Privacy notice

OwnWeb is provided by DynStack Private Limited, a company registered in Singapore (“we”, “us”). We are responsible for the personal data described in this notice.

This notice covers the OwnWeb browser, its phone apps, this website, OwnWeb accounts, sync, and OwnWeb Apps. Apps published by other developers, websites you visit and AI providers you connect have their own privacy practices, which this notice does not cover.

The browser stores the following on your own device, in your profile. We do not receive it.

• Your browsing history, bookmarks, open tabs and saved session.
• Cookies and data that websites store.
• Passwords you save, encrypted with your operating system’s keychain.
• Your Library: saved pages, passages, video moments, notes, tags and audio notes.
• The data of every app you install, and files those apps create.
• Agent tasks, their history and reports.
• Your settings, themes and site permissions.

We do not collect the addresses of the pages you visit, the searches you make or the content of pages you open.

This website sets no cookies and loads no analytics, advertising or other third-party scripts. Your choice of light or dark appearance is kept in your browser’s local storage and is not sent to us.

Like any web server, ours receives your IP address and browser type when you request a page. We use this to deliver the page and to keep the service secure, and we keep server logs for a short period.

If you ask to be notified when a release is available, we keep the email address you give us and the device you chose, and use them only to send that notice. Each notice tells you how to stop them.

If you contact us, we keep your message and your contact details for as long as we need to deal with it.

Without an account, the browser makes a small number of requests to our servers so that it works and stays safe. These requests carry your IP address and the browser’s version, as any download does. They are not linked to an account or to your browsing.

• Configuration and update checks, so that a faulty feature can be switched off and you can be told about a new version.
• Signed lists the browser uses, such as rules for supported video sites. Blocking lists, when you turn blocking on, are downloaded from Ghostery.
• Downloads you start, such as the search model for Better search or a tool an app needs.
• The catalogue of published apps, when you open OwnWeb Apps.

The browser asks once whether you want to help improve OwnWeb by sharing usage statistics. This is off until you say yes, and you can change your answer at any time in Settings.

If you agree, the browser sends daily totals, such as how many times a feature or an app was used, with the browser version and operating system. These totals are not linked to you. They never include the pages you visit, what you type, or the content of your Library, apps or tasks.

If you have an account, there is a second, separate choice to share usage linked to your account, such as which apps you use and how often. It is also off until you turn it on. We use it to understand how accounts use OwnWeb and to give developers totals for their apps that do not identify you. Turning it off stops new records at once.

This choice is separate from marketing emails and from accepting our terms. Saying no does not limit any feature.

An account is optional. If you create one, we keep:

• Your email address, and a password if you set one, stored as a one-way hash.
• If you sign in with Google, the identifier and email address Google gives us for your account.
• The devices signed in to your account, and security events such as sign-ins and password changes.
• Your choices about usage statistics and marketing emails.
• Messages you send us, and requests you make for an app.

We use this to sign you in, keep your account secure, provide what you bought and reply to you. We send marketing emails only if you opted in, and every one has an unsubscribe link.

Payments are processed by Stripe. Your card details go to Stripe and are not stored by us.

We keep a record of each order, top-up, subscription and refund: what was bought, the amount, the currency, the date, the tax charged, and the billing country or address needed to work out tax and issue an invoice. We keep these records for as long as tax and accounting law requires.

When you buy an app from another developer, that developer receives reports of their sales that do not identify you.

Sync is optional. When it is on, your app data is encrypted on your device before it is sent, with keys we do not hold. We store the encrypted data and cannot read it.

To run sync we also keep information we can read: which account and space the data belongs to, which app it comes from, its size, when it changed, and which devices are syncing.

Backup files you create with the browser stay wherever you put them. We do not receive them.

The AI agent uses a model you choose. A model that runs on your device sends nothing to anyone.

If you connect a cloud provider, the text the agent needs for a task is sent to that provider, under that provider’s terms and privacy policy. The browser shows which provider will receive the text before it is sent. Your provider key is stored in your operating system’s key store, not on our servers.

If you pay for AI through your OwnWeb wallet, we process the request to provide the answer and to bill you.

If you submit an app we keep your publisher name, the source and files you submit, and the review record. If you sell apps, Stripe collects the identity and bank details needed to pay you; we keep your seller status, your sales, refunds and payouts.

We do not sell personal data. We share it only with:

• Service providers that run parts of OwnWeb for us, listed on the Subprocessors page, under contracts that limit what they may do with it.
• Stripe, for payments and payouts.
• People you choose to share with, such as members of a family or team space.
• Authorities, when the law requires it.
• A successor, if the service is transferred to another company, under the commitments in this notice.

Some providers process data outside your country. Where the law requires safeguards for such transfers, we put them in place.

• Account details: until you delete your account.
• Synced data: until you delete it, turn sync off or delete your account. Access ends at once; copies in our backups are removed within 30 days.
• Earlier versions of synced data: 7 days on the Free plan and 30 days on paid plans.
• After you turn sync off: the cloud copy is kept for 30 days in case you return, then deleted. Your devices keep their copies.
• Usage statistics that are not linked to you: kept as totals. Usage linked to your account: kept for a short period and deleted when you withdraw your consent or delete your account.
• Orders, invoices and payout records: for as long as tax and accounting law requires.
• Data that belongs to a team or family space stays with that space when a member leaves.

You can use the browser without an account, turn usage statistics and marketing off, clear your browsing data, and delete your account from your account page. Deleting your account ends access immediately and removes your personal cloud data as described above.

Depending on where you live, you may have the right to ask for a copy of your personal data, to have it corrected or deleted, to object to or restrict how we use it, to withdraw consent, and to complain to your data protection authority. We answer requests within one month. We may need to confirm who you are first, and we will never ask for your password or recovery key.

For privacy requests, write to dev [at] ownweb [dot] io.

OwnWeb accounts are for adults. If you are under 18, use an account only with the permission of a parent or guardian. We do not knowingly collect personal data from children under 13.

We protect data with encryption in transit, encryption of synced content before it leaves your device, and restricted access to our systems. No system is perfectly secure; if a breach affects your data we will tell you and the relevant authority as the law requires.

When we change this notice we update the date at the top. If a change is significant we tell account holders by email or in the browser before it takes effect.