Data Protection & PrivacyVersion 2.0 • Last updated: September 25, 2026

Privacy Policy

This Privacy Policy explains how Obryl ("obryl.com" and the Obryl mobile application) collects, uses, protects, and discloses your personal information when you access our platforms, book accommodations, rent vehicles, or take tourist tours in Cameroon.

1. Scope & Data Controller

This Privacy Policy applies to all personal data collected by OBRYL through the website https://obryl.com and the official Obryl mobile applications (Android and iOS). By accessing or using our services, you acknowledge that you have read and understood this Policy.

Identity of the Data Controller:

  • Entity: OBRYL
  • Application Name: Obryl (Web & Mobile Android/iOS)
  • Country of operation: Cameroun
  • Official Contact Email: info@obryl.com
  • Official Website: https://obryl.com

2. Personal Data We Collect

We only collect personal information that is necessary to provide, secure, and improve our services. Depending on how you use Obryl, we collect the following categories of data:

Account & Identity Data

First name, last name, email address, telephone number, profile picture, account credentials (hashed passwords or WebAuthn/Passkeys cryptographic public keys).

Geolocation Data (GPS)

Precise or approximate GPS coordinates when searching for nearby stays, rental cars, or tourist tours. Location is only accessed with your permission while actively using the app, never tracked silently in the background.

Payment & Financial Data

Transaction history and status. Payments are handled via our PCI-DSS certified gateway GeniusPay (Mobile Money MTN/Orange Money, bank cards). Obryl never stores full credit card numbers on its servers.

Media, Photos & Documents

Photos uploaded for property listings, vehicles, reviews, or identity documents provided by hosts for account verification (KYC) to guarantee safety.

Device & Technical Data

IP address, mobile operating system (Android, iOS), unique device identifiers, Firebase Cloud Messaging (FCM) push notification tokens, connection logs, and crash diagnostics to ensure high stability.

3. Purposes and Legal Bases for Processing

We process your personal information for the following specific purposes and under the following legal bases:

PurposeDescriptionLegal Basis
Account & ReservationsManaging account creation, login, bookings for stays, vehicles, and tours.Contract execution
Secure PaymentsProcessing transactions, issuing invoices, and refunding bookings via GeniusPay.Contract execution
Push Notifications & SMSSending booking updates, confirmation codes, and host-traveler instant messages.Consent / Contract
Map & Local SearchShowing accommodations, cars, and experiences around user coordinates.Consent (GPS permission)
Safety & Anti-FraudPreventing illegal activities, verifying host identities, and securing our systems.Legitimate interest / Legal duty

4. Third Parties & Data Sharing

We strictly protect your privacy. Obryl does not sell, rent, or trade your personal data to any third party for commercial or advertising purposes. Data is only shared with authorized partners under strict confidentiality agreements:

  • GeniusPay (pay.genius.ci) : Certified payment gateway for processing Mobile Money (MTN MoMo, Orange Money) and card payments in compliance with PCI-DSS standards.
  • Google Firebase Cloud Messaging (FCM) : Provides secure push notifications for reservation confirmations, account alerts, and messaging on Android and iOS devices.
  • Scaleway & Hostinger : Secure European cloud infrastructure hosting our databases and media storage with state-of-the-art encryption protocols.
  • Hosts & Travelers Connection : Only essential contact details (first name, phone number) are exchanged between confirmed reservation parties to facilitate check-in and trip coordination.

5. Mobile Permissions (Google Play & App Store)

To ensure complete transparency regarding Google Play policies, our mobile application may request the following permissions on your device:

Location (ACCESS_FINE_LOCATION, ACCESS_COARSE_LOCATION)

Used exclusively when the app is active in the foreground to locate nearby available accommodations, rental cars, and tour itineraries on our interactive map. We do NOT track your continuous location in the background.

Camera & Photos (CAMERA, READ_MEDIA_IMAGES)

Requested only when you choose to take or upload photos of your accommodation, car, identity document (for host verification), or profile avatar.

Push Notifications (POST_NOTIFICATIONS)

Used to notify you about booking requests, payment confirmations, host messages, and critical security alerts. You can disable notifications anytime in your smartphone settings.

6. Security and Data Retention

Obryl implements robust technical and organizational security measures to protect your personal data from unauthorized access, loss, or alteration. All communication between your device and our servers is encrypted using modern TLS 1.3 encryption.

We retain your personal information for as long as your account remains active. When an account is closed, personal profile data is purged within 30 days, except for accounting, billing, and tax records which must be retained for the minimum statutory periods required by Cameroonian and international financial regulations.

Google Play Requirement

7. Account and Personal Data Deletion

In full compliance with Google Play Developer Policies and global data privacy standards, Obryl provides all users with a straightforward way to request the complete deletion of their account and associated data.

Method 1: In the Mobile App
  1. Open the Obryl mobile app.
  2. Go to Profile / Settings tab.
  3. Select "Account Security" or "My Account".
  4. Tap "Delete my account" and confirm.
Method 2: Via Web or Email

You can request deletion anytime by sending an email from your registered account email to:

info@obryl.com

Subject: "Account and Data Deletion Request"

Deletion Timeline & Data Retention Scope:
  • Immediate effect: Your profile, listings, vehicle postings, and active credentials become inaccessible.
  • 30-day purge: All personal profile details, uploaded images, and device push tokens are permanently erased.
  • Legal archives: Past completed transaction records and invoices are strictly maintained as required by statutory accounting laws.

8. Your Rights Regarding Your Data

Under applicable data protection laws, you hold the following rights without fees:

Right of Access:

Request a copy of the personal information we hold about you.

Right of Rectification:

Correct incomplete or inaccurate information directly in your profile.

Right of Erasure:

Request complete deletion of your data (right to be forgotten).

Right of Objection:

Object to non-essential communications (e.g., promotional newsletters).

To exercise any of these rights, simply email us at info@obryl.com. We respond within 30 days.

9. Children's Privacy

Obryl services and applications are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we discover that a minor has provided us with personal data without verifiable parental consent, we take immediate steps to delete such data and terminate the account.

10. Contact Us & Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or how your personal information is handled by Obryl, please contact our Data Protection Officer (DPO):

OBRYL — Data Privacy Department

Cameroun • https://obryl.com

info@obryl.com

Email Support