the payment, and Stripe can connect it to your identity, but not to your Obscurify account. Stripe’s script loads only when you start a card payment. Crypto payments go through our own BTCPay server.

How We Use Your Data

We use the collected data solely for the purpose of providing our services, ensuring security, and managing user accounts.

We do not sell, share, or use your data for advertising, profiling, or other commercial purposes.

Account numbers are stored only as keyed hashes. Remaining passwords from older accounts are stored hashed and deleted when the account switches to its account number.

Legal Requests

We respond to valid legal process that applies to us, such as subpoenas, court orders and warrants. We can only provide what we hold, which is the data listed above: we have no chats, no names and no email addresses for accounts created with an account number. When the law requires it, we preserve records we already have instead of deleting them on their normal schedule. As US law requires, we report apparent child sexual abuse material that we learn of to the National Center for Missing & Exploited Children (NCMEC).

External AI Model Providers

We use external AI model providers to generate responses. You should be aware that:

• Your prompts (with identifying metadata removed) are sent to these providers to generate responses
• What happens to your prompt after inference is governed by each provider’s published policies, not by a contract with us
• If you include personal information in your prompts, it may appear in the AI’s responses

Limitations and Disclaimers

Output Accuracy: AI-generated responses may be inaccurate, incomplete, or misleading. Do not rely on AI outputs for professional advice, including medical, legal, or financial decisions, without independent verification.

Content Responsibility: You are responsible for the prompts you submit and how you use any AI-generated outputs.

Data Security

We implement industry-standard security measures to protect your data:

• HTTPS encryption for all data transmissions
• Regular system updates and patches
• Strict access controls for sensitive data

While we use commercially acceptable means to protect your information, no method of internet transmission or storage is 100% secure.

Deleting Your Account

You can delete your account yourself at any time: in the Android app under Account → Delete account, or on the web by signing in and choosing Delete Account at the bottom of the Account page. Your account number, sign-ins, API key, plan and any email or password are erased at once, and the remaining balance is forfeited. Anonymous payment and usage records are kept for tax and legal obligations, no longer linked to anything that can sign in. Chats were never on our servers; they stay on your device until you delete them. Delete your account has the steps and the full list of what is deleted and kept.

Your Rights

You can delete your account and its sign-in data yourself, as described above. Because we can’t identify an account without its account number, we can’t delete one for you through support.

You can clear your local session data at any time by clearing your browser cookies or closing your browser.

Changes to This Policy

We may update this policy from time to time. We will notify you of substantive changes by posting the modified version on this page with an updated date. Continuing to use Obscurify after changes constitutes acceptance of the new terms.

Last updated: November 2, 2026

If you have any questions about our privacy policy, please contact us at contact@obscurify.ai.