PRIVACY NOTICE

Last updated: July 26, 2026

This privacy notice for AdyriX Systems Private Limited ("Company," "we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Download and use our mobile application (Obsto), or any other application of ours that links to this privacy notice
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have questions or concerns, please contact us at privacy@obsto.app.

SUMMARY OF KEY POINTS

What personal information do we process? We process the information you provide (such as your email address and name), information needed to run the app (such as your account and device identifiers, your subscription status, and how you use Obsto), and setup answers you give us during onboarding (such as your age and goals). See Section 1.

Do we process any sensitive personal information? No. We do not currently process special-category / sensitive personal information. (An optional future sleep-insight feature would read health data only with your separate, explicit consent — see Section 12.)

Do we collect any information from third parties? No. We do not purchase or receive personal information about you from data brokers or other third parties.

How do we process your information? To provide and operate the app, authenticate you, manage your subscription, improve the product, personalize your setup, communicate with you, and keep the Services secure. See Section 2.

In what situations and with which parties do we share information? Only with the service providers that help us run Obsto (our backend, analytics, and subscription providers, and Apple/Google for sign-in and billing). We do not sell your information and we do not use it for third-party advertising or tracking. See Section 4.

How do we keep your information safe? With encryption in transit and secure credential storage, plus organizational safeguards — though no system is 100% secure. See Section 7.

What are your rights? Depending on where you live, you may have rights to access, correct, delete, or port your data, and to object to or restrict processing. You can delete your account and data from within the app. See Section 8.

TABLE OF CONTENTS

1. What information do we collect?
2. How do we process your information?
3. What legal bases do we rely on?
4. When and with whom do we share your personal information?
5. Is your information transferred internationally?
6. How long do we keep your information?
7. How do we keep your information safe?
8. What are your privacy rights?
9. Controls for Do-Not-Track features
10. Do United States residents have specific privacy rights?
11. Do we make updates to this notice?
12. Features in development
13. How can you contact us about this notice?
14. How can you review, update, or delete the data we collect?

1. WHAT INFORMATION DO WE COLLECT?

In Short: We collect the information you give us and the information the app needs to work, improve, and bill. Everything we collect is linked to your account. We do not collect your location.

Personal information you provide to us

• Email address — to create and secure your account and sign you in.
• Name — your first name, if you share it via Sign in with Apple.
• Onboarding answers — your age and setup answers (goals, and any free-text you type) that you provide during onboarding.

Information the app collects when you use the Services

• Account and device identifiers — your account ID and a device identifier used for product analytics and to manage your subscription.
• Purchase history — which subscription you bought and your trial/renewal status (via our subscription provider). Payment is processed by Apple or Google outside the app; we never receive or store your card or bank details.
• Usage data — how you use Obsto (focus sessions, schedules, scores, screens viewed, taps), and a daily estimate of your overall screen-time total.
• Diagnostics — a limited technical signal when sign-in fails, to keep the app stable.

What we do NOT collect

We do not collect: precise or IP-based location; your contacts; your photos, messages, or audio; your web browsing or in-app search history; health or fitness data; financial account information; or your device's advertising identifier (IDFA). Obsto contains no advertising.

Which apps you block: on iOS, Apple's Screen Time framework gives us only opaque tokens — we cannot see which specific apps you choose to block. On Android, your chosen blocked/allowed app list (as app package names) is stored on your account so your rules sync across devices.

Purposes at a glance

Children

Obsto is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us at privacy@obsto.app and we will delete it.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide and improve the Services, personalize your setup, communicate with you, and keep the Services secure.

• To create and manage your account and authenticate you.
• To provide and operate the app — enforce your blocking rules, run focus sessions, compute your scores, and sync your settings across devices.
• To manage your subscription — process purchases, trials, and renewals, and give you the right entitlements.
• To improve the Services (analytics) — understand which features are used and how, so we can make Obsto better.
• To personalize your setup (product personalization) — tailor onboarding and your projections to the answers you provide.
• To communicate with you — send essential service messages (such as sign-in codes and receipts) and, if you don't opt out, product news, tips, and offers.
• To keep the Services secure — prevent fraud and abuse, and maintain stability.

We do not use your information for third-party advertising, and we do not track you across other companies' apps or websites.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We process your personal information only when we have a valid legal reason to do so.

If you are in the EU or UK (GDPR): we rely on —

• Performance of a contract — to provide the Services you sign up for.
• Legitimate interests — to improve, secure, and support the product, in ways that don't override your rights.
• Consent — for marketing email (which you can withdraw at any time) and for any optional future health-data feature.
• Legal obligations — where processing is necessary to comply with law.

If you are in India (Digital Personal Data Protection Act): we process your personal data on the basis of your consent and for the legitimate uses necessary to provide the Services, and we provide grievance redressal via the contact in Section 13.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We share information only with the service providers that help us run Obsto, and in limited legal situations. We do not sell your information.

Service providers (processors). Each processes data on our behalf under contract, only to provide their service to us:

Refund processing. If you request a refund on an in-app purchase, the app store (Apple/Google) may share limited data about your usage and consumption of purchased content with us, and we with them, to process the request.

Legal and safety. We may disclose information where required by law, to enforce our terms, or to protect the rights, safety, or property of any person.

Business transfers. We may share or transfer your information in connection with a merger, financing, acquisition, or sale of assets.

We do not share your information with advertising networks or data brokers.

5. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

In Short: Yes. Our service providers store and process data in the United States.

If you access the Services from outside the U.S. — including from the EEA, UK, or India — your information may be transferred to and processed in the United States. We take appropriate measures to protect your information in accordance with this notice and applicable law.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: As long as your account is active, unless a longer period is required by law.

We keep your personal information for as long as your account exists. When you delete your account, we delete your personal data from our active systems, except for limited records we must retain to meet legal, tax, or security obligations, or that remain temporarily in backups until they are overwritten.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use technical and organizational safeguards, though no system is completely secure.

We protect your data with encryption in transit (HTTPS/TLS) and store authentication credentials in your device's secure keychain. Despite our efforts, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on where you live, you have rights over your personal information, and you can delete your account and data at any time.

• Access and correction — view and update your account details in the app.
• Deletion — delete your account and associated data from within the app (Settings), or by contacting us. This permanently removes your data from our systems (subject to Section 6).
• Marketing opt-out — unsubscribe from marketing email at any time; you will still receive essential service messages.
• EU / EEA / UK (GDPR): rights to access, rectify, erase, restrict, and port your data, and to object to processing. You may lodge a complaint with your local supervisory authority.
• India (DPDP Act): rights to access, correction, and erasure, and to grievance redressal via the contact below.
• Withdrawing consent — where we rely on consent (e.g., marketing), you may withdraw it at any time; this does not affect processing already carried out.

To exercise any right, contact us using Section 13.

9. CONTROLS FOR DO-NOT-TRACK FEATURES

Obsto does not track you across other companies' apps or websites, and we do not use third-party advertising. There is no uniform standard for responding to browser "Do-Not-Track" (DNT) signals; because we do not track you regardless, no DNT action is required. If a standard is adopted that we must follow, we will update this notice.

10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes — residents of California and certain other U.S. states have specific rights regarding their personal information.

Categories of personal information we have collected in the past twelve (12) months:

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising. We disclose information only to service providers under contract, which is not "selling."

Your U.S. state rights may include the right to know, access, correct, delete, and opt out of sale/sharing (which we do not do), and the right not to be discriminated against for exercising them. To exercise these rights, contact us using Section 13. We will verify your identity before acting on your request.

11. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes — we will update this notice as needed to stay accurate and compliant.

The updated version will be indicated by a revised "Last updated" date and is effective as soon as it is accessible. For material changes, we may notify you in the app or by other means. In particular, before we begin collecting any new category of data (for example, phone number or health/sleep data), we will update this notice and our App Store / Play privacy labels.

12. FEATURES IN DEVELOPMENT

We may add features that collect additional data — for example, phone-number verification, or an optional integration to read your sleep data (Apple Health / Health Connect) to show how screen time affects your rest. Any such data will be collected only with your explicit, separate consent, used solely to provide that feature, never shared with analytics or advertising partners, and this notice and our app-store privacy labels will be updated before collection begins.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, or wish to exercise a right, email us at privacy@obsto.app, or write to:

AdyriX Systems Private Limited D.No.18-7-96/1, Shivalayam Temple, KAZA, Mangalagiri, Mangalagiri, Guntur - 522503, Andhra Pradesh, India

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect, to change it, or to delete it. You can delete your account and data directly in the app (Settings), or contact us at privacy@obsto.app to make a request. We will respond in accordance with applicable law.