Privacy Policy

1. Information we collect

A. Information you provide

When you create an account or use the Services, you and the people in your household may add:

• Name, email address, and phone number
• Household details, such as your household name, homes, and addresses
• People in the household, including children's names, schools, and notes such as allergies
• Schedules, tasks, notes, and shopping lists
• Contacts, vendors, and service and maintenance records
• Vehicles and transport arrangements
• Travel details you choose to add, such as passport and loyalty program numbers
• Messages you send to our support team

B. Information collected automatically

• Sign-in activity, such as successful and failed sign-ins, recorded in your household's audit log
• Changes made in the Services, such as edits to plans, schedules, shopping, service records, contacts, and users
• Technical information such as IP address, browser, and device type, used to operate and secure the Services
• Error and diagnostic logs

Our public website, omnisant.com, uses Google Analytics to understand how visitors use the site. The OMNISANT app itself does not use advertising or analytics trackers.

C. Calendars you connect

If you connect a Google or Microsoft 365 / Outlook calendar, we access that calendar to keep your events in sync. This connection uses read and write access, so events can sync in both directions. The access tokens for your connection are encrypted before we store them.

You can disconnect a calendar at any time in the Services. Disconnecting removes the stored tokens; you can also revoke OMNISANT's access from your Google or Microsoft account settings.

2. How we use information

We use information to:

• Provide, maintain, and support the Services
• Sync schedules with the calendars you connect
• Send service emails, such as account activation and password reset links
• Keep accounts secure, including detecting unusual sign-in activity
• Understand how the website is used and improve the Services
• Comply with legal obligations

We do not sell personal information, and we do not use your household's information for advertising.

3. Who in your household can see what

OMNISANT is shared by the people in a household. What each person can see depends on how the household is set up:

• Household admins can see and manage everything in the household, including people and settings.
• Other members can use the areas an admin has turned on for them, such as Today, Schedule, Shopping, Transport, Service, or Directory.
• Tasks and events can be shared with specific people; otherwise they are visible to the whole household.
• The household Profile, including travel documents, accounts, and preferred vendors, is visible to every household member.
• Notes are private to the person who writes them unless they share them through a category.
• Events imported from a personal calendar are visible to that person and to household admins.

Household admins are responsible for inviting people, setting their access, and deactivating access when someone leaves.

4. Service providers

We use a small number of providers to run the Services:

• Microsoft Azure, which hosts the Services and stores your data
• Postmark, which delivers our service emails
• Google Analytics, for our public website only
• Google and Microsoft, for calendars you choose to connect

These providers process information on our behalf and only as needed to provide their service.

5. Where data is stored

Your household's data is stored on Microsoft Azure in the Canada Central region. Our service providers may process some information in other countries, including the United States.

6. How we protect information

We protect information with measures including:

• Encryption in transit (HTTPS only)
• Passwords stored hashed, never in plain text
• Account lockout after repeated failed sign-in attempts, and limits on sign-in attempts
• Access controls that household admins manage, and an audit log they can review
• Encryption of calendar connection tokens

No system is completely secure, and we cannot guarantee absolute security.

7. How long we keep information

We keep your household's information for as long as your account is active, and as needed to comply with legal obligations, resolve disputes, and enforce our agreements.

Our database backups are kept for up to 7 days.

If you ask us to delete your household's data, we will delete it within 30 days, apart from information we must keep by law. Deleted data may remain in backups until those backups expire.

8. Your choices and rights

You can review and update most of your information directly in the Services. Household admins can deactivate anyone's access at any time.

Self-serve data export and account deletion are not available in the Services yet. To access, export, correct, or delete your information, email [email protected] and we will respond within 30 days. We may need to verify your identity first.

Depending on where you live, you may have additional rights under local law, such as the right to know what we hold about you or to limit how it is used. California residents have rights under the California Consumer Privacy Act, and we do not sell or share personal information for cross-context behavioral advertising.

9. Children

The Services are for adults. We do not knowingly allow children to hold accounts.

Information about children that adult household members add, such as schedules, schools, and allergies, is treated as household information and protected in the same way.

10. Changes to this policy

We may update this Privacy Policy. When we do, we will post the new version here with a new effective date, and we will tell account holders about significant changes by email.

11. Contact

For questions about this document or to make a request:

OMNISANT
[email protected]