Trust & Safety

Provably Private

Not a promise — a test. This page shows the result of an automated check that actually walks Obrillia and records every request the browser makes.

What this proves

During real use — creating a classroom, using Guru Garage, opening the Parent dashboard, adjusting Settings — Obrillia's browser tab contacts only Obrillia's own server. No analytics, no trackers, no third-party fonts or CDNs, no telemetry. This is checked by an automated test (tests/e2e/zero-egress.spec.ts) that listens to every network request the browser makes and fails if even one leaves the app's own origin.

What this does not claim: if you connect your own AI, speech, image, or search provider (a separate, explicit opt-in described in our Privacy Policy), those requests go to that provider by design. This audit only covers Obrillia as it behaves before any such provider is configured, and the built-in Junior experience, which never requires one.

Latest audit result

Result: ✅ Zero third-party requests observed
Generated: Sun, 16 Aug 2026 13:43:23 GMT (commit bc88452)
Total browser requests observed: 282
Same-origin requests: 282
Locally-generated media (data:/blob: URIs): 0
Flows checked: Home, Create a classroom (real, local-deterministic path), Junior — Guru Garage explore, Parent dashboard, Settings, Privacy policy, Local AI status

Reproduce it yourself

This report is not hand-written — it is regenerated every time the underlying test runs, and the release check fails if the committed report is stale, empty, or includes a third-party browser request. Clone the repository and run:

npm run test:e2e -- zero-egress
npm run check:release-privacy

The browser test produces the evidence; the release check binds that evidence to the current commit before shipping.