Privacy Policy

• Your files are encrypted on your device before they ever reach us.
• The per-job key is sent over TLS only to OMNIvour's conversion path so the worker can decrypt, convert, and re-encrypt the file.
• Conversion tools may use short-lived memory or temporary disk while a job runs. The worker discards plaintext and its working copy of the key after processing.
• Your device keeps a protected recovery copy of the per-job key until the output expires so interrupted conversions and retained downloads can resume. OMNIvour does not store that key in its application database.
• Inputs and outputs expire automatically on tier-specific retention clocks.
• We don't sell your data or use behavioral advertising or tracking cookies.

We keep collection to the minimum needed to run the service:

• Your account identity. We use your email address and, when you choose Apple or Google sign-in, the provider identity and short-lived tokens needed to verify that sign-in. Email sign-in uses a one-time code - OMNIvour stores no password.
• Subscription status. If you upgrade, our payments processor tells us whether your plan is active. Your card details go to the app store / payments processor, never to us.
• Your files, encrypted. The files you convert are encrypted on your device and stored only as ciphertext for as long as the conversion needs them (see Retention).

OMNIvour encrypts every file with AES-256-GCM in the app before upload. Encrypted objects are held in temporary storage. To convert a file, the app sends its per-job key over TLS to an authorized OMNIvour worker. The worker decrypts the input, performs the conversion, re-encrypts the output, and discards the working key and plaintext when processing ends. Some conversion tools require short-lived temporary files; those files are isolated to the job and removed during worker cleanup.

To let you resume an interrupted job or download a retained output, the web app stores the per-job key in this browser's private application storage, and the mobile apps store it using device-protected application storage. That recovery record is bound to your account and job, expires with the output, and is cleared by the app's account-deletion flow. Clearing browser or app data can remove it sooner and make the encrypted output unrecoverable.

AI-assisted conversions use models operated for OMNIvour rather than a third-party generative-AI API. Our infrastructure providers still process data on our behalf as described below. We do not use file contents to train models, build advertising profiles, or sell data.

Only to operate the product:

• Sign you in and keep your account working.
• Run your conversions and deliver the result back to you.
• Apply your subscription entitlements.
• Use minimized operational logs to keep the service reliable.

We do not use your information for advertising, profiling, or resale.

We use a small set of infrastructure providers to run OMNIvour. Each sees only what its job requires:

• Supabase - account sign-in and our application database.
• Apple and Google - identity providers only when you choose their sign-in option.
• Cloudflare - Turnstile bot protection and temporary R2 storage of encrypted files.
• RevenueCat - subscription management (works alongside the App Store / Google Play).
• Stripe - web checkout and payment processing.
• Conversion worker hosting - infrastructure, including Modal and an approved fallback host when enabled, for converters and models operated for OMNIvour.

Storage providers receive only encrypted file blobs. The conversion key is sent only to OMNIvour's server-side conversion worker for transient processing and is not stored in the database.

During web checkout, Stripe receives the payment details you enter plus limited browser, device, and transaction information needed to process the payment, prevent fraud, and meet financial-record obligations. OMNIvour does not receive your full card number. Stripe keeps payment records under its legal and contractual requirements; you may exercise applicable privacy rights through OMNIvour and through Stripe's privacy process.

Files are ephemeral by design:

• Uploaded inputs: product access expires within 24 hours.
• Free outputs: product access expires within 24 hours.
• Pro and Lifetime outputs: product access expires within 7 days.
• Omni outputs: product access expires within 30 days.
• Access logs: retained for up to 31 days for security, then removed.

Encrypted storage objects are also governed by provider lifecycle and tamper-protection rules. Those rules may retain output ciphertext for up to 31 days even after product access ends; OMNIvour will not mint a download capability after the tier deadline.

Your account email and subscription status are kept while your account is active. Requesting deletion immediately disables account access and starts durable cleanup of the account and associated application records. We wait for previously issued storage capabilities to expire before the final cleanup sweeps. Storage Object Lock or backup retention can prevent immediate physical erasure of already-retained objects; those encrypted objects remain inaccessible through the product and expire on their existing retention schedule. OMNIvour also deletes the RevenueCat customer record. Apple, Google, Stripe, and the app stores may retain identity, transaction, tax, fraud-prevention, or legal records under their own policies and obligations.

• We don't sell or rent your personal information to anyone.
• We don't run advertising or behavioral tracking.
• We don't set tracking cookies.
• We don't send your files to third-party AI services.

You can access, correct, export, or delete your data. The fastest path to deletion is built into the product: delete your account, which removes your access and begins deletion of associated data subject to the retention limits described above. You can also email us at support@omnivour.app for any request. Depending on where you live (for example, the EEA, UK, or California), you may have additional rights - we honor them regardless of location.

OMNIvour issues no new storage capabilities after the deletion tombstone is set. A download capability issued immediately beforehand expires within one minute, and a previously issued upload capability can remain valid for up to two hours. Durable cleanup waits for both windows, then performs final owner-prefix sweeps before provider and sign-in records are removed.

If you used Sign in with Apple, OMNIvour currently has no retained Apple token to revoke for you. After deletion, remove OMNIvour from your Apple Account's Sign in with Apple settings to complete Apple-side revocation.

OMNIvour isn't directed to children. You must be at least 13 years old to use it (16 in the EEA). We don't knowingly collect data from children under these ages; if you believe a child has provided us data, contact support@omnivour.appand we'll remove it.

We operate in the United States, and our providers may process data in the United States and other countries. Wherever your data is processed, the protections in this policy - including on-device encryption - travel with it.

If we change this policy, we'll update the date at the top. For material changes - a new category of data, a new provider, a longer retention window - we'll give you notice in the app or by email before the change takes effect.

OMNIvour is operated by RADLAB LLC, a Wyoming limited liability company, which is the controller of your personal information. Questions, requests, or concerns? Email support@omnivour.app - a human reads it.