Privacy Policy
Last updated: February 25, 2026
This Privacy Policy explains how Omni ("Omni", "we", "us", "our") collects, uses, shares, and protects personal data when you use the Omni mobile application and related services (collectively, the "Service"). We are committed to protecting your privacy and being transparent about our data practices.
1. Who We Are
Omni is a location-based social networking application that connects people in the real world through shared places, messaging, and games.
Data Controller: Omni
Contact Email: support@omni.name
Website: https://omni.name
2. Scope
This Privacy Policy applies to:
- The Omni iOS mobile application
- All Omni features including account management, social networking, messaging, location-based discovery, interactive games, in-app purchases, and advertising
- The Omni website at omni.name
3. Data We Collect
3.1 Account & Profile Data
- Email address
- Username (subject to automated profanity filtering)
- First and last name
- Date of birth (to verify age eligibility)
- Profile avatar/photo
- Password (stored as a cryptographic hash — we never store or see your plaintext password)
- Authentication tokens from Google Sign-In or Apple Sign-In (if used)
3.2 Location Data
- Precise GPS coordinates when you use map, discovery, place check-in, or encounter/Passed By features
- Location is collected only while the app is in use and you have granted location permission
- You can hide your exact location from other users via the in-app privacy settings, and you can revoke location permission at any time in your device settings
3.3 Social & Communication Data
- Friend requests, friendships, and friend lists
- Direct messages and group chat messages
- Encounter records (anonymous proximity-based detection of nearby users)
- User reports and block lists
3.4 Game Data
- Game session data, answers, scores, and results for Two Truths & One Lie, Would You Rather, Guess About Me, and This or That
- Game preset configurations
3.5 Purchase & Subscription Data
- Subscription status (Omni Plus weekly or monthly)
- Place Credit and Radius Pass purchase history
- Transaction identifiers from the Apple App Store
- We do not collect or store your payment card details — all payment processing is handled by Apple and RevenueCat
3.6 Device & Technical Data
- Device push notification tokens (for Firebase Cloud Messaging)
- Device type and operating system version
- App version
- IP address (collected automatically by our infrastructure providers)
3.7 Advertising Data
- If you consent to tracking via Apple's App Tracking Transparency (ATT) prompt, Google AdMob may collect your Identifier for Advertisers (IDFA) and ad interaction data to serve personalized ads
- If you decline ATT tracking, only contextual (non-personalized) ads are shown
- Omni Plus subscribers do not see any ads, and no advertising data is collected or shared for them
3.8 Referral Data
- Referral codes you generate or use
- Referral relationship between inviter and invitee accounts
4. How We Use Your Data
| Purpose | Data Used |
|---|---|
| Provide and maintain the Service | Account, profile, location, social, game data |
| Enable social features (friends, messaging, encounters) | Social/communication data, location data |
| Operate map, place, and check-in features | Location data, place data |
| Deliver interactive games | Game session and result data |
| Process in-app purchases and subscriptions | Purchase/subscription data |
| Deliver push notifications | Device tokens, notification preferences |
| Display advertisements (non-Plus users) | Advertising data (IDFA if consented) |
| Verify age eligibility | Date of birth |
| Moderate content and enforce community standards | Username, user content, reports, block lists |
| Prevent fraud, abuse, and enforce bans | Account data, device data, activity patterns |
| Comply with legal obligations | All categories as required by law |
5. Legal Bases for Processing (GDPR / UK GDPR)
Where applicable under the General Data Protection Regulation (EU/UK), we rely on the following legal bases:
| Legal Basis | Processing Activities |
|---|---|
| Performance of a contract | Providing the Service, managing your account, processing purchases, delivering game features |
| Consent | Location access, push notifications, ad tracking (ATT), optional profile information |
| Legitimate interests | Security, fraud prevention, content moderation, service improvement, non-personalized advertising |
| Legal obligation | Tax/accounting records for purchases, responding to legal requests |
You may withdraw consent at any time without affecting the lawfulness of prior processing. To withdraw consent for location or notifications, update your device settings. To withdraw ATT consent, visit Settings > Privacy > Tracking on your iOS device.
6. Data Sharing & Third-Party Processors
We do not sell your personal data. We share data only with the following categories of service providers who process data on our behalf:
| Service Provider | Purpose | Data Shared |
|---|---|---|
| Supabase (US/EU) | Database, authentication, edge functions | Account, profile, location, social, game data |
| Firebase Cloud Messaging (Google) | Push notifications | Device tokens, notification payloads |
| RevenueCat (US) | In-app purchase and subscription management | Anonymous user ID, purchase/subscription status |
| Google AdMob (Google) | Advertising (non-Plus users only) | IDFA (if consented), ad interaction data, device info |
| Apple App Store | App distribution, payment processing | Purchase transactions, app analytics |
| Apple SKAdNetwork | Privacy-preserving ad attribution | Anonymized, aggregated conversion data |
| Google Sign-In / Apple Sign-In | Authentication | OAuth tokens, email (if authorized) |
We may also disclose data if required by law, court order, or to protect the safety of our users.
7. Advertising
Omni displays interstitial advertisements to users who are not subscribed to Omni Plus. Ads are served by Google AdMob.
- When ads appear: On navigation tab changes (limited to once every 5 minutes) and after completing an in-app game
- Ad personalization: If you consent via Apple's ATT prompt, AdMob may use your IDFA to serve personalized ads. If you decline, ads are contextual only
- Omni Plus subscribers: If you subscribe to Omni Plus, no ads are displayed and no advertising data is collected or shared with ad networks on your behalf
- Opt-out: You can change your ATT preference at any time in iOS Settings > Privacy & Security > Tracking
8. Data Retention
We retain your data only as long as necessary for the purposes described in this policy:
| Data Category | Retention Period |
|---|---|
| Active account data | As long as your account exists |
| Profile and friendship data after account deletion | Up to 30 days |
| Messages after account deletion | Up to 90 days |
| Game metadata after account deletion | Up to 30 days |
| Transaction/purchase records | Up to 7 years (tax, accounting, and legal obligations) |
| Moderation records (bans, reports) | Up to 3 years (safety and abuse prevention) |
After the applicable retention period, data is permanently deleted or irreversibly anonymized.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence, including the United States, where our service providers operate. Where required by law (including under GDPR/UK GDPR), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or reliance on adequacy decisions.
10. Your Rights
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your personal data
- Restriction: Request that we limit processing of your data
- Objection: Object to processing based on legitimate interests
- Portability: Receive your data in a structured, machine-readable format
- Withdraw consent: Where processing is based on consent, withdraw it at any time
- Lodge a complaint: File a complaint with your local data protection authority (e.g. the ICO in the UK, CNIL in France)
To exercise any of these rights, contact us at deniz@omni.name. We will respond within 30 days (or sooner where required by law).
11. Account Deletion
You can request complete account deletion directly from within the Omni app via Settings. Upon deletion:
- Your profile, avatar, friendships, messages, and game data will be queued for permanent deletion
- Retention windows described in Section 8 apply where legally required
- Active subscriptions are not automatically cancelled — you must cancel your subscription through the Apple App Store before or after requesting deletion
12. California Residents (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):
- Right to Know: You may request the categories and specific pieces of personal information we have collected about you
- Right to Delete: You may request deletion of your personal information
- Right to Opt-Out of Sale/Sharing: We do not sell personal information for monetary consideration. Personalized advertising via AdMob may constitute "sharing" under CCPA — you can opt out via ATT or by subscribing to Omni Plus
- Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
To submit a request, contact deniz@omni.name.
13. Children's Privacy
Omni is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a user under 18, we will promptly delete it. If you believe a minor has provided data to us, please contact us at deniz@omni.name.
14. Security
We implement technical and organizational measures designed to protect your personal data, including:
- Encrypted data transmission (TLS/HTTPS)
- Secure password hashing (passwords are never stored in plaintext)
- Row-level security policies on our database
- Access controls and authentication for all backend services
No system is 100% secure. If you become aware of a security vulnerability, please report it to deniz@omni.name.
15. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top. We encourage you to review this policy periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.
16. Contact Us
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at:
Email: deniz@omni.name
Website: https://omni.name