Privacy Policy
Last updated: June 2026
The Short Version
Your apps and data stay on your device. We don't store your creations on our servers. We only collect what's necessary to make the app work — which, if you use Obfusc without signing in, includes a device identifier used to hold your credit balance.
What We Collect
When you sign in with Google:
- Your Google account ID (a unique identifier, not your real name)
- Your email address (provided by your Google account)
When you use the app:
- Your credit balance (stored on our server in Vercel KV, linked to your Google account ID)
- A record of your most recent credit-spending action (action type, cost, and timestamp), stored alongside your credit balance in Vercel KV for receipt and audit purposes. We do not run analytics, behavioral tracking, or telemetry pipelines — no third-party analytics SDKs are present in the app.
If you use the app as a guest (without signing in):
- A device identifier. On Android this is the system-provided Android ID; on other platforms it is a random identifier generated on first launch and kept in secure device storage. It is not your name, email, phone number, advertising ID, or Google account.
- Your guest credit balance, stored on our server in Vercel KV and keyed by that identifier. This is how we know what you purchased and what you have spent. It is sent with each AI request so the request can be billed to the right balance.
- The same most-recent-action record described above.
We use the device identifier only to hold and enforce a guest credit balance and to match purchases and refunds to it. We do not use it for advertising, we do not share it, and we do not combine it with data from other sources. If you sign in, your guest balance is transferred to your account and the identifier stops being used for billing.
On your device (not sent to our servers):
- Your mini-apps and their source code (stored in device local storage via AsyncStorage)
- A cached copy of your credit balance, so the app can display a number while offline. The balance itself is held on our server.
What We Don't Collect
- Your app content or creations (stored locally on your device)
- Your location
- Your contacts
- Your photos — unless you explicitly use the Image Transform feature, in which case the selected photo is sent to Google (Gemini) to generate a transformed version. We do not store your photos on our servers.
How We Use AI
When you use Obfusc, parts of your input are sent to third-party AI services to generate results. Here is exactly what each service receives and why:
Anthropic (Claude) — powering app generation and editing
- Your text prompts when you create or edit a mini-app
- The source code of apps you are editing or repairing
- Live-data search queries when you use the Live Data feature (initial render)
Models used: Claude Sonnet, Claude Haiku, Claude Opus. Anthropic does not use API inputs to train its models by default. See Anthropic's Privacy Policy.
Google (Gemini) — powering image generation, image transformation, and live-data refresh
- Your text prompts when you generate an image
- Photos you choose from your device or take with your camera, when you use the Image Transform feature
- Live-data search queries when you refresh a live-data mini-app (values refresh mode, powered by Google Search grounding)
Models used: Gemini Flash (live data), Gemini Flash Image (image generation and transformation). See Google's Privacy Policy.
These services process your request and return the result to Obfusc. We do not store your prompts, images, or generated code on our servers after the request completes.
Your Data, Your Control
- Apps you create are stored only on your device
- Delete anytime - Remove apps from within Obfusc
- Delete account - In the Obfusc app (Settings → Delete Account), or from any browser at obfusc-api.vercel.app/delete-account
- Export - Your code is yours; you can view and share it
Purchases
Credit purchases are processed by Google through Google Play Billing. We receive confirmation of your purchase but never see your payment details. Google handles all payment security.
If you purchase as a guest, the credits are held against your device identifier rather than an account. Signing in transfers them to your account. If you reinstall or change devices without signing in, we may not be able to locate the balance — contact us with your Google Play order ID, or request a refund through Google Play.
Third-Party Services
We use these services to operate Obfusc:
- Anthropic — AI app generation, editing, and live-data HTML rendering (Claude models)
- Google — Google Sign-In authentication, in-app purchases (Google Play Billing), AI image generation and transformation, and live-data refresh (Gemini models + Google Search grounding)
- Vercel — API hosting and server-side storage of credit balances, both for signed-in accounts and for guest devices
Each service has its own privacy policy. We do not share your data with any other third parties.
Children's Privacy
Obfusc is not intended for children under 13. We don't knowingly collect information from children under 13. If you believe we have, please contact us.
Changes to This Policy
We may update this policy occasionally. We'll update the "Last updated" date and notify users of significant changes through the app.