OmniNode Limited
Privacy Policy
This Privacy Policy explains how OmniNode Limited ("OmniNode", "we", "us") collects, uses, shares and protects personal data when you use our mobile applications, websites and related services (together, the "Services"). It applies to every app published by OmniNode Limited on the Apple App Store, Google Play and other channels, unless an app provides its own supplementary notice.
Contents
1Who we are
OmniNode Limited is a company incorporated in the Hong Kong Special Administrative Region. For the purposes of data protection law, OmniNode Limited is the data controller (the "data user" under the Hong Kong Personal Data (Privacy) Ordinance) of the personal data described in this Policy.
OmniNode LimitedRm R1(10), 16/F, The Cloud
111 Tung Chau Street, Tai Kok Tsui
Kowloon, Hong Kong
contact@omninodeltd.com
2Information we collect
2.1 Information you give us
- Account details. If an app offers an account: your email address, display name and sign-in credentials, or a token from Sign in with Apple or Google.
- Content you submit to AI features. Text prompts, questions, documents, images, audio and other inputs you choose to provide, and the outputs generated in response (together, "AI Content").
- Settings and preferences you choose in the app, such as language, voice or theme.
- Communications. Messages you send to our support team, survey responses and feedback.
2.2 Information collected automatically
- Device and app information. Device model, operating system and version, language, region and time zone, screen size, app version and install source.
- Usage information. Features used, screens viewed, session length and frequency, in-app events, and crash and performance logs.
- Identifiers. An app-generated installation ID; Apple's Identifier for Vendors (IDFV) or the Android app set ID; and the advertising identifier (IDFA or Android Advertising ID) only if you grant permission through App Tracking Transparency or the equivalent Android setting.
- Network information. Your IP address, from which we derive an approximate (country- or city-level) location. We do not collect precise GPS location unless a specific feature asks for it and you grant permission.
2.3 Information from other sources
- App store transactions. When you buy a subscription or in-app purchase, Apple or Google tells us the product, price, currency, purchase and renewal status and a transaction identifier. We never receive your card number or billing address.
- Sign-in providers. If you use Sign in with Apple or Google, we receive the information you agree to share, such as a name and an email address (which may be a relay address).
2.4 Device permissions
Some features ask for access to your camera, microphone, photo library, files, contacts or notifications. We request each permission only when the feature needs it, explain why at that moment, and use the data only for that feature. You can revoke any permission at any time in your device settings.
3How we use information
- To provide the Services: run the app, deliver features, process your inputs through AI models and return results, and sync your data across devices if you sign in.
- To operate AI features, as described in Section 4.
- To maintain and improve the Services: analyse usage, fix crashes, test new features and understand which features are useful.
- To personalise your experience: remember your settings, language, history and preferences.
- To process purchases: validate app store receipts, manage subscriptions and prevent fraud.
- To communicate with you: service announcements, security alerts and responses to support requests. We send marketing messages only with your consent, and you can opt out at any time.
- To keep the Services safe: detect abuse, enforce our Terms of Service and protect users and third parties.
- To comply with law: respond to lawful requests and meet record-keeping and tax obligations.
Legal bases (EEA, UK and Switzerland). We process personal data on the basis of: performance of a contract (providing the Services you request); our legitimate interests (improving and securing the Services, analytics); your consent (tracking, marketing, optional permissions and, where we ask for it, sharing with third-party AI providers); and compliance with legal obligations.
4AI features and model providers
Our apps use artificial-intelligence models to generate text, images, audio, translations, summaries and other outputs.
- Where processing happens. Some models run entirely on your device; your inputs then never leave the phone. Other features send your inputs to our servers and to third-party model providers (for example OpenAI, Google, Anthropic or other providers named in the app) so that a large model can generate the result.
- Disclosure and permission. Where personal data you provide would be shared with a third-party AI provider, the app tells you before you use the feature and asks for your permission.
- No training on your content. We do not use your prompts or AI Content to train our own models unless you expressly opt in. Our agreements with model providers restrict them to processing your content in order to deliver the service, and prohibit them from using it to train their models wherever that option is available.
- Retention by providers. Model providers may retain inputs for a short period (typically up to 30 days) for abuse monitoring, as described in their own policies.
- Accuracy. AI outputs can be wrong, incomplete or inappropriate. Do not rely on them for medical, legal, financial or safety decisions without independent verification.
- Your history. If an app stores your conversations or generated content so you can return to them, you can delete individual items or your whole history inside the app.
6Data retention
- Account data: for as long as your account exists, then deleted within 30 days of account deletion, except where we must keep records for legal reasons.
- AI inputs and outputs: processed transiently to generate a result. Stored only if the app has a history feature that you use, until you delete the item or your account.
- Analytics and usage data: kept in identifiable form for up to 24 months, then aggregated or deleted.
- Crash logs: up to 90 days.
- Support correspondence: up to 2 years after the matter is closed.
- Purchase records: for as long as tax and accounting law requires (generally 7 years).
Where data is not tied to an account (you never signed in), it is held against your installation ID and deleted on the schedule above or when you ask us.
7Your rights and choices
Depending on where you live, you may have the right to access the personal data we hold about you; correct inaccurate data; delete your data; receive a copy in a portable format; object to or restrict certain processing; withdraw consent at any time; and lodge a complaint with a supervisory authority (in Hong Kong, the Office of the Privacy Commissioner for Personal Data; in the EEA or UK, your local data protection authority).
Deleting your account and data. Apps that offer accounts include a Delete account option in their Settings. Deleting your account removes your profile, history and content from our systems within 30 days. You can also email contact@omninodeltd.com and we will delete the data associated with your account or installation.
- Advertising and tracking. Change tracking permission at any time: on iOS, Settings → Privacy & Security → Tracking; on Android, Settings → Privacy → Ads.
- Permissions. Revoke camera, microphone, photo and other permissions in your device settings.
- Marketing. Use the unsubscribe link in any email or the notification settings in the app.
- California residents (CCPA/CPRA). You have the right to know, delete and correct personal information, to opt out of the "sale" or "sharing" of personal information, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. We do not sell personal information. Where an app shares identifiers with advertising partners for cross-context behavioural advertising, declining tracking permission opts you out; you may also email us. An authorised agent may submit a request on your behalf with written permission.
- Submitting a request. Email contact@omninodeltd.com with the app name and the email address or installation ID associated with your use. We will verify your identity and respond within 30 days, or within the period required by local law (40 days under the Hong Kong PDPO). We do not charge a fee unless a request is manifestly unfounded or excessive.
8Children
Our Services are not directed to children under 13, or under the age at which a child can consent to data processing in their region (16 in parts of the EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it. Apps with a higher age rating in the app store apply that higher minimum age.
9Security
We protect personal data with encryption in transit (TLS) and at rest, access controls based on least privilege, logging and monitoring, and security reviews of the providers we use. No method of transmission or storage is completely secure. If you believe your data has been compromised, contact us immediately.
10International transfers
We are based in Hong Kong. Personal data may be processed in Hong Kong, Singapore, the United States, the European Union and other places where we or our providers operate. For transfers of personal data from the EEA, UK or Switzerland we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum where applicable) or another lawful transfer mechanism, and we require providers to maintain appropriate protection.
11App store privacy labels
Each app's listing on the App Store ("App Privacy") and Google Play ("Data safety") summarises the data that particular app collects. Those labels supplement this Policy; if a label describes additional data for a particular app, the label governs that app.
12Third-party links and services
Our apps may link to websites or services operated by others, including sign-in providers, cloud storage and model providers. Their privacy practices are governed by their own policies, which we encourage you to read.
13Changes to this Policy
We may update this Policy from time to time. We will post the new version here with a new effective date and, for material changes, notify you in the app or by email where we have your address. Your continued use of the Services after the effective date means you accept the updated Policy.
14Contact us
Questions, requests and complaints about this Policy or your personal data can be sent to:
OmniNode Limited — Data ProtectionRm R1(10), 16/F, The Cloud
111 Tung Chau Street, Tai Kok Tsui
Kowloon, Hong Kong
contact@omninodeltd.com