ObscuraObscura Made – Privacy Policy
This Privacy Policy explains how personal data is handled in Obscura Made ("Obscura", "the App") and its related website and services at biebosstudios.com.
1. Who is responsible for your data
The data controller is:
Jakub Jedlička, operating as Biebos
Liptovský Mikuláš, Slovakia
Email: support@biebosstudios.com
For any privacy question or to exercise your rights, contact support@biebosstudios.com.
2. What data we collect
You need an account to use Obscura. We collect:
Account data
- Your email address and password. Passwords are handled by Firebase Authentication and are never stored or visible to us in plain text.
- Whether your email address has been verified.
Profile data
- Username, bio and profile photo.
- Your role in the App (user or approved designer).
Content you create
- Posts: photos, titles, descriptions, prices and currency.
- Messages you send to other users.
- Likes, saves, follows and blocks.
- Reports you submit about posts or users.
Designer applications
- If you apply to become a designer: your Instagram link and the sample photos you submit.
Technical data
- Our service providers (see section 5) automatically process technical data needed to run the service, such as IP address, device type, operating system and error logs.
- We also keep short-lived technical records to prevent abuse, for example limiting how often verification or password reset emails can be requested.
We do not collect your precise location. We do not use analytics or advertising trackers in the App, and we do not use AI to process your data.
3. How we use your data and why (legal bases under GDPR)
To provide the App (performance of a contract):
- creating and running your account
- showing your profile and posts to other users
- delivering messages between users
- sending service emails: email verification, password reset, and notifications when someone starts a new conversation with you
To keep Obscura safe and curated (legitimate interests):
- reviewing designer applications, which is done manually by us
- reviewing reports and removing content or accounts that break our Terms of Use
- preventing spam, fraud and abuse
To meet legal obligations (legal obligation):
- where the law requires us to keep or disclose data
We do not send marketing emails. If we ever want to, we will ask for your consent first.
We do not make decisions about you based solely on automated processing.
4. What other users can see
- Your username, bio, profile photo, posts and follower count are visible to other signed-in users.
- Your messages are visible only to the participants of that conversation.
- Your email address is never shown to other users.
As the operator, we can access data stored in the App where needed to run it, review reports and designer applications, and answer support requests. When a new conversation starts, we receive an internal notification containing the usernames involved and, where relevant, the post title. These notifications do not include the content of your messages.
5. Service providers
We use the following providers to run Obscura. They process data on our behalf and only for this purpose:
- Google Firebase (Google Ireland Ltd. / Google LLC): user accounts, database, photo storage and server functions.
- Resend: delivery of service emails (your email address, username and the email content).
- Cloudflare: our domain and the routing of emails sent to support@biebosstudios.com.
- Expo (650 Industries, Inc.): building and distributing the App.
- Apple and Google: App distribution through the App Store and Google Play, under their own privacy policies.
We do not sell your personal data and we do not share it for advertising.
We may disclose data if required by law, or where necessary to protect the rights, safety or property of our users or ourselves.
6. International transfers
Some of our providers are based in, or may process data in, countries outside the European Economic Area, including the United States. Where this happens, the transfer is protected by an appropriate safeguard under GDPR Chapter V, such as an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
7. How long we keep your data
- Account, profile and content data: for as long as your account exists. When you delete your account, your data is removed as described on our account deletion page (biebosstudios.com/obscura/delete-account).
- Messages you sent in a conversation remain visible to the other participant after you delete your account, unless you ask us to delete them (see section 9).
- Reports and records of removed content or banned accounts: for as long as needed to keep the platform safe.
- Short-lived anti-abuse records: deleted or overwritten automatically.
- Backups and service provider logs: kept for a limited time and then deleted under the providers' standard retention.
8. Security
We protect your data with access-restricted database rules, encrypted connections (HTTPS), and by limiting access to the operator. No system is completely secure, but we work to protect your information.
If a data breach is likely to put your rights at risk, we will notify the relevant supervisory authority within 72 hours. If the risk to you is high, we will also inform you without undue delay.
9. Your rights
Under the GDPR, you have the right to:
- access your personal data and get a copy of it
- correct inaccurate data
- have your data deleted
- restrict processing
- data portability (receive your data in a commonly used format)
- object to processing based on our legitimate interests
- withdraw consent at any time, where processing is based on consent
You can delete your account at any time in the App (Settings → Delete Account). For any other request, email support@biebosstudios.com. We will respond within one month. This can be extended by up to two further months for complex requests, in which case we will tell you.
You also have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live. Our lead supervisory authority is the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).
10. Children
Obscura is not intended for anyone under 16, or under the age of digital consent in their country if that is higher. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
We may update this policy. If the changes are significant, we will notify you in the App or by email. The effective date at the top always shows the current version.