Privacy Policy
1. Who we are
OmniBrain AI (“OmniBrain”, “we”, “us”) provides a local-first Android app that saves and organizes web content, with optional paid AI features (summaries, transcripts, Ask Library) processed through our API gateway.
2. Legal bases (GDPR / UK GDPR)
- Contract — providing features you request (save metadata, paid transcript/summary/RAG).
- Legitimate interests — security, abuse prevention, crash diagnostics, improving reliability.
- Consent — optional push notifications (device token); analytics where consent is required by law.
3. Data we process
| Category | Examples | Where stored | Retention |
|---|---|---|---|
| Library content | URLs, titles, article text, images, notes, tags, local AI summaries | On device (SQLite / files) | Until you delete items or uninstall |
| On-demand AI jobs | Text snippets / URLs you submit for summary, transcript, or RAG | Ephemeral on server during processing | Discarded after job completion (task metadata may linger ≤ 24h for status) |
| Device identifiers | App-generated device id, API key, FCM token (optional) | Device + our API (Redis/memory) | API keys ≤ 90 days idle; FCM until you clear data / uninstall |
| Subscriptions | Play purchase token / product id (no card numbers) | Google Play + verification on our API | Per Google Play retention; we keep tier for quota enforcement |
| Diagnostics | Crash logs, coarse analytics events | Firebase (Google) | Per Firebase product defaults |
4. When cloud services are used
- Public link metadata (title, thumbnail) for save flows
- Paid video transcripts — audio/text processed then discarded on the server
- On-demand AI summaries / Ask Library — text processed then discarded
- Subscription verification with Google Play
- Optional push notifications via Firebase Cloud Messaging (device token only)
5. Sub-processors
- Google Play Billing — subscription payment processing
- Google Firebase (Analytics / Crashlytics / FCM) — diagnostics and optional push
- Cloudflare — optional CDN / edge protection for our public API and this site
- LLM / transcript providers configured for our gateway (e.g. Agnes-compatible API, VidNavigator) — only for user-triggered paid jobs
- Hosting VPS provider (e.g. Hetzner or equivalent) — API compute
We do not sell personal information. We do not use your library to train foundation models.
6. Your rights
EEA / UK (GDPR)
You may request access, rectification, erasure, restriction, portability, and objection where applicable. Because the library lives on device, you exercise most rights via in-app export, delete, wipe, or uninstall. For server-side job residues or API keys, email privacy@omnibrain.ai. You may lodge a complaint with your local supervisory authority.
California (CCPA / CPRA)
We do not “sell” or “share” personal information for cross-context behavioral advertising as those terms are defined under CCPA/CPRA. California residents may request to know, delete, or correct personal information we hold about them by contacting privacy@omnibrain.ai. We will not discriminate for exercising these rights.
7. Children
OmniBrain is intended for users 13+ (Google Play target audience). We do not knowingly collect personal information from children under 13. If you believe a child provided data to us, contact privacy@omnibrain.ai and we will delete it.
8. Security
Transit to our API uses HTTPS in production. Local library access can be further protected with an optional app PIN / biometrics. No method of transmission or storage is 100% secure; please keep your device locked.
9. International transfers
If you use paid cloud features, processing may occur outside your country (including the EU and the United States) via our sub-processors. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses offered by those providers.
10. Changes
Material changes will update this page and the in-app Privacy screen. Continued use after the effective date constitutes acceptance of the updated policy where permitted by law.
11. Contact
Privacy questions: privacy@omnibrain.ai