Privacy Policy

The short version

We collect as little as possible. The only personal information we ask for is what you choose to send us, such as your email address when you contact us. We use it only to answer a question or inquiry you send us. We use Google Analytics to understand how the site is used so we can improve it. We never sell, rent, or trade your information, and we never use it for advertising.

This policy is about this website. The OOMU application on your Mac works differently, and the difference is the point of the product: your conversations, documents, and files stay on your machine, and we do not receive them. The section on the OOMU application below explains what that means in practice, including the one thing the app can send and why it is off until you turn it on.

Who we are

This website is operated by Eldris ("Eldris," "we," "us," or "our"), the maker of OOMU. If you have any question about this policy or your information, contact us at support@oomu.ai.

Information we collect

Information you give us

If you use a contact form, we collect the details you submit (such as your name, email, organization, and message). We only collect this when you choose to send it.

If you report a bug, we collect what you type into that form: a description of the problem, the steps to reproduce it, and details about your Mac and your version of OOMU. An email address is optional there, and a report sent without one is anonymous to us. Bug reports are stored in a private Google Sheet that only we can open. Nothing is read from your Mac automatically; the form contains only what you or the app put into it, and the app fills in nothing beyond version and hardware details.

Information collected automatically

Like most websites, we use Google Analytics, which sets cookies and collects standard, largely aggregate information, such as the pages you visit, the type of device and browser you use, approximate location (derived from IP address), and how you reached the site. We've configured Google Analytics only to help us understand and improve the site. We do not use it for advertising, and we do not combine it with your email or try to identify you personally.

The contact page and the bug report page also use Google reCAPTCHA v3 to keep automated spam off those forms. It runs only on those two pages. reCAPTCHA collects hardware and software information, such as device and application data, and how you interacted with the page, and sends it to Google to score whether the visit looks automated. It does not receive the contents of your message. Your use of reCAPTCHA is subject to Google's Privacy Policy and Terms of Service. If you would rather not use it, email support@oomu.ai instead and no reCAPTCHA check happens.

How we use information

• To respond to questions, partnership, or enterprise inquiries you send us.
• To understand how the site is used and make it better.

That is the complete list. We do not use your information for any other purpose.

What we never do

• We never sell, rent, or trade your personal information to anyone.
• We never use your email for advertising or send you unrelated marketing.
• We never share your information except with the limited service providers below, or where required by law.

Service providers

We rely on a small number of trusted providers to operate the site:

• Google LLC: Google Analytics (site usage), reCAPTCHA v3 (spam protection on the contact and bug report forms), and Google Workspace (storing bug reports in a private spreadsheet). Google processes this data on our behalf; see Google's Privacy Policy and Terms of Service.
• Mailjet (Sinch): delivery of contact-form messages to our inbox.

These providers may process data in the United States.

Cookies and how to opt out

The only cookies we use are those set by Google Analytics, for the purpose described above. You can:

• Block or delete cookies in your browser settings; and/or
• Install the Google Analytics Opt-out Browser Add-on.

The site works normally with analytics disabled.

How long we keep information

Contact-form messages are kept as long as needed to handle your inquiry, or until you ask us to remove them. Bug reports are kept while the bug is open and for a reasonable period after it is fixed, so we can tell whether it comes back; ask us and we will remove yours. Google Analytics data is retained according to our analytics settings.

The OOMU application

Everything above concerns this website. The application is a different matter, and we would rather over-explain it than let you assume.

We do not receive your work

OOMU runs on your Mac. Your chats, your documents, your projects, and the memories it forms are stored on that machine in a database encrypted with SQLCipher, keyed from the macOS Keychain. There is no OOMU account, no OOMU server in the path, and no sync. We operate no service that receives your work, which means we cannot read it, cannot produce it if someone demands it, and cannot delete it for you. You hold it, and the controls that erase it are in the app.

Two honest boundaries. The encryption covers the database: files you export, documents OOMU generates, and cached copies can remain unencrypted on disk, protected like any other file on your Mac. And if you choose to use a cloud AI provider with your own key, the relevant content goes from your Mac directly to that provider, under that provider's terms, not through us.

Diagnostics are off until you opt in

The application can send anonymous diagnostics through Google Analytics, and it does not do so unless you check the box, which is unchecked when you install it. Nothing in the application is withheld or degraded if you leave it that way.

If you do opt in, three lifecycle events can be sent: application launch, setup completion, and session start. They carry a random installation identifier that is not tied to your name, your email, or any account, and the request has no field capable of carrying your prompts, your documents, your file names, or your settings. Google receives your network IP address, as it would for any connection. You can withdraw consent at any time in the application's Storage & Privacy settings, and withdrawing it discards the stored identifier rather than keeping it aside. Air-Gap Mode blocks the traffic regardless of the setting.

Where we act as a data controller for the OOMU application, this is the whole of it: the diagnostics above, and only with your consent, which is our legal basis for it under the GDPR and which you can withdraw without giving a reason.

Disclosures inside the app

The application carries its own disclosures, in all twelve languages it supports, so they are available at the moment they matter rather than only here. Settings › Storage & Privacy holds the privacy notice and the diagnostics choice. Settings › GDPR & EU AI Act sets out how the on-device router works and what limits it runs under, what encryption and deletion do and do not cover, and what the AI provenance metadata in generated Word and Excel files means. Those disclosures describe how the product behaves. They are not a claim that using OOMU makes you, or us, certified as compliant with anything, and neither is this page. Our documentation covers the same ground in more depth under Privacy & security.

Your rights

You can ask us to access, correct, or delete the personal information we hold about you, or to stop contacting you, at any time. If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR), or in California (CCPA/CPRA), you have these and related rights, including the right to object to processing and to lodge a complaint with your local data-protection authority. To exercise any right, email support@oomu.ai and we'll respond. We do not sell personal information, so there is nothing to opt out of in that respect.

For data held by the application, the answer is faster than writing to us. Because your chats, documents, and memories never reach us, a request to us cannot reach them either. Deleting a chat, forgetting a memory, or deleting a project is done in the app and takes effect on your Mac. The app's GDPR & EU AI Act disclosures state exactly what each of those actions removes, including where one stops: deleting a project removes the project and its grouping rather than sweeping up everything associated with it, and no application can reach your own backups or snapshots. If you have opted into diagnostics and want that withdrawn, the switch in Storage & Privacy does it immediately and discards the identifier; you do not need our permission or our involvement.

Children

This site is not directed to children, and we do not knowingly collect information from anyone under 16.

International visitors

We are based in the United States, and your information may be processed there. By using the site you understand that your information may be transferred to and processed in the United States.

Changes to this policy

If we update this policy, we will change the effective date above. Material changes will be made clear on this page.

Contact

Questions or requests? Email support@oomu.ai, or use the contact form.