Privacy Notice

OMNIS (the "Controller") is responsible for the processing of your personal data under this Privacy Notice and Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

For any matter related to your data, contact us at elartedesanars3@gmail.com.

Identification and contact data: name and email address when you register (including sign-in with Google).

Content you generate: notes, journals, dream records, voice recordings, session results, and other information you voluntarily enter into the Platform.

Usage data: progress, XP, frequency of use, preferences, and technical device and session data.

Notifications: if you turn on reminders, we store your device or browser notification identifier (for example, the Firebase Cloud Messaging token) and the time you choose, only to send them to you. It is deleted when you turn them off or sign out on that device.

Payment data: when you purchase a plan, processing is handled by Stripe. OMNIS does not store your full card details.

Some of the content you enter (for example, journals, dreams, or personal reflections) may reveal sensitive information. By voluntarily entering it, you consent to its processing solely to provide you the service. You may delete this content at any time.

Primary purposes (necessary for the service): creating and managing your account; providing the Platform's features; generating your AI reports and analyses; processing payments; providing support; and ensuring security.

Secondary purposes (optional): improving the Platform and sending you communications about news and updates. You may opt out of these secondary purposes by writing to us, without this affecting the service.

To operate, we share data with providers acting as processors under our instructions: Google Firebase / Google Cloud (authentication, database, and storage), Google (Gemini AI models for text analysis), ElevenLabs (voice synthesis), Stripe (payment processing), Vercel (web hosting), PostHog (usage analytics), and Sentry (error reporting).

Some features query public services without sending any account data: in Open Sky, the place you type (or an approximate, rounded location derived from your time zone) is sent to Open-Meteo for the cloud forecast and to N2YO to calculate which satellites pass overhead; the Quantum Field requests random numbers from the Australian National University (ANU). None of them receives your name, email, or any identifier.

PostHog and Sentry only receive an internal identifier for your account and usage or technical data (which screen you opened, which practice you completed, which error occurred). Never the content you write or record, nor your name or email, and they are configured not to retain your IP address.

These providers may process data outside Mexico (for example, in the United States). We only share the information necessary for each purpose and we do not sell your personal data.

Because we use cloud services, your data may be stored and processed on servers located outside your country. We take reasonable measures to ensure such transfers comply with applicable law.

We use local storage and technical cookies necessary for the Platform to function (for example, keeping your session and preferences). We also store an anonymous measurement identifier on your device to understand, in aggregate, how the Platform is used. We do not use these technologies for third-party advertising.

We retain your data for as long as your account is active and for as long as needed to fulfill the purposes described and any applicable legal obligations. When you delete your account, we delete or anonymize your information within a reasonable time, except for what we must retain by law.

We apply technical and organizational measures to protect your data, including encryption in transit and per-user isolation at the database level: no other user can access your personal information. No system is 100% infallible, but we work to maintain an adequate level of protection.

You have the right to ARCO rights (Access, Rectification, Cancellation, and Objection): to Access your data, Rectify it when inaccurate, request its Cancellation when you believe it is no longer required, and Object to its processing for specific purposes.

You may also revoke your consent or limit the use or disclosure of your data. To exercise any of these rights, write to us at elartedesanars3@gmail.com stating your request; we may ask you to verify your identity before addressing it.

The Platform is not directed at minors under 16, and we do not knowingly collect their data. If you believe a minor has provided us with information, contact us so we can delete it.

We may update this Notice. We will post the current version on this page along with its update date and, when applicable, notify you.

For questions about privacy or to exercise your ARCO rights: elartedesanars3@gmail.com.