Privacy Policy
Effective Date: October 19, 2026
oo1 studio built the browser of oo1 studio app as a Free app. We are committed to protecting your privacy through a local-first, serverless architecture. This policy explains how our browser operates locally on your device, how our native hardware bridge functions, and how our Bring-Your-Own-Storage (BYOS) cloud synchronization works.
1. Local-First Operation & Google Drive BYOS Cloud Sync
By default, the browser operates entirely locally on your device. We do not use third-party analytics or behavioral tracking SDKs (such as Google Analytics or Firebase Analytics) to monitor your activity.
Zero-Server Architecture: oo1 studio does not host, own, or operate centralized cloud database servers. We never collect, store, or view your browsing data on our own infrastructure.
Optional Google Drive (BYOS) Cloud Sync: We offer an optional synchronization feature powered by Google Drive under a Bring-Your-Own-Storage model. If you choose to enable cloud sync:
- Google Authentication: You sign in directly through Google OAuth 2.0 to grant the browser access to its own private, app-specific folder on your personal Google Drive.
- Direct Client-to-Cloud Transmission: Your synced profiles, pinned web apps, browsing history, and appearance settings are transmitted directly between your Android device and your personal Google Drive account via official Google Drive APIs.
If you do not sign in to Google Drive, no data is ever synchronized or transmitted off your device.
2. Data Security & Self-Serve Deletion
All synchronization communications are encrypted in transit using industry-standard TLS/HTTPS protocols. We do not sell, rent, broker, or monetize any of your data or account information.
Complete Self-Serve Deletion: Because all synced data resides exclusively inside your own personal Google Drive, you have total ownership and control over it at all times. For detailed instructions on deleting your data in-app or revoking access outside the app, please visit our Account Deletion Guide.
- You can permanently delete all cloud backups at any time directly within the browser's Sync Panel using the "Delete Cloud Data" option.
- You can immediately revoke the browser's access to your Google account at any time through your Google Account Security Settings.
- Uninstalling the application or clearing its application storage via Android Settings permanently deletes all on-device data.
3. OutSync Native Hardware Bridge & Design Tokens
The browser features the OutSync protocol to bridge native Android capabilities directly to local and web applications:
- Design Tokens: Physical layout metrics—such as device corner radii, screen padding, single-line heights, and system highlight colors—are shared locally with the rendering engine. These are generic hardware measurements that cannot be used to personally identify you.
- CameraX & ML Kit Barcode Scanning: Applications utilizing the OutSync camera bridge display a local camera stream and decode barcodes via Google ML Kit. All image analysis and barcode detection take place 100% on-device in volatile memory. Camera frames are never recorded, stored on disk, or transmitted over any network.
- Flashlight, Haptics & Audio: Hardware triggers for the camera torch, tactile vibration patterns, and notification sounds operate strictly on local hardware registers and do not transmit data.
- Local Storage Bridge: When permitted, web applications can save files directly to your device storage (such as Downloads) without communicating with external servers.
4. GeckoView Engine & Local Storage
The browser is powered by the Mozilla GeckoView rendering engine. Standard web browsing data (including cookies, cache, site preferences, and IndexedDB storage) is managed directly by the engine and stored locally on your device. You can clear this data at any time using the browser's tab and site data management settings.
5. Two-Tier Device & Site Permissions
Our application enforces a strict two-tier permission model. The browser does not access sensors in the background. When a web application requests access to the Camera, Microphone, Location, Local Storage, or Google Drive BYOS:
- Contextual In-App Prompt: The browser displays an internal permission panel asking you to explicitly allow or deny access for that specific domain.
- Android OS Prompt: If site permission is granted, Android's system permission dialog is requested if not already approved.
Your permission decisions are saved locally per-domain on your device, and you can inspect, modify, or revoke them at any time.
6. Third-Party Websites
As a web browser, the app provides access to the open internet. We are not responsible for the privacy practices, content, cookies, or data collection policies of external third-party websites or services you choose to navigate to.
7. Children's Privacy
Our service does not address anyone under the age of 13. Because we operate without central servers, we do not knowingly collect personally identifiable information from children. If you have any questions regarding child privacy, please contact us.
8. Contact Us
If you have any questions, concerns, or inquiries regarding this Privacy Policy or your data privacy, please contact us at:
Email: marcinlowercase@oo1.studio