Privacy

Who is responsible

Omi is built and published by Omi, the data controller for the little that is described here.

For anything to do with your privacy, including exercising the rights set out below, write to support@omidiary.com. Every message gets an answer.

What you write never leaves your phone

Each day’s text, the mood you pick, the three good things and the photos you attach are kept in a database inside the app’s private space, on your own device.

None of it is sent anywhere. There is no server, no sync and no copy of ours: we could not read your diary if we wanted to, because it never reaches us.

That has a consequence worth saying out loud: if you delete the app without a device backup, your diary goes with it and there is no way to bring it back.

Photos

When you add a photo to a day, iOS shows you its own picker. The app is not given access to your library: only the image you choose is handed over.

That image is copied into the app’s private space and re-encoded on the way, which strips the original’s metadata — the GPS coordinates of where the photo was taken among them. The file is stored under a random name that says nothing, not even which day it belongs to.

Saving a day’s card to your library asks for permission to add, never to read: omi can put an image in your photos, but it cannot look at them.

Your device backups

Because your diary lives in the app’s documents folder, it is included in whatever backup your iPhone makes, if you have one turned on — to iCloud or to a computer. That is what keeps you from losing it when you change phone.

That backup is Apple’s and is governed by their terms and their encryption. We have no access to it. If you would rather your diary stayed out of it, you can turn omi’s backup off in your iPhone’s iCloud settings.

The daily reminder

If you turn the reminder on, the notification is scheduled by your own iPhone and fires on the device. There is no notification server, no identifier is created to reach you, and nothing leaves the phone.

The time you choose is stored on the device, alongside your other preferences.

Sharing a day

The card you share is drawn on your own device. Save it and it stays in your library; send it to another app and you hand it over yourself, through the system share sheet, and what happens next is that app’s business and its terms.

The temporary image made for this is deleted as soon as the operation ends, whether you complete it or cancel it.

Analytics, and only if you say yes

To know which parts of the app are used and which are in the way, omi can send a few usage events. It is off to begin with: we ask once, during the welcome, with a “no thanks” the same size as the “yes”, and you can change your mind whenever you like in Settings.

The provider is Amplitude, acting as our data processor. The project uses their European instance, so events are stored in the European Union. Amplitude is a United States company and may access them from outside the European Economic Area in order to provide support, under the European Commission’s standard contractual clauses.

What is sent falls into these four groups, and there are no others:

• Which screens are seen — from a closed list of screens, never the real address, which would carry the date of one of your days.
• What is done on them: saving a day, adding a photo, closing the day, opening a past one, sharing. Anything counted arrives in bands — the text is “short”, “medium” or “long”, never its length — and never includes what was written.
• Which preferences you have: the theme, whether you use a reminder and which part of the day you set it for, and how many days you have written, in bands as well.
• And that the welcome was finished, with the only variable it has: whether you came out of it with a reminder set.

That is the shape of everything sent: never an exact value of anything of yours, always a band or one option from a closed list.

And this is what is never sent, by construction rather than by promise: the text of what you write, your photos, which mood you chose, the real dates of your days, your IP address, your country, your iPhone’s advertising identifier, its vendor identifier, your carrier, or any campaign attribution data. All of them are switched off in the code.

The identity those events travel under is a random identifier the app generates itself, not the provider. When you withdraw consent it is destroyed and the provider forgets its own; if you turn analytics back on later a new one is made, so the two periods cannot be joined up.

The legal basis is your consent (article 6(1)(a) GDPR). Withdrawing it is as easy as giving it, and does not affect what was processed before you did.

Your mood, and why we never send it

How you feel each day is the most delicate thing this app holds, and it could count as data concerning health, which the GDPR protects especially.

So analytics report whether you picked a mood, but never which one. That value does not leave the device under any circumstance, not even with analytics turned on.

Children

Omi is not directed at children under 14 and we do not knowingly collect their data. If you believe a child in your care has turned analytics on, write to us and we will withdraw it.

This website

The omi website has no analytics, no advertising and no cookies. There is nothing to accept.

The only things kept in your browser are two preferences of yours: the theme you picked and whether you dismissed the language notice. They stay on your machine, they travel nowhere, and clearing the site’s data removes them.

Like any page, the server hosting it logs the requests it receives — IP address, browser and page asked for — in order to serve the site and protect it from abuse. It is technical data, it is not combined with anything, and it is not used to profile anyone.

Your rights

Over your diary you exercise them yourself, without asking: edit any day, delete a whole one from inside the app, or uninstall omi and take the lot with you.

Over analytics data, if you ever turned it on, you have the right of access, rectification, erasure, restriction, objection, portability, and to withdraw your consent at any time. Write to us and we will sort it out.

There is an honest limit worth explaining: because we do not know who you are, finding your events would need the random identifier from your device — and if you have already withdrawn consent, that identifier was destroyed. Write to support@omidiary.com anyway and we will find a way.

If you think we have got something wrong, you can complain to the supervisory authority in your country. In Spain that is the Agencia Española de Protección de Datos.

How long things are kept

Your diary, for as long as you want: it lives on your device and it goes when you delete it.

Analytics events are kept in the Amplitude project for as long as they are useful for understanding how the app is used, and are deleted when they stop being useful or when someone asks.

Changes to this policy

If something changes about what is collected, this page changes and the date at the top with it. If the change were a significant one, we would also say so inside the app before it took effect.

Contact

Any question, any complaint and any right you want to exercise: support@omidiary.com.