Your data, explained.

Omni is provided by Incredible AS (organization number 921 197 799), Platous gate 9B, 0190 Oslo, Norway. We are the controller for personal information we process to provide Omni and this website. For privacy questions or requests, contact hello@2001.ventures.

Two ways to run Omni

With a Mac, your bots run on your Mac and your iPhone connects to it. Without a Mac, you sign in on your iPhone and Omni runs your bots on a box: a private virtual machine we rent for you from Fly.io in Amsterdam. Both are described below; the differences matter.

Conversations and AI processing

Omni stores chats, bot settings, and files on your devices and synchronizes them with your paired Mac or box. Jobs and their run records are stored there too. Scheduled work adds results to the associated conversation.

On a Mac, your chosen agent, Codex or Claude Code, runs on your Mac and sends requests to OpenAI or Anthropic using your account. Requests can include messages, instructions, relevant files, tool results, and memory. AI processing is not entirely on your device. Your provider’s terms, account settings, and privacy policy apply: OpenAI or Anthropic. Connected tools and services receive the information needed for the actions you use them for.

Your Omni account and box

Signing in with Apple or an email code creates an Omni account. We store the identifier Apple gives us or your email address, a session for your phone, the technical details of your box, and how much AI usage your box has consumed. Omni’s account service runs on Fly.io in Amsterdam.

Your box holds your bots, chats, files, scheduled jobs, and the agent’s own memory and history, on a disk that only that box can read. Bots on a box can run commands, read and write files, and reach the internet, within the permissions you give them. A box that has done nothing for two weeks, or for a day during the free week, is switched off and switched on again when you open Omni; its disk is kept.

If you sign in with an email address, we send the code through Resend. If you turn on browsing from home, your box’s browser reaches websites through your Mac, so those sites see your home internet address; Omni’s account service passes that traffic between the box and the Mac without keeping it, and stores the Mac’s name and a token for the connection. If you copy your Mac’s Chrome sign-ins to the box, those cookies are stored in the box’s browser.

A box runs on the ChatGPT or Claude account you sign it into from your phone. Your messages, instructions, files the bot reads, and tool results are sent to that provider to be answered, under its own terms, and the apps you have connected to that account are available to your bots. A few accounts that Omni grants its own AI, such as App Review’s and those of the people running Omni, run Claude with Omni’s own Anthropic account through a gateway we operate; their requests pass through that gateway in readable form and are sent to Anthropic under its commercial terms, which do not permit training on your content. For those accounts we count what each request cost so we can apply the weekly limit; we do not keep the content.

Deleting your account in Settings destroys your box and its disk, removes your account, session and any browsing-from-home connection, and keeps only a one-way hash of your email address and Apple identifier so that a new account for you does not get a second free week; usage counts are kept without your identity for our own accounting. What was already sent to an AI provider or a connected service remains subject to that provider’s policy.

Payments

Subscriptions are paid through the App Store; Apple handles the payment and never gives us your card details. We receive Apple’s signed record of your subscription and keep its transaction identifier, the plan, when it renews or ends, and any refund, so we know which plan is in force. We keep these records after you delete your account, without your email or Apple identifier, so a purchase restored on a new account can be linked to it. If you paid earlier through Stripe, Stripe processed the payment; we store your Stripe customer identifier, and Stripe received your email address. Deleting your account cancels a Stripe subscription.

Connecting your devices

Remote messages travel through Omni’s relay, encrypted between your iPhone and your Mac or box. The Mac or box decrypts them so your agent can do the work. A box and your phone agree on that key between themselves; Omni’s account service only passes their public keys along and cannot read the messages. The relay cannot read these message payloads, but it handles routing identifiers, traffic timing, sizes, and network information such as IP addresses. It stores a Mac identifier and an authentication hash, and holds requests temporarily while routing them. It does not keep a persistent conversation transcript.

Pairing credentials are held on your devices. You can remove a paired phone in the Mac’s connection settings to stop future access. This does not erase copies already on that phone. Our security page explains the protection and its limits.

Notifications

If you enable iPhone notifications, the Mac stores the phone’s Apple push token. Omni’s relay and Apple’s push service use that token to deliver notifications. The Mac encrypts the title, preview, and conversation reference for the paired phone; the iPhone notification extension decrypts them. Apple and the relay still handle delivery metadata.

Decrypted previews can appear on your lock screen, depending on your iOS notification settings. You can disable notifications or hide previews in iOS Settings. Removing the phone’s pairing on the Mac also removes its registered push token there.

Local storage, instructions, and memory

Omni uses the native agent’s supported settings and history. Instructions, skills, memory, and connected services can influence what an agent knows and does. Some native agent settings and memory can be shared with other chats or apps using that agent on your Mac.

Device pairing secrets are protected with Apple Keychain. Chat files, attachments, and native agent history are not all separately encrypted by Omni. They depend on your device’s operating system protection and may be included in your backups. Keep your devices and backups secure.

Website and downloads

Vercel hosts this website and Mac downloads. Hosting providers process technical request data, including IP addresses, browser information, and access times, to deliver and secure the service.

We use PostHog, hosted in the EU, to measure page visits and download clicks without analytics cookies or browser storage identifiers. Only known page paths and fixed button categories are sent; URL queries, fragments, and referrers are excluded. PostHog derives a short-lived visitor identifier from technical request information. We respect Do Not Track and Global Privacy Control. If you disable analytics here, this site stores that preference in your browser.

Turn off website analytics

App usage analytics

The Mac and iPhone apps send basic usage events to PostHog in the EU when Share usage analytics is enabled. It is enabled by default. Events describe setup, feature use, and reliability using the platform, app version, a random installation identifier, and fixed categories such as a reply duration range. The identifier lets us recognize events from the same installation; it is not your account identity.

These analytics events do not include chat content, bot names, instructions, memories, files, account details, pairing credentials, or raw error messages. We do not record screens, create person profiles, or join identities between your phone, Mac, and website visits.

You can turn sharing off in Mac settings or in Settings → Your data on iPhone. This stops collection and discards queued events without affecting your bots. We use these measurements to improve reliability and usability.

Public feedback board

Requests, descriptions, comment names, comments, and team updates on the feedback board are public. Requests appear as soon as you submit them. Optional email addresses are private and used for follow-up. Please leave out private chats, credentials, and pairing codes.

Vercel runs the feedback service and Supabase stores its records. A necessary browser cookie, set when you open the board, remembers which requests you support for up to one year. Your browser also remembers the name and email you last used to comment, and your appearance preference. These are separate from website analytics. We use a salted hash of network information to limit spam and to count one vote per request from each network. We remove rate-limit records older than two days when processing new activity; a vote keeps its hash for as long as the vote stands. We keep feedback while it is useful for product development. Contact us to request removal of your information.

Support and beta feedback

If you contact support, we receive what you send, including your email address and message. We use it to answer you and investigate the problem. Please leave out private chats, credentials, and pairing codes. Apple may process TestFlight feedback and diagnostics under Apple’s privacy policy and your settings.

Retention and deletion

Local data remains until you delete it or remove the app’s stored data. Data on a box remains until you delete your account, or until 30 days after your plan, or its free week, ends without a new plan, when the box and its disk are removed. Archiving a chat hides it; it does not delete it. Disconnecting devices does not erase their chat copies. Native agent history, backups, and information already sent to AI providers or connected services can remain separately. Deleting or clearing chats in Omni does not delete all of those copies.

We retain support correspondence as needed to handle your request and maintain necessary business records. Relay registration records remain until removed through service administration; they contain routing and authentication information, not chat transcripts. Contact us for requests about information held by us or our processors. For AI provider records and account controls, contact that provider.

Your rights and international processing

We process information to provide the service you request, maintain its security, respond to support requests, improve reliability, and meet legal obligations. Depending on the purpose, the legal basis is performing our agreement with you, our legitimate interests in operating and improving the service, a legal obligation, or consent where required. You may withdraw consent where processing relies on it.

Infrastructure, AI, and support providers may process information outside your country, including outside the EEA. The applicable contractual safeguards and provider policies govern those transfers. Contact us for information about safeguards relevant to your data.

You can request access, correction, deletion, portability, restriction, or object to processing where applicable. We may need to verify your identity. You may also complain to your local data protection authority, including Datatilsynet in Norway. Contact hello@2001.ventures to exercise your rights.