01Scope
Omni is a private personal AI operating layer. The protected workspace is for approved users only.
This policy covers data processed by the Omni web app, API, messaging webhook, model-routing layer, memory system, reminders, file vault, generated artifacts, and audit logs.
02Data processed
Omni may process prompts, assistant responses, uploaded files, generated documents or images, reminders, approved actions, sender identifiers, delivery metadata, and operational logs.
Omni stores only the data needed to provide assistant features, maintain safety controls, record confirmations, debug failures, and show usage history to the administrator.
03Providers
The deployment uses configured infrastructure, AI, media, speech, storage, and messaging providers only when enabled by environment configuration.
Provider credentials are loaded from environment variables or Cloudflare secrets. Secrets are not stored in the browser and are not committed to the repository.
04Messaging channel
Messaging integrations are used for notifications, approvals, reminders, and quick commands from approved users.
The protected web app remains the primary Omni interface.
06Health and fitness data
When the owner connects Health Connect in the Omni Android app, Omni reads what the owner allowed there: steps, heart rate, sleep, blood oxygen, exercise sessions, calories burned, distance, weight and body fat, and blood pressure only if the owner separately turns it on. Omni writes nothing to Health Connect.
Omni keeps summaries in the owner's Fitness application, not raw samples: a day's totals and extremes, each exercise session, weigh-ins, blood pressure readings, and the heart rate of the owner's own workouts. They are used to show the owner their training, sleep and recovery, and are given to Omni's assistant only when the owner turns that on for each kind of data.
Health data is not sold, not used for advertising, and not shared with anyone except the configured providers that run a feature the owner asked for. The owner can withdraw access at any time in Health Connect, turn off the assistant's use of it in Fitness, and remove the Fitness application, which ends access to its data.