Privacy Policy for Obji
Last Updated: 2025-01-17
Introduction
Väder AB ("we," "our," or "us") operates the Obji app. This Privacy Policy explains how we collect, use, and share your information when you use our service. We are committed to protecting your privacy and being transparent about our practices.
Summary
Here's the short version:
- You own your content — Your photos, collections, and scenes belong to you
- We don't sell your data — We never sell your personal information to third parties
- We don't train external AI — Your content isn't used to train AI models for third parties
- You control your data — You can access, export, or delete your data at any time
- We use minimal tracking — Only what's necessary to operate and improve the app
Information We Collect
Data Linked to You
Contact Info
- Email Address: Used for account creation, authentication, personalization, and communication regarding your account and the app's functionality.
User Content
- Photos: We store the images you upload to your collections. This content is used for the app's core functionality.
- Collections and Scenes: We store the organizational structures you create, including names, descriptions, and arrangements.
- Camera Access: We request camera permission to allow you to capture objects for your collections. The camera is only activated with your explicit consent and active action, such as when you choose to add a new item by taking a photo.
- Photo Library Access: We request access to your photo library to allow you to import existing photos. We only access photos you explicitly select.
Identifiers
- User ID: Used to maintain your account and personalize your experience.
- Device ID: Used to ensure app functionality and security across devices.
Data Not Linked to You
Usage Data
- Product Interaction: Anonymous data about how you use the app, used for analytics to improve our service.
Diagnostics
- Crash Data: Anonymous information collected when the app crashes to help us improve stability.
- Performance Data: Anonymous metrics about app performance to identify areas for improvement.
- Other Diagnostic Data: Technical information that helps us troubleshoot issues.
How We Use Your Information
- To provide and maintain our service
- To notify you about changes to our app
- To provide customer support
- To improve and personalize your experience
- To detect, prevent, and address technical issues
- To enforce our Terms of Service and Community Guidelines
- To respond to legal requests and prevent harm
Data Ownership and Control
You Own Your Content
All Content you upload to Obji—including photos, collections, and scenes—belongs to you. We do not claim ownership of your Content. When you delete your Content or account, we remove it from our servers, subject to reasonable backup retention periods.
How We May Use Your Content
While you own your Content, you grant us a license to use it as described in our Terms of Service. This includes:
- Service Operation: Displaying your Content to you and, based on your privacy settings, to others
- Service Improvement: Analyzing usage patterns to improve features (not training external AI models)
- Marketing & Promotion: We may feature public Content in promotional materials, such as app store screenshots, social media posts, or our website. We will not use Content marked as "Private" for marketing without your consent
Your Control
You can:
- Set Content as Private, Friends-only, or Public
- Delete any Content at any time through the app
- Request that specific Content not be used in marketing by emailing hello@obji.app
- Export your data by contacting privacy@vader.co
- Delete your entire account and all associated data from app settings
Artificial Intelligence and Machine Learning
We use AI/ML technologies to provide core features of Obji, such as background removal from photos. This processing is:
- Performed to deliver the service you requested
- Not used to build AI products for third parties
- Subject to the same data protection standards as other processing
We do not sell or license your Content for AI training purposes. We do not use your Content to train general-purpose AI models unrelated to providing the Obji service.
Biometric Information
Obji's image processing (such as background removal) analyzes objects in photos but does not collect biometric identifiers or biometric information as defined by laws such as the Illinois Biometric Information Privacy Act (BIPA). We do not:
- Create facial recognition templates
- Store facial geometry for identification purposes
- Use biometric data to identify specific individuals
- Sell or share biometric data with third parties
Data Retention
We retain different categories of data for different periods:
| Data Type | Retention Period |
|---|---|
| User Content (photos, collections, scenes) | Until you delete it or your account |
| Account Information | Until you delete your account |
| Analytics Data | 1 month (anonymized) |
| Server Logs | 90 days |
| Backup Copies | Up to 30 days after deletion |
| Reports and Appeals | 1 year after resolution |
After account deletion, we remove your data from active systems within 30 days. Backup copies may persist for up to an additional 30 days before automatic deletion.
Data Access and Deletion
You can access, modify, or delete your personal data at any time:
- Access your data through your profile in the app
- Delete your account and all associated data from within the app settings
- Request a data export by contacting privacy@vader.co
- Request additional data access by contacting privacy@vader.co
Data Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- With your consent: When you explicitly agree to share information
- With other users: Based on your privacy settings (public or friends-only content)
- With service providers: Who assist us in operating our app (cloud hosting, analytics, etc.)
- To comply with legal obligations: When required by law or valid legal process
- To protect rights and safety: When necessary to protect our rights, users, or the public
- In connection with a business transfer: If we merge, are acquired, or sell assets
Third-Party Service Providers
We use the following categories of service providers:
- Cloud storage and hosting providers
- Analytics providers
- Authentication services
- Error monitoring and crash reporting services
We ensure all providers comply with applicable data protection laws and have appropriate data processing agreements in place. Specific providers may change; contact us for current details.
Cookies and Tracking Technologies
Our app uses:
- Local storage for app functionality and preferences
- Session cookies for authentication
- Diagnostic tracking for crash reporting
- Analytics tools with anonymized data
We do not use advertising trackers or sell data to advertisers.
User Content Disclaimer
We are not responsible for the content that users upload to Obji. Users are solely responsible for ensuring they have the right to share any content they upload and that such content complies with applicable laws and our Community Guidelines.
Data Security
We implement appropriate security measures to protect your personal information, including:
- AES encryption for data at rest
- SSL/TLS protocols for data in transit
- Industry-standard encryption on our database and storage systems
- Regular security audits and updates
However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
In the event of a data breach affecting your personal information, we will notify you via email within 72 hours of discovery, providing details about the breach and steps we're taking to address it.
GDPR Compliance (EEA/UK/Switzerland)
For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data in accordance with the General Data Protection Regulation (GDPR). The legal bases for processing include:
- Contract performance: To provide the Obji service you signed up for
- Legitimate interests: To improve our service, ensure security, and prevent fraud
- Your consent: For optional features like marketing communications
- Legal obligations: To comply with applicable laws
Your GDPR Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you specific rights:
- Right to know what personal information is collected
- Right to know if your personal information is sold or disclosed
- Right to say no to the sale of personal information (we don't sell it)
- Right to access your personal information
- Right to request deletion of your personal information
- Right to correct inaccurate personal information
- Right to non-discrimination for exercising your rights
To exercise these rights, contact us through the methods listed in the Contact Us section.
Global Compliance
We respect privacy regulations worldwide including Brazil's LGPD, South Korea's PIPA, and other regional privacy laws. Regardless of your location, you can exercise the data rights outlined in this policy.
International Data Transfers
Your data may be transferred to and processed in countries outside your residence, including countries where our cloud infrastructure providers operate. When we transfer data internationally, we implement these safeguards:
- Standard Contractual Clauses (SCCs)
- Data Processing Agreements
- Data minimization practices
- Encryption in transit and at rest
Opt-Out Options
You can control data collection in the following ways:
- Disable analytics in app settings
- Manage notification preferences in app settings
- Restrict device permissions through your device settings
- Request opt-out of marketing use of your content by emailing hello@obji.app
Consent Withdrawal
You can withdraw consent for data processing at any time by:
- Adjusting your privacy settings in-app
- Emailing privacy@vader.co with the subject "Consent Withdrawal"
- Deleting specific data through your account interface
- Deleting your account entirely
Children's Privacy
Our service is not directed to children under 13 (or under 16 in certain jurisdictions). We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly. If you believe we have collected information from a child under 13, please contact us immediately at privacy@vader.co.
Third-Party Services
Our app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. For material changes, we will notify you via email or through the App at least 30 days before the changes take effect. We will also update the "Last Updated" date at the top of this policy. Your continued use of the App after the effective date constitutes acceptance of the updated policy.
Your Rights Summary
Depending on your location, you may have rights regarding your personal data, including:
- Right to access: Know what data we have about you
- Right to rectification: Correct inaccurate data
- Right to erasure: Delete your data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Get a copy of your data
- Right to object: Opt out of certain processing
Contact Us
If you have any questions about this Privacy Policy or want to exercise your rights, please contact us:
- Company: Väder AB
- Organization Number: 559241-1390
- Privacy Inquiries: privacy@vader.co
- General Inquiries: hello@obji.app
- Address: Tegelbruksvägen 10A, 126 32 Hägersten, Sweden