This Privacy Policy applies to the Octo Browser mobile application (hereinafter referred to as the "Application"), developed by BLACKBIRD SECURE BROWSING LTD (hereinafter referred to as the "Service Provider") as a free companion app for the Octo Browser service. This service is provided "AS IS".

The data controller responsible for your personal data is:

BLACKBIRD SECURE BROWSING LTD
Second Floor Unit 1058, 6 Market Place, London W1W 8AF, United Kingdom
Company Number: 90886489
Contact: dev@octobrowser.net

The Application uses your credentials to authenticate you and provide access to your browser profiles.

The Application processes the following information you provide:

• Login credentials (email/username and password)
• Authentication tokens issued after successful login
• Browser profile data

The Service Provider may use the provided information to contact you with important notices, service updates, and relevant information related to the Application.

The Application may automatically collect certain information, including but not limited to:

• Device type and model
• Unique device identifier
• IP address
• Mobile operating system and version
• Application usage data and interaction patterns
• Crash reports and diagnostic information

The Application does not collect precise location information of your mobile device.

The Application does not use Artificial Intelligence (AI) technologies to process your data or provide features.

For users located in the European Economic Area (EEA) and the United Kingdom, we process your personal data on the following legal bases:

• Authentication and Application functionality: Processing is necessary for the performance of a contract (Article 6(1)(b) GDPR)
• Analytics and service improvement: Legitimate interest in improving the Application (Article 6(1)(f) GDPR)
• Crash reports and diagnostics: Legitimate interest in ensuring Application stability and security (Article 6(1)(f) GDPR)
• Legal compliance: Processing necessary for compliance with legal obligations (Article 6(1)(c) GDPR)

The Service Provider implements physical, electronic, and procedural safeguards to protect information we process and maintain. Specifically:

• Authentication credentials are stored securely using the device's system Keychain
• Communication between the Application and Octo Browser servers is protected using industry-standard TLS encryption
• Profile data transmitted between the Application and Octo Browser servers is encrypted in transit
• Access to user data is limited to authorized personnel who need access to operate, develop, or improve the Application

Please note that although we endeavour to provide reasonable security for the information we process and maintain, no security system can prevent all potential security breaches.

Only aggregated, anonymised data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service.

The Application utilises the following third-party services, each with their own Privacy Policy:

• Octo Browser Service (the main platform at octobrowser.net) — Privacy Policy: https://octobrowser.net/privacy-policy
• Google Analytics for Firebase
• Firebase Crashlytics

The Service Provider may disclose User Provided and Automatically Collected Information:

• as required by law, such as to comply with a subpoena or similar legal process;
• when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• with trusted service providers who work on our behalf, do not have independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this Privacy Policy.

Your data may be transferred to and processed in countries outside the European Economic Area and the United Kingdom, including the United States. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and the UK Information Commissioner's Office as the legal basis for these transfers.

Third-party providers involved in international transfers:

• Google (Firebase) — United States, based on Standard Contractual Clauses

If you are located in the European Economic Area or the United Kingdom, you have the following rights regarding your personal data:

• Right of access — obtain confirmation of whether we process your personal data and access to such data (Article 15 GDPR)
• Right to rectification — request correction of inaccurate personal data (Article 16 GDPR)
• Right to erasure — request deletion of your personal data under certain circumstances (Article 17 GDPR)
• Right to restriction of processing — request that we limit processing of your data (Article 18 GDPR)
• Right to data portability — receive your data in a structured, commonly used format (Article 20 GDPR)
• Right to object — object to processing based on legitimate interests (Article 21 GDPR)
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time
• Right to lodge a complaint — file a complaint with a supervisory authority (in the UK: Information Commissioner's Office at ico.org.uk)

To exercise any of these rights, please contact dev@octobrowser.net.

You can log out of the Application at any time through the Application's settings. Logging out removes your stored credentials from this device.

You can halt all collection of information by the Application easily by uninstalling the Application. You may use the standard uninstallation processes available on your mobile device or via the mobile application marketplace.

The Service Provider retains data as follows:

• Authentication credentials stored on your device: retained until you log out or uninstall the Application
• Automatically collected diagnostic and usage data: retained for up to 24 months, after which it may be stored in aggregated, anonymised form
• Crash reports: retained for up to 90 days
• Support communications: retained for up to 2 years for customer service purposes

Data stored on Octo Browser servers (including browser profiles and account information) is retained according to the Octo Browser service retention policy, available at octobrowser.net.

If you would like the Service Provider to delete User Provided Data collected by the Application, please contact dev@octobrowser.net, and we will respond within a reasonable time. Please note that some or all of the User Provided Data may be required for the Application to function properly.

The Service Provider does not use the Application to knowingly solicit data from or market to children.

The Application is not directed to individuals under the age of 16 (or the minimum age required by applicable law in your jurisdiction). The Service Provider does not knowingly collect personally identifiable information from children under this age.

If the Service Provider discovers that a child has provided personal information, we will immediately delete this information from our servers. If you are a parent or guardian and believe that your child has provided us with personal information, please contact the Service Provider at dev@octobrowser.net so that we can take the necessary actions.

The Application does not track you across apps and websites owned by other companies for advertising purposes.

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes. Continued use of the Application is deemed approval of all changes.

By using the Application, you consent to the Service Provider's processing of your information as set forth in this Privacy Policy, as amended from time to time. "Processing" means using cookies on a computer/mobile device or using or handling information in any way, including but not limited to collecting, storing, deleting, using, combining, and disclosing information.

If you have any questions regarding privacy while using the Application, or have questions about our practices, please contact the Service Provider:

BLACKBIRD SECURE BROWSING LTD
Email: dev@octobrowser.net
Address: Second Floor Unit 1058, 6 Market Place, London W1W 8AF, United Kingdom

Effective Date: 23 April 2026

Last Updated: 24 April 2026