Your words.
Your choices.

Your local journal

You can record a first name, personal focus, feelings, intentions, and relationship reflections without an account. The app stores these records on your device. We do not receive your local journal entries or send them to an AI provider.

The app uses iOS file protection and excludes its journal storage folder from device backup. This does not protect a file you export. Deleting the app, losing your device, or erasing its data may permanently remove the journal. Use You → Export my journal to keep a readable JSON copy in a location you choose.

Guided reflections use authored prompts and the words you enter. They do not measure another person's feelings or predict relationship outcomes.

Memories you choose to keep

Memory starts off. Plus users can turn it on and explicitly save profile details, preferences, relationship needs, or goals. You can view, correct, delete, and export existing records even after Plus ends.

Saved memories and conversation history use protected local archives excluded from device backup. Guest records and each signed-in account have separate archives. Signing in does not upload or import guest memories or your journal. Conversation history has its own control; turning history off keeps existing history and stops saving future conversations.

If you request memory suggestions during an online conversation, the model may propose a note with a quote from your current message. You must review and confirm it before it becomes a saved memory. A quoted phrase does not prove the interpretation is correct. Assistant replies are not automatically saved as personal facts.

Open You → What Omni remembers to manage records or export memories and conversations. Deleting one memory does not remove the same words from old conversations. Deleting its source conversation also removes memories saved from that conversation. Independent profile notes remain until you remove them.

Optional online conversations

Before sending an online chat, the app asks for permission. Omni's service sends your current message, up to eight recent messages from the current conversation, and up to six relevant saved memories to OpenAI to produce a reply. Your journal is not included. Saved memories are used only when memory is enabled.

In this app's chat mode, Omni's server processes the request without saving a separate copy of the conversation content. History may be saved on your device according to your settings. Choosing account memory sync later can upload that saved history. The service separately keeps account authorization, subscription, and rate-limit records.

Temporary conversations exclude saved memories, do not create memory suggestions or saved history, and clear from the current view when you leave the conversation screen or background the app. Recent messages from that temporary conversation can accompany your next message. Temporary chat still sends its content to the online service and OpenAI.

You can turn off online conversations to stop future sending. This cannot retract a request already processed.

OpenAI's handling of API data

OpenAI states that API data is not used to train its models by default unless a customer explicitly opts in. Omni requests that responses not be stored for later retrieval. That setting does not eliminate all provider retention: OpenAI's abuse-monitoring logs are generally retained for up to 30 days, with exceptions for legal requirements or preventing harm, and temporary processing caches may apply.

See OpenAI's API data controls for its current terms and processing details.

Optional Apple account and sync

Sign in with Apple verifies your identity. Omni uses an opaque account identifier and protected access and refresh sessions. The server stores an encrypted Apple refresh credential so it can revoke access when you delete your account. This implementation does not request your name or email from Apple.

You can purchase, restore, and use on-device Plus without an Omni account. If you choose to sign in for online features, your subscription is linked to that Omni account and checked with Apple. We then receive transaction and subscription status information, not your payment-card number.

Choosing You → Sync account memory and allowing that sync session sends the signed-in account's saved memories, saved conversation history, and memory/history settings to Omni's server. It does not send the journal or guest archives. Sync is manual. If both copies changed, you choose before replacing a copy. Permission to send chats to OpenAI stays separate on each device.

Signing out retains the protected account cache on your device so unsynced edits are not silently lost. The same account opens that cache when it signs in again. A subscription ending does not delete your personal records.

Hosting and technical information

Omni's optional account service is configured for Render's Oregon region in the United States, using a persistent disk for account and synced records. The service can process information it receives; this is not end-to-end encrypted storage.

Visiting these pages or using online services requires the hosting infrastructure to process an IP address and technical request information. Omni's application access logs are disabled. This does not mean Render or its infrastructure processes no logs or network information. Hosting providers may retain technical records for operations and security under their own policies.

Render describes persistent-disk snapshots taken every 24 hours, available for at least seven days. Records removed from the active database may remain in older snapshots. This is not a promise that backups are deleted within seven days, and we do not promise a maximum backup-retention period. See Render's persistent disk documentation and Render's privacy policy.

Purchases, reminders, and other features

Apple handles payments under its own policies. Omni uses Apple-verified transactions and status to provide Plus features. The free reflection allowance records usage dates locally; deleting one reflection does not reset that day's allowance.

Optional daily reminders are scheduled on your device and contain generic text, not journal content. Turn them off in Omni or manage notifications in iOS Settings.

The current preview does not enable an external birth-chart service. If one is added, this policy and the app's permission screen will describe its information, providers, and processing before use. The app does not require your current GPS location for a birth chart; a place lookup may send location text you enter to Apple's geocoding service.

Connect invitations and compatibility reports

Connect is optional and for adults 18 and older. A signed-in user can save a separate Connect profile with a nickname, birth date, optional birth time, birth city/timezone, birth longitude, personality type, and relationship, communication, social and life-priority preferences. Connect does not import your journal, AI memories or contacts. Your full birth date stays private to your account.

You manually share a one-person invitation link. Anyone with an unused link can respond, so send it only to the intended person. Invitations expire after seven days. Recipients see the inviter's nickname and invitation purpose before choosing whether to share. Recipients do not need an account. Their birth details are processed to calculate age, an approximate Sun sign and (when birth time is known) day-master elements, but the raw birth details are not stored in the invitation or report. Birth time and timezone are used for local civil time; when longitude is supplied, local mean solar time is used. Unknown times are excluded, not guessed.

After the recipient explicitly agrees, both sides can see a report based on their nicknames, ages, derived zodiac/element, self-reported personality and preferences. These answers are not public dating profiles. Report creation does not send them to OpenAI and does not save them as AI memories. Scores are creative reflection indices, not predictions of relationship success.

Recipients receive a separate private report link that also allows withdrawal. Keep it private: anyone holding it can view or withdraw that report. Invitation and report access keys are stored as hashes, and the website uses URL fragments to keep them out of ordinary request paths. The invitation page uses first-party JavaScript and session storage to recover an interrupted submission; it has no analytics or advertising scripts.

Completed report access expires after 90 days. Expired invitation data is removed on access and by an hourly service cleanup. Either side can remove the shared answers and report earlier: the inviter uses Connect's Remove or Delete Connect data controls; the recipient uses Withdraw on their private report page. Account deletion also removes the owner's Connect profile and all invitations. Screenshots, exports and older hosting backups may retain copies as described below. Contact support if you lose your private link.

Optional friend discovery (when enabled)

Friend discovery requires a separate, explicitly saved adult profile and welcomes all genders. Gender is optional and does not filter friendship recommendations. Existing dating profiles stay separate until the owner explicitly switches to friendship; their earlier audience preferences are not silently expanded. We store your name, birth details, city, self-described gender, the genders and age range you want to meet, introduction, relationship intentions, optional personality type, communication and lifestyle preferences. We use these to show compatible, reviewed adults within both people's age preferences. Gender preferences apply only to existing dating profiles. Your exact birth date, time, birth location, private journal and AI memory are not shown. Your chosen city/area, name, age, introduction, intentions, optional photo and derived compatibility details may be shown to eligible people. The app does not import your contacts or access your current device location for discovery.

A profile photo is optional. The iOS system picker shares only the image you select. Our server validates and resizes photos and removes embedded metadata such as GPS/EXIF before storing the sanitized image. Public details and photos require operator review before discovery. Photos are served through authenticated requests to their owner and eligible people or existing matches; hiding a profile stops new discovery but does not remove existing matches. Blocking or unmatching stops the other person's access inside Omni. People who previously saw content may retain screenshots or copies.

We store Likes, Passes and mutual Matches. A Pass removes that person from your recommendations; you can withdraw an unmatched Like. Messages are stored only for mutual matches, with paginated history in the app. We also store your last-read message position and pinned-conversation preference. Read receipts are off by default; enabling them for a conversation lets that person see which of their messages you have read. You can turn them off again. Quoted replies refer to earlier messages in that conversation. Blocking or unmatching removes both sides' match and conversation and prevents new contact. Reports are stored in Omni's private review queue. Report reasons and details go to the operator, not the reported person. Profiles and reports are manually reviewed; this is not government-ID identity or age verification.

Delete a photo in your Connect profile, or delete your Connect profile to remove the profile, photo, likes, passes, matches, messages and associated reports from the active database. Account deletion does the same. Your own authored messages and sanitized photo are included in your account export. Backup copies and copies retained by recipients are subject to the limitations described elsewhere in this policy. Connection details and messages are not automatically added to AI memory or sent to OpenAI.

Sharing, advertising, and support

Omni has no advertising SDK or third-party analytics SDK. Public dating profiles and direct messages are available only when discovery is enabled for the app and service; private Connect invitations do not opt you into discovery. Omni does not automatically share your records with a partner or import your social contacts. Support and privacy pages use no scripts. The optional Connect invitation page uses only first-party scripts as described above; none of these pages use analytics, third-party fonts or tracking cookies.

You choose whether and where to save exports, including whether the destination is a cloud service. If you email support, we receive your email address and the information you choose to include, and use it to respond and handle your request. Please do not send journal entries, account credentials, or sensitive attachments unless needed to resolve the issue. Email is processed by the email services involved.

Deleting information and retaining copies

Local records stay on your device until you remove them or erase the app's data. Active cloud records remain until you delete or replace them. Different controls affect different copies:

• You → Erase data on this device removes the local profile, journal, usage ledger, currently open memory archive, and reminder. Cloud copies and other account caches remain.
• Delete cloud copy in account memory sync removes the synced snapshot from active cloud storage, while retaining the account and local records. Local edits and deletions reach the cloud only when you sync those changes.
• Your Omni account → Delete my Omni account requests removal of server account data, memories, history, subscription binding, and sessions, and revokes Apple login access. After server confirmation, the app removes this device's cache for that account. If revocation fails, the app shows an error and does not report completion.

Other offline devices, exports, and older hosting snapshots can retain independent copies. Other devices learn of revoked access when they reconnect, but remote account deletion cannot guarantee erasure of every offline copy. Provider records are also subject to the retention described above. Export anything you want to keep before deleting it.

Account deletion, erasing app data, and uninstalling Omni do not cancel an Apple subscription. Manage or cancel through your Apple subscription settings.

Email seatrial.ai@gmail.com for a data-access or deletion request, including if you cannot use the account controls. We may need enough information to verify the account and understand the request. Do not email passwords, verification codes, or payment-card details. Support correspondence may be retained to handle the request and maintain a record of its resolution.

Questions and changes

Omni is operated by Xiaobo Zhang. Contact seatrial.ai@gmail.com with privacy questions. We will update this page when the service or its data handling changes and ask for separate permission when required. The effective date above identifies this version.