Privacy Policy
Obscura helps adults meet people nearby and chat one person at a time. This policy explains what we collect, why, where it goes and how long we keep it. It is written to match exactly how the app works.
What travels directly between phones
Chat messages, photos and voice notes are sent directly between the two phones in a chat over an encrypted WebRTC connection (DTLS). We cannot read them and we do not store them. When either person ends the chat, leaves the app for more than a minute, or the connection is lost for 30 seconds, the app deletes the chat from both phones.
When a direct connection isn't possible (common on mobile networks), the still-encrypted data passes through our relay server. The relay cannot read the content and does not store it.
Fresh encryption keys
New keys are created for every chat and discarded when it ends.
Screenshots blocked
Screenshots and screen recording are blocked inside the app.
No gallery access
Photos come from the in-app camera and are held only in memory. Obscura never saves them to your gallery.
Nudity filter
Photos are checked by an AI model that runs only on your phone. Likely explicit photos are blocked before sending and hidden on arrival. Nothing is uploaded for this check.
Practice chat
The practice chat runs entirely on your phone and sends nothing anywhere.
IP addresses
As with any calling app, a direct connection can reveal your IP address to the person you chat with.
No app can stop someone from photographing a screen with another device. Only share what you're comfortable sharing.
What we collect and how long we keep it
We use an anonymous account created automatically on your phone. We do not collect your phone number, email, contacts, photo gallery, or advertising ID, and we use no advertising or analytics SDKs.
| Data | Why | Who can see it | How long |
|---|---|---|---|
| First name | Shown on your profile card | Signed-in Obscura users | Until you delete your account |
| Age (in years) | Shown on your profile card; 18+ enforcement | Signed-in Obscura users | Until you delete your account |
| Date of birth | To confirm you are 18 or older | Only you and our safety team | Until you delete your account |
| Profile selfie (small, compressed) | Profile photo; one-time age estimate | Signed-in Obscura users | Until you delete your account |
| Approximate location | Finding people nearby. Stored as map areas (the finest is about 1 km); others see only a rounded distance | Signed-in users see only the rounded distance | Your latest area only, updated while the app is open. No history is kept |
| Device identifier (salted, one-way hash) | One account per device; age lockouts; bans | Only our safety team | Until you delete your account; lockout and ban records up to 2 years |
| Status and last-active time | Showing who is active now | Signed-in Obscura users | Until you delete your account |
| Connects (likes), pings and blocks | Matching, re-connecting with your last chat, and keeping blocked people apart | The two people involved | Connects: until you match or 7 days. Pings: 24 hours. Blocks: kept to protect you |
| Chat setup data (network addresses) | Letting two phones find each other | The two people in the chat | Deleted when the chat ends (at most 6 hours) |
| Notification token | Match and ping alerts | Only our server | Until you delete your account |
| Report contents | When someone reports a chat, their phone sends up to 20 recent messages and any photos or voice notes from it | Only our safety team | Deleted after review, unless the law requires us to keep them |
| Server logs (IP address, time) | Security and abuse prevention on our website, API and relay | Only us | Up to 14 days |
| App integrity signals | Google Play Integrity / Firebase App Check confirm requests come from the genuine app | Google and us | Handled by Google |
Profiles that haven't been opened for 12 months are deleted automatically.
Age estimate using AI
When you take your sign-up selfie, the app sends it once to Google's Gemini AI (through Firebase AI Logic) and asks only for an estimated age, the number of faces, and whether it looks like a live photo. We compare the estimate with your date of birth to help keep minors out. We do not keep the AI result after this check. The same selfie, compressed, becomes your profile photo.
Obscura uses Google's Gemini Developer API. Under Google's terms for this service, Google may use submitted content to improve its products, and it may be reviewed by trained people. Don't start sign-up if you don't agree. Face images can be biometric information in some places (for example Illinois, Texas and the EU); we use the selfie only for the purposes described here, never for facial recognition.
Your choices and rights
- Delete your account any time in Settings → Delete Account & Data. See account deletion.
- Hide yourself with Incognito Mode in Settings.
- Location, camera, microphone and notifications can be turned off in your phone's settings (the app needs camera and location to work).
- Depending on where you live (for example the GDPR in the EU/UK, or the CCPA/CPRA in California), you may have rights to access, correct, delete, or object to processing of your data, and to complain to your local data protection authority. We don't sell or share personal information as defined by the CCPA. Email mail@prmedia.io; we respond within 30 days.
Our legal bases (GDPR): performing our contract with you (running the service), legitimate interests (safety, preventing abuse), legal obligation (child safety reporting), and your consent for location, camera and the AI age check, which you can withdraw by deleting your account.
Security
Data is encrypted in transit. Server data is protected by access rules so users can only change their own records, and report contents are visible only to our safety team.
Children
Obscura is only for people 18 and older. We block accounts we believe belong to minors and delete their data, except where we must keep it for safety or legal reasons.
Changes
If we change this policy we'll update the effective date above, and tell you in the app about significant changes.
Data controller and contact
- Company
- PR Media LLC
- Registered address
- 1001 S Main St Ste 500, Kalispell, MT 59901-5635, United States
- Email (privacy, safety & support)
- mail@prmedia.io
- Phone
- +1 517-210-4088
- App
- Obscura for Android (com.prmedia.obscura)