Privacy Policy for OmniAI

Introduction

OmniAI ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wellness companion mobile application (the "App").

By using OmniAI, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this policy, please do not use our App.

1. Information We Collect

1.1 Personal Information

When you create an account, we collect:

• Email address (for authentication and account recovery)
• Display name (for personalization)
• Authentication credentials (securely managed through Firebase Auth)
• Apple ID (when using Sign in with Apple)

1.2 Health & Wellness Information

Through your use of the App, we collect:

• Chat conversations with the AI wellness companion (encrypted)
• Mood tracking data (5-point scale mood entries)
• Journal entries (free-form, tagged, and themed entries)
• Wellness goals (set during onboarding)
• Crisis resource interactions (for safety purposes)

1.3 Usage Information

We automatically collect:

• Session data (app opens, feature usage, session duration)
• Device information (device type, OS version, app version)
• Analytics data (feature engagement, conversion events)
• Performance metrics (crash reports, load times)

1.4 Subscription Information

For premium features, we collect:

• Subscription status (via RevenueCat)
• Purchase history (managed by Apple App Store)
• Trial usage (7-day free trial tracking)

2. How We Use Your Information

2.1 Provide Core Services

• Deliver personalized AI-powered emotional wellness support
• Generate contextually appropriate supportive responses
• Track and analyze mood patterns over time
• Maintain chat history and journal entries
• Provide crisis resources when needed

2.2 Improve Our Services

• Enhance AI response quality and relevance
• Develop new features based on usage patterns
• Optimize app performance and user experience
• Conduct research on wellness support effectiveness

2.3 Account Management

• Authenticate and secure your account
• Process subscription payments
• Send important service updates
• Provide customer support

2.4 Safety & Security

• Detect and prevent fraudulent activity
• Enforce rate limiting to prevent abuse
• Comply with legal obligations
• Protect users and the service from harm

3. How We Process Your Data

3.1 AI Processing

• Chat messages are processed by OpenAI's GPT-4 model
• Processing occurs through secure Firebase Cloud Functions
• Messages are not stored by OpenAI after processing
• AI responses are tailored for wellness support

3.2 Data Storage

• All user data is stored in Firebase Firestore
• Data is segregated by user ID with strict access controls
• Sensitive messages are encrypted using AES-256 encryption
• Encryption keys are stored securely in iOS Keychain

3.3 Data Security Measures

• Client-side encryption for sensitive data
• Firebase security rules enforcing user-level access control
• HTTPS-only communication
• Token-based authentication with automatic refresh
• Rate limiting on API endpoints
• Audit logging for administrative access

4. Third-Party Services

5. Data Retention

• Active accounts: Data retained while account is active
• Chat messages: Retained until manually deleted by user
• Journal entries: Retained until manually deleted by user
• Mood data: Retained for pattern analysis (user can delete)
• Deleted accounts: Data permanently deleted within 30 days
• Subscription data: Retained per Apple App Store requirements

6. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

6.1 With Your Consent

• When you explicitly agree to share information
• When you choose to export your data

6.2 For Legal Reasons

• To comply with legal obligations or court orders
• To protect our rights, privacy, safety, or property
• To prevent fraud or security issues
• In case of emergency involving danger to health or safety

6.3 Business Transfers

• If we are involved in a merger, acquisition, or sale of assets
• Your information may be transferred as part of that transaction
• We will notify you of any change in ownership

7. Your Rights and Choices

7.1 Access and Portability

• View all your data within the app
• Export your journal entries and mood data
• Request a copy of your personal information

7.2 Correction

• Update your profile information at any time
• Edit or delete chat messages and journal entries
• Modify your companion settings

7.3 Deletion

• Delete individual chat sessions or journal entries
• Request complete account deletion
• Data will be permanently removed within 30 days

7.4 Opt-Out

• Disable analytics tracking in app settings
• Turn off notifications
• Cancel subscription at any time

7.5 Data Protection Rights (GDPR/CCPA)

If you are a resident of the EU or California, you have additional rights:

• Right to be informed about data collection
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right not to be subject to automated decision-making

8. Children's Privacy

OmniAI is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

For users aged 13-17:

• Parental consent may be required in some jurisdictions
• Content is appropriate for teenage mental health support
• Crisis resources are prominently displayed

11. Security Measures

We implement appropriate technical and organizational measures to protect your personal information:

Technical Measures

• AES-256 encryption for sensitive data
• Secure key storage in iOS Keychain
• TLS/SSL for data transmission
• Firebase security rules with user-level access control
• Regular security audits and updates

Organizational Measures

• Limited access to personal information
• Employee training on data protection
• Incident response procedures
• Regular security assessments

19. Important Medical Disclaimer

OmniAI is a self-help wellness tool, NOT medical treatment:

• ❌ We are NOT a replacement for professional therapy, medical advice, diagnosis, or treatment
• ❌ NOT intended to diagnose, treat, cure, or prevent any disease or health condition
• ✅ Always seek advice from a qualified healthcare provider before making medical decisions
• ✅ Never disregard professional medical advice because of something you read in this app
• ⚠️ In crisis situations, please contact emergency services immediately
• ⚠️ We provide crisis resources but cannot provide emergency intervention
• ⚠️ Your data may be disclosed if there is imminent danger to health or safety

20. Consent and Agreement

By using OmniAI, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree to these terms, please do not use our App.