Privacy policy

Who is responsible

The data controller is Daniel Magay, a private individual who runs Omnilog during its invite-only beta. Contact for privacy questions: hello@omnilog-ai.com.

What we store

We only store what you and your team put into Omnilog, and what the app needs to work. We don't buy data about you or gather it from anywhere else.

Phone numbers, tax numbers and addresses, and the contact details of clients and firms, are stored encrypted. The key is kept apart from the database, so a copy of the database alone doesn't reveal them.

• Your account: your email address and password (kept only as a secure hash by our sign-in provider). If you sign in with Google, also your name, email address and profile photo from Google.
• Your profile, if you fill it in: name, phone number, job title, company, address, tax number, chamber and contractor registration numbers, a short bio and your language.
• What you add to your projects, so the app can show it, share it with the people you invite and send it on: daily logs and everything in them, photos and documents, the calendar, timeline, budget and invoices, weekly reports, and contact details of the client and of the firms working on the project.
• Each log's record: who signed it, when it was changed and what it said before, and the acknowledgements, comments and corrections added to it. As with a paper site diary, this stays even if the log is deleted.
• Photo date and place: when you add a photo to a log, we record when and where it was taken, from the photo itself or, with your permission, from your phone's location at that moment.
• Weather: looked up from the project's address or, with your permission, from your phone's approximate location.
• Voice and Omni: when you talk to Omni or dictate, your voice and what you say are sent to our AI provider (Google) to be turned into text and log fields. We do not store recordings; only the resulting text is saved in the log. During the free beta, Omni runs on Google's free Gemini API: under its terms Google may use what is sent to improve its products, and trained reviewers may read it, so don't share anything you wouldn't want stored. Before paid plans start we move to Google's paid service, which does not use your data to improve its products.
• What Omni remembers: reminders and to-dos it notes from your conversations (shown on your dashboard, where you can tick them off), and your trade and how you work, if you tell it in Settings.
• Usage: how many AI credits you use each month, so the monthly allowance works, and a note when a request to Omni is refused as off-topic or misuse, to prevent abuse.
• Payments, once paid plans start: your plan and what you bought, and when. Card details go straight to our payment provider; we never see them.
• Technical data: IP address and sign-in events, kept by our hosting and sign-in providers for security.

Why we use it (legal basis)

• To provide the service you signed up for: accounts, projects, logs, sharing with your team, PDF and email reports (performance of a contract, GDPR Art. 6(1)(b)).
• To keep the service secure and prevent abuse, for example rate limits on AI and email features (legitimate interest, Art. 6(1)(f)).
• Location for weather and photo places only with your permission in the browser (consent, Art. 6(1)(a)). You can withdraw it at any time in your browser settings.

We do not sell your data, show ads, or use analytics or advertising trackers.

Who processes data for us

• Supabase (database, authentication, file storage), servers in the EU (Ireland).
• Google: the Gemini API for Omni's calls, dictation and the other AI features (during the free beta, Google may use this content to improve its products; see "Voice and Omni"), and Google Sign-In.
• Resend: delivers the daily-log emails you send (recipient address and the PDF report).
• OpenWeather: receives approximate coordinates to return the weather and a place name.
• Open-Meteo: receives the town of the project's address to return the day's temperatures (no personal data).
• Stripe, once paid plans start: handles payments and card details, and receives your email address and what you buy.
• Vercel: hosts the website and its server, which runs in the EU (Dublin, Ireland).

Some of these providers may process data outside the EU. Where they do, transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

Google sign-in data

If you choose "Continue with Google", Google shares your name, email address and profile photo with Omnilog. We ask for nothing else from your Google account: no access to Gmail, Drive, contacts or calendar.

• We use them only to create your account, sign you in, and show your name and photo to the people you work with in Omnilog.
• We do not sell them, use them for advertising, or share them with anyone except the providers above that run the service (Supabase stores them).
• They travel only over encrypted connections (HTTPS) and are stored in our database in the EU, where database rules let only you and the people on your projects see your name and photo.
• We never use Google user data to develop, improve or train AI or machine-learning models, and during the free beta we do not send it to our AI provider at all.
• They are kept until you delete your account (Settings → Delete account, or write to hello@omnilog-ai.com), which deletes them. You can also remove Omnilog's access in your Google Account at myaccount.google.com/permissions.

Omnilog's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data stored on your device

• Sign-in cookies, so you stay signed in (strictly necessary).
• A language cookie, if you pick a language on our public pages, and one that remembers whether the app's side menu is open.
• A note in your browser that you have seen the cookie notice, so it is not shown again.
• Drafts of the log you are writing, and logs saved without a connection (including photos), until they are sent.
• Copies of app pages, so the app opens without a connection. They are removed when you sign out.

These are needed for the app to work, so we do not ask for separate consent.

How long we keep it

Account and profile data: until you delete your account. Project data: as long as the project exists; the project owner can delete it. Security logs: up to 90 days. Data on your device: until it is sent or you sign out.

Your rights

You can ask for access to, correction, deletion or restriction of your data, receive it in a portable format, and object to processing based on legitimate interest. Write to hello@omnilog-ai.com. We answer within one month.

You can also complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, www.naih.hu.

Children

Omnilog is a professional tool and is not intended for people under 16.

Changes

If we change this policy we will update the date below and, for important changes, tell you in the app or by email.