Privacy Policy
The short version
- We collect what you give us (your account, your posts, your photos) and basic information about how you use the app. We use it to run Omnia.
- Your posts go to your followers or to everyone, depending on the visibility you pick. Some mini apps default to public, and you can change that before you post.
- Contact matching uploads coded versions (hashes) of your contacts' emails and phone numbers, never names or the raw details. We keep them to match friends until you disconnect contacts.
- We don't sell your personal information, and we don't show third-party ads.
- You can delete your account, and the data that goes with it, from Settings at any time.
This Privacy Policy explains how Flux Software, Inc. ("Flux," "we," "us") collects, uses, and shares information when you use the Omnia mobile app, the mini apps inside it, and our website at omniatheapp.com (together, the "Service"). Using the Service is also governed by our Terms of Service.
- Information we collect
- How we use information
- What other people can see
- How we share information
- AI features
- Your choices and controls
- How long we keep information
- Security
- Children
- International users
- U.S. state privacy rights
- EEA, UK, and Swiss users
- Changes to this policy
- Contact us
1. Information we collect
Information you give us
- Account information. When you sign in with Apple or Google, we receive your email address and, if you choose to share it, your name. Sign in with Apple lets you hide your real email address. When you set up your profile, you pick a username and can add a display name and a profile photo.
- Phone number (optional). If you verify a phone number, we send a one-time code by SMS and store the verified number with your account. Other people can then find you if they have your number in their contacts.
- Content you create. This means everything you make or share in Omnia and its mini apps: posts, photos, videos, comments, likes, polls and votes, ratings and reviews of places, book, recipe and room projects, travel pinboards and ideas, postcards, workouts, runs and walks, meal logs, chess games, beats, songs, and the text prompts you give to AI features. It includes the people you tag and anyone you invite to edit with you.
- Birth date. When you create an account, we ask for your birth date to confirm you meet the minimum age. It's stored privately with your account, never shown to anyone, and used only for age requirements.
- Reports and messages to us. This covers reports you file about content or users, and anything you send us by email.
Information from your device, with your permission
- Contacts. When you use "Find friends," the app turns each email address and phone number in your address book into a one-way hash (SHA-256) on your device and uploads only those hashes. Names and raw contact details never leave your phone. Hashes of phone numbers in particular can be reversed with enough computing effort, so we treat them as personal data: we store them securely, never show them to anyone, and delete them when you disconnect contacts or delete your account. We compare the hashes with the hashes of Omnia users' verified email addresses and phone numbers, so we can show you friends who are already here and tell you when a contact joins. When you send an invite, the app opens your device's own Messages or share sheet. We don't send invites for you.
- Precise location. Strides records your GPS route only while you're actively tracking a run or walk, and only with "While Using the App" permission. The route is saved with that activity. Some features also search for places near a location you choose, such as a travel destination or a restaurant you're adding.
- Photos, videos, and camera. We access only the photos and videos you pick or take. For some features, the app reads location and date information that's already embedded in a photo. For example, Postcards uses it to suggest where and when a photo was taken. If you post a photo, the post may show that place.
- Notifications. If you allow push notifications, we store a device token from Apple so we can deliver them.
Information collected automatically
- Usage information. This covers which mini apps you open, features you use, posts you view, like, or comment on, and similar in-app events, each tied to your account ID and a timestamp.
- Device and technical information. This includes device model, operating system and app version, language, time zone, IP address, approximate location derived from your IP address, and similar technical data. Our analytics provider also collects it.
- Shared-link information. When someone opens a link you shared, or an invite link with your username in it, we record that the link was viewed or used and credit it to you. This helps us understand which invites bring people to Omnia.
- Clipboard check (first launch). If you tapped "Get the app" on a shared Omnia web page, that page copies its link to your clipboard. On first launch, the app uses an iOS check that tells it whether the clipboard looks like a web link, without reading the contents. Only if it does, the app reads the link so it can open the post you were looking at.
- Purchases. If you buy a subscription or in-app item, Apple processes the payment. We receive a record of the transaction, such as product, date, and status, but never your payment card details.
2. How we use information
- To provide the Service: creating your account, running mini apps, publishing your posts to the audience you choose, syncing your content across devices, and delivering notifications.
- To help you connect: suggesting people you may know through contact matching, sharing links and invites, and telling you when friends join.
- To power features you ask for, including the AI features described below.
- To understand and improve Omnia: measuring usage, retention, and which features work, and fixing bugs.
- To keep Omnia safe: enforcing our Terms, reviewing reports, blocking abuse, preventing fraud, and protecting our users and the public.
- To communicate with you about your account, the Service, and changes to our policies.
- To process purchases and manage subscriptions and AI credits.
- To comply with the law and respond to lawful requests.
We don't use your information to serve third-party advertising.
3. What other people can see
Omnia is a social service, and much of what you create is meant to be seen. Keep this in mind:
- Your profile (username, display name, profile photo) is visible to other Omnia users and on shared web pages.
- Posts and activity are shown according to the visibility you choose. Followers means people who follow you. Public or Everyone means any Omnia user, including in community feeds. Some mini apps default to public, for example Strides runs and walks and some music and book posts. You can change visibility before posting, and some posts can be edited or deleted afterwards. A public Strides post includes the map of your route, which can reveal where you ran, so think about routes that start or end at your home.
- Shared links. When you share a post with "Share," anyone with the link can view that post on the web, even without an Omnia account. Share cards and images you export can be saved and passed on by whoever receives them.
- Collaborative content. People you invite to co-edit something, such as a travel pinboard, can see and change it. People you tag will see that they were tagged.
- Comments and likes are visible to anyone who can see the post.
We never reveal which of your email address or phone number matched someone's contacts.
4. How we share information
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under California law. We share information only as follows:
Service providers
We use trusted vendors who process information on our behalf, under contracts that limit how they can use it:
| Provider | What they do for us |
|---|---|
| Supabase | Database, file storage, authentication, and server functions. This is where your account and content live. |
| Vercel | Hosting for our website and shared-post web pages |
| Mixpanel | Product analytics (usage events and device information) |
| Apple | Sign in with Apple, push notifications, in-app purchases, and Maps services |
| Sign in with Google | |
| AI service providers | AI processing for the features you use (see AI features) |
| SMS provider | Delivering phone-verification codes |
Content services the app talks to directly
Some mini apps fetch public content straight from third-party services. These services see your device's IP address and the search or request involved, such as a song or book title or a place name. They don't receive your Omnia account information. They include Apple (Maps, Look Around, iTunes Search and music previews), Open Library (book search and covers), Wikipedia/Wikimedia (destination images), and Shopify's product catalog (Shop search, sent through our servers). If you open a link to a merchant or another app, that service's own privacy policy applies.
Other sharing
- With other users, as described in What other people can see.
- At your direction, for example when you share to another app or service.
- For legal reasons: if we believe in good faith that we must comply with law, a court order, or legal process, or that it's needed to protect the rights, property, or safety of Flux, our users, or others.
- In a business transfer, such as a merger, acquisition, financing, or sale of assets. Your information may then transfer to the new owner, and this policy will continue to apply to it.
- Aggregated or de-identified information that can't reasonably identify you.
5. AI features
Some mini apps are marked with an AI badge and use third-party AI models. Before any app first sends your content to an AI provider, Omnia asks your permission and shows what each app sends and to whom. You can turn AI features on or off any time in Settings → AI features. When you use a feature, we send the input it needs to the provider and return the result to you:
- Plate sends the meal photo or description you submit to a third-party AI service to estimate nutrition.
- Restyle sends your room photo and style choices to third-party AI services to generate a redesign.
- Travel Agent sends your destination and preferences to a third-party AI service for trip ideas.
- Muse sends your song prompt and any lyrics you write to a third-party AI service to generate music.
We send these requests from our servers, so the providers don't receive your account ID, email address, or contacts. Don't include personal information in prompts or photos that you don't want processed this way. AI providers process inputs under their own commercial terms and privacy policies. AI output may be inaccurate. See our Terms.
6. Your choices and controls
- Post visibility. Choose Followers or Public when you post, where the mini app offers it.
- Edit or delete content. You can delete your posts, comments, and other content inside each mini app.
- AI features. Settings → AI features turns AI tools on or off.
- Contacts. Settings → Disconnect contacts deletes every contact hash you've uploaded. You can also revoke Contacts access in iOS Settings.
- Location, photos, camera. Change or revoke these permissions any time in iOS Settings.
- Notifications. Mute notification types in Settings, or turn notifications off in iOS Settings.
- Blocking and reporting. Block someone to stop them seeing your posts and interacting with you. Report content or accounts that break our rules.
- Delete your account. Settings → Delete account permanently deletes your account, your profile, your content, and the files you uploaded. This can't be undone.
- Subscriptions. Manage or cancel through your Apple ID settings.
7. How long we keep information
We keep your information for as long as your account is active and as needed to provide the Service. When you delete your account, we delete your account record, profile, the content linked to your account, and the files you uploaded. Some exceptions apply:
- Copies that other people saved or passed on outside Omnia, such as screenshots or exported share cards, are outside our control.
- Residual copies may stay in backups for a limited time before they are overwritten.
- Analytics records held by our analytics provider are tied to a random account ID, not your name or email, and are kept under that provider's retention settings.
- We may keep limited information when the law requires it, to resolve disputes, to enforce our agreements, or to prevent abuse. For example, we keep records of reports and safety enforcement.
8. Security
We protect your information with technical and organizational measures. These include encryption in transit, database access rules so each user can reach only what they're allowed to see, and keeping third-party API keys on our servers rather than in the app. No system is perfectly secure, so we can't guarantee absolute security. If you believe your account has been compromised, contact us right away.
9. Children
Omnia is not directed to children under 13, and you must be at least 13 to use it. We ask for your birth date when you create an account, and we delete accounts that don't meet the minimum age right away. We don't knowingly collect personal information from children under 13. If we learn that we have, we'll delete it. If you believe a child under 13 is using Omnia, please contact us at gev@omniatheapp.com. If you're between 13 and the age of majority where you live, please review this policy with a parent or guardian.
10. International users
Flux is based in the United States, and we and our service providers process and store information in the United States and other countries. Those countries may have data-protection laws that differ from yours. Where the law requires it, we use appropriate safeguards for these transfers, such as Standard Contractual Clauses.
11. U.S. state privacy rights
Depending on where you live (for example California, Colorado, Connecticut, Virginia, and other states with consumer privacy laws), you may have the right to:
- know or access the personal information we've collected about you, and get a portable copy;
- correct inaccurate personal information;
- delete your personal information;
- opt out of the sale or sharing of personal information, or of targeted advertising. We don't do either.
- limit the use of sensitive personal information. We use precise location (Strides routes) and account login only to provide the features you ask for, which these laws permit.
- not be discriminated against for exercising these rights.
California notice. In the past 12 months we collected these categories of personal information for the purposes in Section 2, from you, your device, and our service providers:
- identifiers (name, email address, username, phone number, account ID, IP address, device token);
- customer records (account and purchase records);
- commercial information (subscriptions and in-app purchases);
- internet and network activity (in-app usage);
- geolocation (precise route location in Strides, place locations you add, approximate location from IP);
- audio, visual, and similar information (photos, videos, generated audio);
- inferences (such as people you may know);
- sensitive personal information (account login credentials through Apple or Google, and precise geolocation).
We disclose these categories to the service providers listed in Section 4 for business purposes. We haven't sold or shared personal information. We have no actual knowledge of selling or sharing the personal information of consumers under 16.
To exercise your rights, email gev@omniatheapp.com, or use the in-app controls in Settings. We'll verify your request by confirming it comes from the email address on your account, or by asking you to confirm in the app. You can use an authorized agent if we can verify their authority. If we deny your request, you can appeal by replying to our decision. If the appeal is denied, you can contact your state attorney general.
12. EEA, UK, and Swiss users
If the GDPR or UK GDPR applies to you, Flux Software, Inc. is the controller of your personal information. We process it on these legal bases:
- contract: to provide the Service you signed up for;
- legitimate interests: analytics, safety, preventing abuse, and improving Omnia, balanced against your rights;
- consent: contacts, precise location, photos, camera, push notifications, and sending your content to AI providers. You can withdraw consent at any time in iOS Settings or in the app.
- legal obligation: where the law requires us to process data.
You have the right to access, correct, delete, restrict, or object to our processing of your personal information, and to data portability. To use these rights, contact us at gev@omniatheapp.com. You also have the right to complain to your local data-protection authority.
13. Changes to this policy
We may update this policy from time to time. If we make material changes, we'll notify you in the app or by other means before they take effect, and we'll update the "Last updated" date above. If you keep using the Service after a change takes effect, the updated policy applies to you.
14. Contact us
Questions or requests about privacy:
Flux Software, Inc.
Email: gev@omniatheapp.com