Privacy Policy

Effective date: 2026-10-27

This policy explains what data Omni Tracker (published by Aio Technologies) collects, why, and the choices you have.

1. Data we collect

• Account: your email address and the user identifier provided by Apple, Google or our email sign-in. If you create an account with an email address and password, we store only a salted hash of the password (scrypt), never the password itself. If you sign in with Apple and hide your email, we only receive Apple's relay address.
• Account verification: the email address you confirm with a code, and your Telegram account (user id, chat id and username) or WhatsApp number, only if you connect one. Omni Tracker opens once your email is verified and, on Android, Windows and the web, Telegram or WhatsApp is connected too; in the iOS and Mac apps, connecting them is optional. Verification codes and Telegram links are stored only as hashes; codes expire after 10 minutes and links after 15 minutes.
• Your planning content: Ikigai entries, purpose statement, objectives, key results, KPIs and daily values, actions and activities (including activity notes), learning projects (learning map, resources, sessions and their notes, flashcards and weekly check-ins), and your daily progress history and its settings (rest days and daily goal), so they can sync between your devices.
• Technical session data: sign-in time, last use and device operating system, to manage sessions and keep your account secure. To limit password guessing, we also keep counts of failed attempts and which networks signed in to each address, stored only as keyed hashes (never your IP address or email in readable form) and deleted after a day without attempts, or 60 days after the last successful sign-in.
• Subscription and payments: the time your account was created, from which the 7-day trial is counted, and how many of the trial's 3 AI analyses you used; your subscription state (active or not, where it was bought, plan, expiry date, product identifier) and, for purchases on our website and in the Windows app, the PayPal subscription id, for a one-time PayPal payment the PayPal order id, capture id, amount and status, or, for a crypto payment, the network, our receiving wallet address, the amount, the transaction id and its status, and, for purchases in the iOS, Mac and Android apps, the App Store transaction id, or the Google Play purchase token and order id. Payments are handled by Apple, Google or PayPal, and crypto is sent straight from your wallet to ours (blockchain transactions are public); we never store card details or PayPal account details, and we never receive wallet keys. If you enter the transaction id of a crypto payment that our server cannot match automatically, we keep it with the network and the amounts found, so that our team can check it by hand.

Daily reminders and language settings stay on your device. The app contains no ads, advertising trackers or behavioral analytics.

App lock: if you turn on unlocking with Face ID, Touch ID, Windows Hello, a fingerprint or face unlock, your device's operating system checks it. No biometric data reaches the app or our server; the app keeps only whether the lock is on, and the account it last unlocked, on your device.

2. How we use it

• to sign you in and keep your account secure;
• to verify your email before your account opens, and your Telegram or WhatsApp on Android, Windows and the web (optional in the iOS and Mac apps), which limits abuse of the free trial;
• to sync your planning between your devices;
• to provide subscription features and process the purchases you make on our website or in the Windows app, and to lock the app when the trial ends without a subscription;
• to run an AI analysis (Omni AI) only when you ask for one;
• to answer support requests and, with our internal admin tool, to check payments, give Pro or extend a trial, sign an account out of its devices or delete it when you ask us to.

We do not sell your data or use it for advertising. Verification emails and Telegram or WhatsApp messages contain only codes and confirmations, never advertising.

3. AI analysis (Omni AI)

Omni AI is the AI analysis of Omni Tracker. When you are a subscriber or in your free trial and tap Analyze, the app asks for your permission before the first analysis; then a bounded summary of your planning (without private activity notes) is sent through our server to a third-party AI model provider to generate the analysis. Nothing is sent without your permission, and you can withdraw it in Settings. Our server does not store the analysis; the result is kept only on your device. AI results are estimates, not professional advice.

4. Service providers

• Our cloud hosting provider — runs our server and website;
• Our database provider — stores account and planning data (encrypted at rest);
• An email delivery provider — delivers emails with sign-in and verification codes;
• A message delivery provider and WhatsApp (Meta) — deliver WhatsApp verification codes to the number you enter;
• Telegram — the Omni Tracker Telegram bot that connects your Telegram account;
• Apple and Google — sign-in, and payments in the iOS, Mac and Android apps (our server checks each purchase directly with Apple and Google);
• PayPal — subscriptions and one-time payments in the web app or the Windows app;
• Public blockchain data services (TronGrid and public RPC nodes) and price services (CoinGecko and Coinbase) — our server only reads incoming transfers to our own wallets and the TRX and XRP exchange rates from them, and sends them no personal data;
• An AI model provider, through our server — only for the Omni AI analyses you request.

These providers may process data outside your country. All connections are encrypted (HTTPS).

5. Retention and deletion

We keep your data while your account exists. A locked account's data is kept until you subscribe or delete the account. In the app (Settings → Account → Delete account) you can delete your account and all synced data immediately. If you bought in the App Store or Google Play, we keep the store's purchase identifier, product and dates, without any link to you, until 60 days after the subscription ends, so that store notifications can be matched and a restore can attach it to a new account. If you used PayPal, even for a checkout you did not complete, we keep the PayPal subscription ids of your account, without any link to you, so that a subscription PayPal bills after the deletion is cancelled automatically when PayPal tells us about it. A one-time PayPal payment bills nothing later: its order id, capture id, amount and status are deleted with your account, and any prepaid time left is lost. Encrypted database backups may remain with our database provider for a limited period and are then removed automatically. Our team's admin tool keeps a log of the actions taken on accounts (for example Pro given or a payment confirmed) with the account id and email address for 2 years, also after the account is deleted. We also keep the amount, plan and date of each payment made on our website or in the Windows app, without any link to you, for our accounts. See Delete your account. For each crypto payment, we also keep the network, the transaction id (public on the blockchain), the amount and the time after the account is deleted, without any link to you, so that the same transaction cannot be used to pay again.

6. Your rights

You can view and edit your data in the app, export your plan and progress reports as images or PDF files, and delete your account. For a copy of your data or any other request, contact support@omnitracker.app.

7. Children

The app is not directed at children under 13 and we do not knowingly collect their data.

8. Security

Sign-in and verification codes, Telegram links and session tokens are stored only as hashes, access tokens are short-lived, and data access is limited to the account owner and, for support and payments, to our team's owner accounts, which see account, verification, subscription and payment details but never your planning content. On your device, the iOS, Mac, Android and Windows apps keep your session and the app lock's settings in the system's secure storage: the Keychain on iOS and macOS, the Android Keystore on Android and Windows data protection (DPAPI) on Windows; the web app keeps your session in your browser's storage for this site. No method is perfectly secure, but we take reasonable measures to protect your data.

9. Changes

If this policy changes, we update the date above and announce material changes in the app.

10. Contact

Aio Technologies
No 111, V20 Building, Russia Cluster, International City, Dubai, UAE
support@omnitracker.app