1. Introduction and controller
This policy explains how personal information is handled by Umair Bin Hassan, the operator and controller of OmniRecall. The operator is an individual rather than a registered company, and no business address is published; privacy enquiries are handled in writing at support@omnirecall.app.
Two separate services are covered: the corporate website at omnirecall.tech, which introduces the product, and the application at omnirecall.app, where your account lives. Each is described below, and this policy states plainly what is and is not claimed as implemented.
2. Information we collect
Information may be provided by you, generated when you use the service, or shared through an integration you authorise. Collection is limited to what the implemented features actually require; this policy does not assert collection simply because it is technically possible.
3. Account information
Registration and account access involve the name, email and authentication information requested in the application. The sign-in page offers email-based access. Never send your password to support.
4. User-provided content
Information you choose to save or manage may contain personal data about you or other people. Only provide content you are authorised to process. Content is used to provide the organisation and retrieval functions you request; no licence to use it for other purposes is claimed, and no promise about model training is made here because that processing is not implemented or asserted on this website.
5. Visitor analytics on this website
Lovable collects visitor analytics for us on this website. It uses no cookies, stores nothing on your device, does not keep IP addresses and cannot identify individual visitors or recognise a returning visitor. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. This data is collected by Lovable for us; https://lovable.dev/privacy explains how Lovable handles it. The editor preview is not counted, and the application at omnirecall.app is a separate service.
6. Cookies and similar technologies
This corporate website does not set analytics, advertising or other non-essential cookies, and the visitor analytics described above works without cookies or local storage on your device. Essential technologies may be used by the application to support authentication and operation. The Cookie Policy explains the distinction between the two sites.
7. Payment information
For transactions processed by Paddle, payment and transaction information is handled under Paddle’s terms and privacy policy, and OmniRecall receives only the account and subscription information needed to provide your access. OmniRecall does not store full card numbers. See https://www.paddle.com/legal/privacy for Paddle’s disclosures.
8. Third-party integrations
A connection processes only the information disclosed when you authorise it. Consult the connected provider’s terms and privacy policy, and use the available revocation controls. No integration is promised by this policy.
9. Google account connections
A Google connection is not offered or verified on this website. If one is introduced, the application will explain the permissions requested, the data obtained, how it is used and shared, and how to revoke access, and the applicable Google user-data and limited-use requirements will be reviewed before activation.
10. Apple and iCloud connections
Apple or iCloud connections are not offered or verified on this website. If introduced, disclosures will identify the connection method, the information requested, its purpose and the available disconnection controls. This policy does not assert access to iCloud content.
11. Purposes of processing
Personal data is processed to provide the account and information-management functions you request, to handle enquiries, to manage authorised subscriptions, to prevent misuse and to meet legal obligations. Information is not repurposed incompatibly without an appropriate basis and notice.
12. Legal bases where applicable
Under applicable data-protection law, relevant bases may include performing a contract, consent, legal obligations, and legitimate interests that do not override your rights. Consent can be withdrawn at any time without affecting processing that was lawful before withdrawal. Consent is not assumed to be the basis for every operation.
13. Data sharing and recipients
Information is shared only as needed with the providers that operate the service, authorised integrations you connect, payment providers such as Paddle, and recipients legally entitled to it. Personal data is not sold. Where providers act on the operator’s behalf, they process information only for the service being provided.
14. Data retention
Account and saved information is kept while your account is open, and for as long as needed to provide the service, resolve disputes and meet legal obligations such as billing and tax records kept through the payment provider. Deletion requests and account closure are handled as described in the account-controls section below.
15. Data security
Organisational and technical measures are maintained according to the nature of the information and the risks involved. No encryption standard, audit, penetration test, SOC 2, ISO 27001 or GDPR certification is claimed.
16. International data transfers
Hosting locations and processing regions are chosen by the providers that operate the service. Where a transfer requires safeguards, lawful mechanisms such as an adequacy decision or approved contractual protections are used. No specific storage region is claimed as implemented beyond what the application discloses.
17. Your rights
Depending on your location and applicable law, you may have rights to access, correct or delete information; restrict or object to processing; receive portable data; withdraw consent; and complain to a competent supervisory authority. Some rights are subject to exceptions and identity verification. You do not lose mandatory rights because a disclosure on this page is limited.
18. Access and correction
Use the account controls provided in the application to review or update your information. For additional requests, write to support@omnirecall.app, specifying the relevant account and the action you want, without including secrets or excessive identity documentation. Applicable statutory response periods are respected.
19. Data deletion requests
Account deletion, subscription cancellation and refund requests are distinct actions. Use the account-deletion tools available in the application, or write to support@omnirecall.app. Some records may be retained where law requires, such as billing records held by the payment provider. Cancelling billing does not automatically delete your saved information.
20. Children’s privacy
The service is not directed at children, and accounts require the legal capacity and minimum age applicable where you live. If you believe a child’s information has been provided unlawfully, raise a privacy request at support@omnirecall.app.
21. Third-party services and external links
External services govern their own processing. Links to omnirecall.app, Paddle and other providers take you to their respective sites. This corporate website loads its typeface from Google Fonts, which causes your browser to request font files from Google; those requests may include network and device information under Google’s policies. This is not a claim that Google account integration is available.
22. Changes to this policy
Updates are reflected in the last-updated date on this page and communicated where required. Significant changes describe their effect on your information and provide any consent choices the law requires.
23. Contact information
OmniRecall is operated by Umair Bin Hassan. Written enquiries reach the operator at support@omnirecall.app. No business address is published; the operator can be reached in writing at that address.
For Paddle-billed payment enquiries, refunds and subscription management, use https://paddle.net or the support and management links in your receipt. Do not send passwords, complete payment-card details or access tokens in a support enquiry.