LEGAL

Privacy policy

Obligio helps small businesses track compliance obligations. This page explains what the app collects, who processes it, and what you can ask us to do with it.

What we collect

Account details. When you sign in, our authentication provider records your email address and issues an account identifier. Obligio stores that identifier against your business so we can show you your own records and nobody else's.

What you enter. Your business name, location and industry, the obligations you track, their dates and categories, and any files you choose to upload as evidence. The file picker can accept documents, photos, videos and audio files. Uploads are optional; we receive only the files you select, not your entire photo or file library.

Subscription status. Our subscription provider, RevenueCat, records purchase history and subscription status to enable paid features, restore purchases, and provide subscription analytics. Card details are handled by Apple or Google and never reach us.

Sign-in device information. Clerk processes device identifiers and device, operating-system and app-version information to operate authentication. On iOS this includes the device vendor identifier, which is separate from an advertising identifier. On Android, Clerk generates and stores a random device identifier for authentication.

Sign-in activity and approximate location. Clerk records sign-in activity, including the IP address and approximate city and country derived from it, to manage and protect your account. This does not use your phone's GPS or precise-location permission.

Usage and crash reports. We use Google's Firebase Analytics and Firebase Crashlytics. They record that the app was opened and how long a session lasted, and two actions we chose to count: saving an obligation (whether you typed it or chose a suggestion, and whether it repeats) and opening the subscription screen (and what led you there). When the app crashes they record a technical report: what the app was doing, your device and operating-system model and the app version. Crash reports also go to our own error server, with none of the details listed below. They also use an identifier that Firebase creates for each installation of the app, and derive an approximate region from a masked IP address. We never send them the titles of your obligations, your business name, your email, your dates or your documents, and the app does not use the advertising identifier on either iOS or Android.

Push notifications. If you allow notifications, our own push server receives a push token and a random installation identifier, plus your operating-system and app version, language and time zone, and whether you agreed to product news and offers. It records whether notifications are delivered and opened. We do not link this to your account or email address. Your IP address is used only to limit abuse and is not stored, and traffic passes through Cloudflare. You can turn notifications off at any time in your phone's settings.

What we do not collect

Obligio does not use advertising software and does not read your advertising identifier. Apart from the usage counts, crash reports and subscription analytics described above, it does not run behavioral analytics. The providers above process data on our behalf and we do not let them use it for their own advertising. We do not track you across other apps or websites, we do not build advertising profiles, and we do not sell or share personal information with data brokers.

Who processes your data

We use a small number of providers to run the service: an authentication provider for sign-in, a backend and file-storage provider for your records and uploaded documents, RevenueCat for billing status and subscription analytics, and Google (Firebase) for usage counts and crash reports. Push notifications and crash reports also run on our own servers, behind Cloudflare. These providers process data to operate and support Obligio. Reminders are scheduled on your own device and their contents are not sent to us.

How long we keep it

Your records are kept while your account is open. Deleting an obligation deletes any document attached to it. Deleting your account removes your sign-in account, business records, obligations and uploaded documents.

Your choices

In the app, open Settings and choose Delete account to delete your account and associated data. You can also request access, correction, export, or deletion by emailing privacy@obligio.com from your account email address. If in-app deletion does not finish, retry or contact that address for help.

Deleting your Obligio account does not cancel an Apple or Google subscription. Manage or cancel your subscription through the store where you purchased it. The store may retain purchase records under its own policies. You can turn deadline reminders off at any time in your device settings.

Children

Obligio is a tool for business owners and is not directed at children.

Last updated: October 31, 2026.