OmniLog Privacy Policy

In short: there is no OmniLog account. Your library, sessions, notes and ratings live on your devices and in your own iCloud, which we cannot read. We have no analytics, no ads and no tracking. When you search for a title, the title is sent to look up its cover and details, and that is the one thing that regularly leaves your device. This page lists every case, so you don't have to take our word for the summary.

1. What OmniLog stores

All of this is created by you and stays on your devices and in your iCloud:

• Your library: the games, books, shows and movies you add, with their status, ratings, favorites, tags, lists, notes, ownership and due or leaving dates.
• Sessions: start and end times, progress, and the notes you add when you end a session (including voice notes you dictate).
• Episode progress for the series you track.
• Settings: your first name (if you choose to enter one, used only for the greeting), your time budget, your region, and your reminder, appearance and release-radar preferences.
• Local estimates: things OmniLog works out from your sessions, such as your reading pace and finish forecasts.
• Saved recaps and release-radar results, kept on the device that made them.
• Queue cards from friends you add to Watch together, kept on your device.

OmniLog does not ask for or store your email address, phone number, location, contacts, or any advertising identifier.

2. iCloud, backups and your Apple Watch

• Sync. If you are signed in to iCloud, OmniLog syncs your library between your iPhone, iPad and Apple Watch through your private iCloud (CloudKit) database. That database belongs to your Apple Account. We cannot read it, query it, or see it. Without an iCloud account, your library stays on the device.
• Backups. OmniLog saves dated backup files into the OmniLog folder of your own iCloud Drive (and keeps the last ten). They are ordinary files you can see in the Files app, and they are yours.
• Apple Watch. The Watch app uses the same private iCloud database. It does not talk to our service.

Apple's handling of iCloud is covered by Apple's privacy policy.

3. What leaves your device, and where it goes

This is the complete list.

3.1 Searching for titles (OmniLog's metadata service)

When you search to add something, or open a title that needs details, OmniLog sends the title you typed (or the id of the item) and your region code (for example "US") to OmniLog's metadata service, which runs on Cloudflare Workers. The service adds our access credentials and asks the catalogs below, then returns covers, lengths, genres, where to watch, prices and time-to-beat.

• Not stored. The service does not keep request logs or traces, and does not link a search to you. There is no account to link it to.
• Edge cache. To keep repeat searches fast and inside the catalogs' limits, Cloudflare may keep the result of a search, labelled by the search itself, for up to 24 hours. The cache is shared, and it holds no information about who searched.
• Your IP address. Like any internet service, the service and the catalogs necessarily see the network address a request arrives from. Our service does not record it. The catalogs see Cloudflare's address, not yours.

3.2 Books (Open Library)

For books, OmniLog asks Open Library (a project of the Internet Archive) directly from your device, so Open Library sees the title you searched and your IP address, under its own privacy policy.

3.3 Cover images

Covers and posters are downloaded directly from the catalogs' image servers (IGDB, TMDB, Movie of the Night's content network, and Open Library or the Internet Archive). Those servers see your IP address and the image you asked for.

3.4 Links you paste or share

When you paste a link, or share one to OmniLog from Safari or another app, OmniLog fetches that page from your device to read its title and image. The website you shared sees an ordinary page request from your IP address.

3.5 Release radar and Plus features (optional)

If you use OmniLog Plus, the release radar periodically checks titles on your wishlist or queue. For each, it sends the title's catalog id and your region (not its name, and not the rest of your library) to the same metadata service to learn whether it has been released, arrived on a service you pay for, or dropped in price. You can turn the radar off in Settings.

3.6 Apple Intelligence (optional)

Some features use Apple's on-device model or Apple's Private Cloud Compute, run by Apple: reading titles from a shelf photo, writing a "Previously on…" recap from your own session notes, explaining "Start next" suggestions, and understanding sentences you type or dictate. We never receive this data. For requests handled in Private Cloud Compute, Apple states that the data is used only to answer the request and is not stored or made accessible to Apple. See Apple's description. If you do not want this, don't use those features, or turn off Apple Intelligence in iOS Settings.

3.7 Voice notes

Dictating a note when you end a session uses Apple's speech recognition. On iPhones that support it, recognition runs entirely on the device. On other devices, Apple's speech service may process the audio. OmniLog does not receive or keep the audio, only the text you choose to save.

3.8 Purchases

If you buy OmniLog Plus, Apple handles the payment. We receive a signed confirmation from Apple that your subscription is active, and nothing about your payment method. We have no list of subscribers.

3.9 Things you share on purpose

The year-in-review card, Watch together queue cards and exports are files that you send to whoever you choose through the iOS share sheet. We do not receive them.

3.10 NFC tags and links

An NFC tag you write holds a link to a page on OmniLog's service containing a random item id. Tapping it opens OmniLog. If OmniLog isn't installed, a small page opens that says to install it. That page shows nothing about the item, and the id means nothing outside your library.

3.11 Notifications

Reminders are scheduled on your device. They don't pass through our servers. iOS may use Apple's push service to tell your devices that iCloud data changed; that content is not visible to us.

4. What we do not do

• No accounts, sign-in or email collection.
• No analytics or crash-reporting software of our own, and no advertising or tracking SDKs. On iPhone, iPad and Apple Watch OmniLog uses Apple's frameworks only. On Android it uses Google's libraries for payments, on-device text recognition, on-device AI and the watch link (see section 13).
• No advertising, no advertising identifier, no data brokers.
• No tracking across other companies' apps or websites. OmniLog does not show Apple's tracking prompt because there is nothing to ask permission for.
• We never sell or rent data.

If you turn on Share With App Developers in iOS Settings, Apple may send us anonymous crash and usage statistics. That is Apple's program, and it is off unless you enable it.

5. Permissions OmniLog asks for

6. How long things are kept

• Your library: until you delete it. Deleting an item or "Delete everything" removes it from all your devices through iCloud sync. OmniLog saves one backup first so you can undo a mistake. Delete that backup file in iCloud Drive if you want it gone too.
• Search results in the shared cache: up to 24 hours.
• Everything else we handle: nothing is kept, because we don't keep it.

7. Your choices and rights

• Access and portability: Settings › Your data › Export library saves everything as a JSON file you can read and take anywhere.
• Correction: edit anything in the app.
• Deletion: Settings › Your data › Delete everything, or delete the app. To also remove OmniLog's iCloud data, open iOS Settings › your name › iCloud › Manage Account Storage › OmniLog › Delete.
• Turn features off: reminders, release radar and Apple Intelligence can each be switched off.
• Privacy laws. Under the GDPR, the UK GDPR, the CCPA/CPRA and similar laws you may have rights to know, access, correct, delete, port and object. Because we hold no personal data about you on our servers, we can't look up an account or a profile, and these rights are already in your hands in the app. If you think we hold something about you anyway, write to us and we will answer within 30 days. We do not sell or share personal information, and we do not discriminate against anyone for using their rights.
• Legal basis (EEA/UK). The data processed to provide the app (searches) is processed to perform our agreement with you and for our legitimate interest in running the service, with the minimal footprint described above. You can lodge a complaint with your local data-protection authority.

8. Children

OmniLog is not directed to children under 13 (or 16 where that is the age of digital consent), and we do not knowingly collect their information, which is easy because we collect none. The catalogs OmniLog searches include titles rated for adults, because the world's games, books and films do.

9. Security

Your library is protected by your device's passcode and by Apple's encryption of iCloud. Connections to our service and to the catalogs use HTTPS. Our service holds the credentials that the catalogs require, so those are never inside the app. We recommend a device passcode and keeping iOS up to date.

10. International processing

Cloudflare operates globally, so a search may be handled in a data center outside your country. Apple operates iCloud and Private Cloud Compute under its own terms.

11. Changes

If this policy changes, we will update the date above, and for material changes tell you in the app.

12. Contact

• Email: contact@jcmobileappstudio.com
• Support page: jcmobileappstudio.com/apps/omnilog/support/

13. OmniLog for Android

Everything above about what we store, search, never collect and your rights applies on Android too. These are the places where Android differs.

• Where your library lives. On your phone, in OmniLog's private storage. There is no iCloud. If you have Android's backup on, Android's backup to your Google Account may include your library, under Google's terms; we cannot read it. OmniLog's own dated backups go to a folder you choose (for example on Google Drive or a memory card) or stay in OmniLog's private storage, and you can export everything as a JSON file at any time.
• Wear OS. The watch app talks only to your own phone, through Google's Wearable Data Layer. It does not talk to our service.
• On-device features. Reading titles from a shelf photo uses Google ML Kit text recognition, which runs entirely on your phone; the photo is never uploaded. Recaps and "Start next" explanations use Gemini Nano through Android's AICore, on your phone. The first use may download that model from Google. We never receive your notes, photos or the results.
• Diagnostics sent by Google's ML Kit. The ML Kit components named above send technical diagnostics to Google: device model, OS version, the app's package name and version, performance numbers, error codes and a per-installation identifier that is not meant to identify you. Google says it uses them for diagnostics and usage analytics, encrypts them in transit and does not pass them to third parties (see Google's ML Kit data disclosure). OmniLog itself contains no analytics, advertising or crash-reporting software, and shows no ads.
• Voice notes. Dictation uses your phone's speech recognizer (Google's, or the one you set), which may process audio in the cloud unless your device recognizes speech offline. OmniLog never receives the audio, only the text you choose to save.
• Purchases. Google Play handles the payment and the subscription. We never see your payment details and keep no list of subscribers; the app asks Google Play whether your subscription is active.
• Permissions on Android. Notifications (reminders and the running-session timer), NFC (writing and reading tags) and the internet. Photos and the camera are used only through Android's own photo picker and camera app when you choose to scan a shelf; OmniLog does not hold a camera, photo, microphone, location or contacts permission.
• Deleting your data. Settings › Your data › Delete everything removes it from the phone (after saving one backup you can restore), or uninstall the app. To also remove Android's cloud backup, use Settings › Google › Backup on your phone.
• Android's data-safety summary. The only data OmniLog's own service receives is the title you search and your region (app functionality, not linked to you, not shared). The ML Kit diagnostics above are collected by Google through the app.

OmniLog is operated by JC Mobile App Studio LLC. Written for people first.