OBPAI Privacy Policy

OBPAI ("we", "our", or "us") values your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (obpai.com) or use our iOS mobile application (collectively, the "Services").

Please read this Privacy Policy carefully. By using our Services, you consent to the data practices described in this policy.

We collect only the minimum information necessary to provide and improve our Services:

• Account Information: When registering an account, we collect your chosen username, nickname, email address, and salted, hashed password credentials.

• User-Generated Content: Tier lists, custom board configurations, bracket match data, wheel items, uploaded image assets, saved drafts, likes, and interface preferences.

• Technical & Device Data: IP address, browser type, operating system version, device model, system language, crash reports, and diagnostic logs to ensure service reliability.

• Payment Information: VIP subscriptions are processed directly through certified payment processors (Stripe on web, Apple App Store StoreKit on iOS). We do not collect, view, or store your credit card or sensitive banking details.

To provide ranking and image generation features on iOS, the OBPAI app may request specific system permissions:

• Photo Library (Add / Write): Requested only when you explicitly tap to save an exported tier list or bracket image to your device photo library.

• Photo Library (Read / Select): Requested only when you choose to import custom images from your library onto your tier board. We never scan, index, or upload your private photo collection without your explicit action.

You can modify or revoke these permissions at any time via iOS Settings → Privacy & Security → Photos.

We use the collected information for the following legitimate purposes:

• To operate, maintain, and deliver our tier list maker, bracket battles, lucky wheel, and AI template features;

• To authenticate your identity and sync your saved boards and preferences across devices;

• To respond to user inquiries, provide technical support, and resolve bugs;

• To monitor system performance, detect fraud, and ensure compliance with our Terms;

• To send critical transactional communications (such as password reset links).

We do not sell, rent, or trade your personal information. We share data only with trusted service providers essential for platform operations:

• Hosting & CDN: Cloudflare (for edge acceleration and DDoS security);

• Payment Processors: Stripe (web checkout) and Apple Inc. (iOS In-App Purchases);

• Email Delivery: Resend (for transactional and authentication emails);

• Analytics: Google Analytics (for aggregated, anonymized usage statistics).

All third parties are contractually obligated to safeguard your data and process it in accordance with applicable privacy laws.

We use cookies and LocalStorage on the web, and UserDefaults / Keychain on iOS to:

• Maintain your secure login session;

• Remember your language preferences, theme settings, and local tier drafts;

You may configure your browser to decline cookies, although doing so may limit your ability to access certain personalized features.

We implement industry-standard administrative and technical safeguards (including HTTPS / TLS encryption and bcrypt password hashing) to protect against unauthorized access.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory legal requirements.

In compliance with Apple App Store guidelines and applicable data protection regulations (GDPR, CCPA):

• Access and Rectification: You can view and update your profile information in your account settings.

• Account and Data Deletion: You have the right to request complete deletion of your account and all associated personal data. You can initiate account deletion within your profile settings or by emailing support@obpai.com. We will permanently delete or anonymize your data within 30 days of verification.

• Revoke Permissions: You can revoke device permissions at any time through your operating system settings.

Our Services are not directed to children under 13 (or under 16 in the European Economic Area). We do not knowingly collect personal information from children.

If you believe a child has provided us with personal information without parental consent, please contact us immediately for prompt deletion.

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page with an updated effective date.

Your continued use of OBPAI after changes are published constitutes your acknowledgment and acceptance of the revised policy.

If you have questions, feedback, or requests regarding this Privacy Policy or your personal data:

• Email: support@obpai.com

• We respond to data privacy requests within 7 business days.