Privacy Policy

Effective Date: March 21, 2026 · Last Updated: March 21, 2026

OmniVault is built by Omni Genomix LLC DBA OmniVault ("we," "us," "our"). We take your privacy seriously. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

1.1 Information You Provide

  • Account Information: When you create an account, we collect your name, email address, and authentication credentials.
  • Financial Data: Transaction records, budgets, goals, and financial preferences you enter into the app. This data is stored locally on your device by default.
  • Documents: If you use the document scanner feature, scanned images are processed on-device and stored locally unless you enable cloud sync.
  • Support Communications: Messages you send to our support team.

1.2 Information Collected Automatically

  • Device Information: Device type, operating system version, unique device identifiers, and app version.
  • Usage Data: Features used, screens viewed, and interaction patterns (anonymized).
  • Crash Reports: Technical error logs to help us fix bugs and improve stability.

1.3 Information We Do NOT Collect

  • We do not access your bank account credentials or connect to your bank.
  • We do not sell, rent, or trade your personal information to third parties.
  • We do not collect location data unless you explicitly enable location-based features.

2. How We Use Your Information

  • To provide, maintain, and improve the OmniVault app and services.
  • To personalize your experience, including AI-powered financial insights via Atlas AI.
  • To process your transactions and display financial summaries.
  • To send you important service notifications (security alerts, account updates).
  • To respond to your support requests.
  • To detect and prevent fraud or unauthorized access.
  • To comply with legal obligations.

3. Data Storage and Security

Your financial data is stored locally on your device by default using encrypted storage. If you enable cloud sync, your data is encrypted in transit (TLS 1.3) and at rest (AES-256) on our servers hosted in the United States.

We implement industry-standard security measures including:

  • End-to-end encryption for sensitive financial data
  • Biometric authentication (Face ID, fingerprint)
  • Decoy PIN and ghost mode for additional privacy
  • Automatic session timeout
  • Regular security audits

4. Data Sharing

We do not sell your personal information. We may share limited data with:

  • Service Providers: Trusted third-party services that help us operate the app (hosting, analytics, crash reporting), bound by confidentiality agreements.
  • Legal Requirements: When required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.

5. Third-Party Services

OmniVault may integrate with third-party services. Each has its own privacy policy:

  • RevenueCat: Subscription management
  • Expo: App infrastructure
  • Apple/Google: In-app purchases and platform services

6. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your personal data ("right to be forgotten").
  • Portability: Export your data in a machine-readable format.
  • Opt-Out: Opt out of marketing communications at any time.
  • Restrict Processing: Request that we limit how we use your data.

To exercise any of these rights, contact us at [email protected].

7. Children's Privacy

OmniVault is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it promptly.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

9. International Data Transfers

If you access OmniVault from outside the United States, your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy in the app and updating the "Last Updated" date. Continued use of OmniVault after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices: