Privacy Policy

The short version

We collect as little as possible. The only personal information we ask for is what you choose to send us, such as your email address when you contact us. We use it only to answer a question or inquiry you send us. We use Google Analytics and PostHog to understand how the site is used so we can improve it. We never sell, rent, or trade your information, and we never use it for advertising.

This policy is about this website. The OOMU application on your Mac works differently, and the difference is the point of the product: your conversations, documents, and files stay on your machine, and we do not receive them. The section on the OOMU application below explains what that means in practice, including exactly what the app does connect to us for.

Who we are

This website is operated by Eldris ("Eldris," "we," "us," or "our"), the maker of OOMU. If you have any question about this policy or your information, contact us at support@oomu.ai.

Information we collect

Information you give us

If you use a contact form, we collect the details you submit (such as your name, email, organization, and message). We only collect this when you choose to send it.

If you report a bug, we collect what you type into that form: a description of the problem, the steps to reproduce it, and details about your Mac and your version of OOMU. An email address is optional there, and a report sent without one is anonymous to us. Bug reports are stored in a private Google Sheet that only we can open. Nothing is read from your Mac automatically; the form contains only what you or the app put into it, and the app fills in nothing beyond version and hardware details.

Information collected automatically

Like most websites, we use Google Analytics and PostHog, which collect standard, largely aggregate technical information, such as the pages you visit, the type of device and browser you use, approximate location (derived from IP address), button interactions (such as downloads), and how you reached the site. We have configured both services solely to help us understand and improve the site. PostHog is served through our own first-party reverse proxy (oomu.ai/ingest/) in privacy-preserving mode without creating identified personal profiles. We do not use either service for advertising, and we do not combine telemetry with your email or try to identify you personally.

The contact page and the bug report page also use Google reCAPTCHA v3 to keep automated spam off those forms. It runs only on those two pages. reCAPTCHA collects hardware and software information, such as device and application data, and how you interacted with the page, and sends it to Google to score whether the visit looks automated. It does not receive the contents of your message. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. If you would rather not use it, email support@oomu.ai instead and no reCAPTCHA check happens.

How we use information

• To respond to questions, partnership, or enterprise inquiries you send us.
• To understand how the site is used and make it better.

That is the complete list. We do not use your information for any other purpose.

What we never do

• We never sell, rent, or trade your personal information to anyone.
• We never use your email for advertising or send you unrelated marketing.
• We never share your information except with the limited service providers below, or where required by law.

Service providers

We rely on a small number of trusted providers to operate the site:

• Google LLC: Google Analytics (site usage), reCAPTCHA v3 (spam protection on the contact and bug report forms), and Google Workspace (storing bug reports in a private spreadsheet). Google processes this data on our behalf; see Google's Privacy Policy and Terms of Service.
• PostHog Inc.: product analytics and session metrics, processed under standard data processing terms; see PostHog's Privacy Policy.
• Mailjet (Sinch): delivery of contact-form messages to our inbox.

These providers may process data in the United States.

Cookies and how to opt out

The only cookies or local storage entries we use are those set by Google Analytics and PostHog, for the purposes described above. You can:

• Block or delete cookies and storage in your browser settings; and/or
• Install the Google Analytics Opt-out Browser Add-on.

The site works normally with analytics disabled.

How long we keep information

Contact-form messages are kept as long as needed to handle your inquiry, or until you ask us to remove them. Bug reports are kept while the bug is open and for a reasonable period after it is fixed, so we can tell whether it comes back; ask us and we will remove yours. Google Analytics and PostHog data is retained according to our analytics settings.

The OOMU application

Everything above concerns this website. The application is a different matter, and we would rather over-explain it than let you assume.

We do not receive your work

OOMU runs on your Mac. Your chats, your documents, your projects, and the memories it forms are stored on that machine in a database encrypted with SQLCipher, keyed from the macOS Keychain. There is no OOMU account, no OOMU server in the path, and no sync. We operate no service that receives your work, which means we cannot read it, cannot produce it if someone demands it, and cannot delete it for you. You hold it, and the controls that erase it are in the app.

Two honest boundaries. The encryption covers the database: files you export, documents OOMU generates, and cached copies can remain unencrypted on disk, protected like any other file on your Mac. And if you choose to use a cloud AI provider with your own key, the relevant content goes from your Mac directly to that provider, under that provider's terms, not through us.

The application sends us no diagnostics

OOMU does not send diagnostics, usage metrics, or prompt history to us or to anyone else. There is no analytics setting in the app because there is nothing to switch off. Some Beta 2 builds offered optional anonymous diagnostics. That was removed, and an identifier left over from one of those builds is no longer used for anything.

The app does fetch three things from us, so that it can stay current: application updates, the list of cloud providers and models it can connect to, and updates to its on-device routing model, which may also come from Hugging Face. The update check carries the app version and your Mac's processor type, and no device or account identifier. The servers that answer these requests see the network address they come from, as any server does. You choose when to install an update, and Air-Gap Mode stops all of these checks.

If your organization manages OOMU with OOMU Control, your Mac also reports to your organization's own Control server: counts of local and cloud work, policy violations, and the policy version it runs. That server belongs to your organization, not to us, and it never receives your prompts, documents, or file names.

Where we act as a data controller for the OOMU application, this is the whole of it: we receive none of your work and no diagnostics about it.

Features that use other services, only if you turn them on

Some features reach services other than ours, and only once you set them up. None of them sends anything to us.

• Slack and Discord. If you connect one, the commands you send and OOMU's replies are messages held by Slack or Discord, under their terms. OOMU's replies are limited to a short status line and, for a file waiting for your approval, an identifier, its type, and its size. They never include the file's contents, its name, or where it is on your Mac. Your tokens stay in your Mac's Keychain.
• Weather. If you ask for a forecast or have OOMU watch the weather, the US city or ZIP code you enter is sent to the US National Weather Service.
• News topics. If you have OOMU follow a topic, it fetches the news feed addresses you entered, directly from those sites.
• Gmail and Google Calendar. If you choose them for OOMU to watch, it reads them directly from Google through the Google Workspace connection you made. The sorting and summaries happen on your Mac.

Each of those services sees your network address and the request it receives, as with any request on the internet. Air-Gap Mode stops all of them. Standing memory, the facts OOMU keeps from your chats overnight, is built and stored on your Mac, encrypted, and is never included in a request to a cloud model.

Disclosures inside the app

The application carries its own disclosures, in all twelve languages it supports, so they are available at the moment they matter rather than only here. Settings › Storage & Privacy holds the privacy notice. Settings › GDPR & EU AI Act sets out how the on-device router works and what limits it runs under, what encryption and deletion do and do not cover, and what the AI provenance metadata in generated Word and Excel files means. Those disclosures describe how the product behaves. They are not a claim that using OOMU makes you, or us, certified as compliant with anything, and neither is this page. Our documentation covers the same ground in more depth under Privacy & security.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you, or to stop contacting you, at any time. If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR), or in California (CCPA/CPRA), you have these and related rights, including the right to object to processing and to lodge a complaint with your local data-protection authority. To exercise any right, email support@oomu.ai and we'll respond. We do not sell personal information, so there is nothing to opt out of in that respect.

For data held by the application, the answer is faster than writing to us. Because your chats, documents, and memories never reach us, a request to us cannot reach them either. Deleting a chat, forgetting a memory, or deleting a project is done in the app and takes effect on your Mac. The app's GDPR & EU AI Act disclosures state exactly what each of those actions removes, including where one stops: deleting a project removes the project and its grouping rather than sweeping up everything associated with it, and no application can reach your own backups or snapshots.

Children

This site is not directed to children, and we do not knowingly collect information from anyone under 16.

International visitors

We are based in the United States, and your information may be processed there. By using the site you understand that your information may be transferred to and processed in the United States.

Changes to this policy

If we update this policy, we will change the effective date above. Material changes will be made clear on this page.

Contact

Questions or requests? Email support@oomu.ai, or use the contact form.