What this hostname holds about you.Omi's door is open, and the whole list is below.

Who you are dealing with

Omi and AstraX are products of Omnovate (OPC) Private Limited, a one person company incorporated under the Companies Act, 2013, having its principal place of business at Plot No. 427 & 428, Phulnakhara, Bhubaneswar 752101, Odisha, India. Omnovate (OPC) Private Limited is the Data Fiduciary in respect of the personal data described in this notice.

That is the same company, at the same address, as the one named on the astraxpro.com Privacy Notice. There is one company behind both hostnames and one person who answers a grievance for both.

These two notice pages, and the cookie this hostname sets

When Omi's door opens

The Omi conversation. Omi is accessible through this hostname and may also be accessible through astraxpro.com/hiomi. When you use the Omi conversation, the personal data and conversation information you submit are processed in accordance with the AstraX Privacy Notice available at astraxpro.com/privacy. This page describes the limited activity carried out on hiomi.app itself; the AstraX Privacy Notice governs the processing associated with the Omi service.

From the opening, this hostname leads to Omi's own surface: a place where you can talk to her. What follows describes that surface. It is written in the present tense because it is true of the code as it stands, and the opening is the moment it starts applying to you.

You can talk to Omi without an account, and Omi asks you two questions before she says anything. If you sign in, you start a fresh conversation kept with your account; one begun without an account stays under its own clock and is deleted a day after your last message or answer.

Signing in. You sign in with a Google account, which reaches us through the authentication provider that runs our sign-in. That provider supplies us two things and no more: a verified email address and a stable identifier for you. It is given no profile, no birth data and nothing about what you go on to ask. The account we then hold is that email address and, stored beside it, the words you were shown when you agreed to them. Nothing is written down for you before that agreement exists, and if the agreement is refused the account is not created at all.

Talking without signing in. You need no account to talk to Omi. When you do not sign in we hold no email address for you and no identifier of our own that reaches outside this website: your conversation is filed under a key we work out from the session cookie in your browser, and nothing else. One qualification, in the same terms as the section above: the machines that serve the conversation keep the same ordinary technical and security logs that every web server keeps, for a limited period set by those providers, over which we exercise no control, and those logs can include the network address the request came from. We do not read them to build a picture of anybody, and nothing in them is filed under your conversation's key. That cookie is what reaches the conversation. For as long as it lives — twelve hours — anybody who copies it out of your browser can read that conversation and delete it, because the cookie is the only thing we have to tell one visitor from another. A conversation held under an account needs the sign-in as well, which is the difference between the two. The cookie is not readable by scripts on the page and is never sent anywhere but to us. When it expires, nobody — you or us — can reach the conversation again, and that is why it is deleted.

One cookie is ours, and it is the session. Your browser is given a signed session cookie. It is not readable by page scripts, it lasts twelve hours, and it exists so the server knows one request is from the same visitor as the last. It is the only cookie we set. We use no cookies other than those strictly necessary to deliver the website — no analytics cookie and no advertising cookie — and the qualification is there because the request reaches us through a content-delivery provider that may set one of its own to deliver and secure it.

Your age. You must be 18 or over to talk to Omi, and the question below is the whole of how that is asked. Omi asks whether you are above 18 years of age. It is used to answer a single question — whether you are 18 or over — and it is not written down. What is kept is the answer, the moment you gave it, and which visitor or account gave it, and nothing about a date of birth. You answer this about yourself: nobody else is asked to confirm it, and we hold nothing from anywhere else about how old you are. The answer is read back only within the sitting that gave it, so you meet this question again when you come back, and you do not meet the next one again. Stated plainly, because a notice that overclaimed here would be worse than one that said nothing: the question records an answer and does not yet stop a person answering it a second time. The gap is known and recorded rather than hidden.

What Omi may keep. Omi then asks one more question, and it covers two things, set out in plain words on the screen that asks it: whether she may keep your conversations, and whether she may notice what you keep coming back to. There is one answer, yes or no, and you can say no and still talk to her. A no is kept as durably as a yes, so you are not asked again next week until you change the answer yourself.

What is held, and for how long

Four kinds of record beside the account itself, a fifth if you talk to Omi without one, and a sixth if you give Omi your birth details. Each says what it holds, what it does not, and how you take it away.

Your conversations

What you asked and what Omi answered, in full, and when. Beside each turn a few short notes for the record: how the turn was handled, whether the question was held back and on what, and which claims the answer was read from — their names, never their values. Each row also carries a fingerprint, so a record altered afterwards cannot pass itself off as the conversation.

Not held: no chart values, no birth details, no sign-in token, no request header, no prompt, and no name of the machine that helped put the answer into words.

Kept until you remove it There is no clock on a conversation. It stays until you delete it, and you can delete a whole conversation whenever you want. Say no to the question and nothing is written down at all: the conversation still happens and the record of it is empty by your choice.

One thing here is not what a reader would guess, so it is said rather than left to be found out. Leaving the question unanswered is not the same as saying no — not for this record. If the question has never been answered, the conversation is kept. For the other half of the same question, what Omi notices about you, the opposite holds: silence there is read as a no, and nothing is noticed until you say it may be. The two defaults point different ways on purpose, because being wrong costs something different in each direction, and this page would rather name that than tidy it.

What Omi has come to notice about you

Four kinds of thing and the list does not grow on its own: a tone you asked for, warmer or shorter; a name you said she may call you by; the kinds of question you come back to and the ones she held back on; and the charts you have read for. It is kept with your account rather than with one conversation, so it is still there when you come back.

Only the tone changes anything, and it changes how an answer is worded, never what it says. None of it is built into a profile, shared, or sold to anyone. It is written only while your answer to that question stands; withdraw it and nothing further is noticed, and it is written at all only if you have answered yes.

Kept until you remove it All of it is on one page, in plain words, with a way to remove any single line or all of them at once. Withdrawing your answer stops new lines being written and does not by itself delete the old ones, which is said on that page too.

What you write down about how things turned out

Omi has a quiet room where you can keep your own account, in your own words, of what actually happened. It is yours: nothing you write there is scored, rated or graded. There is no result, no impact level, no accuracy number and no derived figure of any kind, and no column to put one in.

Kept until you remove it Remove one entry or all of them, from that page.

Your answers to the two questions

Which question was asked, which answer you gave, when you gave it, and which visitor or account it belongs to. Beside each a fingerprint, so an answer altered afterwards cannot pass itself off as the one you gave. Your date of birth is not among them, and neither is anything else about the person who answered.

Kept with the account, or for a day With an account, they go when the account goes. Without one, they are deleted twenty-four hours after your last message or answer, and you can delete them yourself before that.

Your visit, if you have no account

One short row: when you first arrived, when you last said something, how many times you have spoken today, and whether what you left has been deleted yet. It holds no words, no name, no address and nothing that identifies you — the visitor it belongs to is a number we work out from your session cookie, and once that cookie expires nobody can work it out again.

Removed thirty days after the deletion it records It is what lets us find your conversation in order to delete it, so it outlives the conversation by design: it is removed thirty days after the deletion it records.

Your birth details, if you give them without an account

The date, the hour when you know it, and the place — and the reading worked out from them. No name is kept beside them, and they are never joined to a conversation you had before this one.

Kept with that conversation for a day Kept with that conversation for a day and deleted with it, together with the reading computed from them; never kept between conversations.

Deleting the account

Deleting your account removes your conversations, everything Omi had come to notice about you, everything you wrote in the quiet room, and your two answers. If any one of those stores cannot be reached and emptied, the deletion refuses rather than reporting a success it cannot show: the account is left standing so you can ask again.

If you have no account. There is nothing to delete but the conversation and your two answers, and the control for the conversation is on the conversation screen. It removes what was said straight away. If you give Omi your birth details without an account, your birth date, time and place are used to generate your requested chart and are kept with that conversation for 24 hours, after which they are deleted. They are not retained between conversations. Whether or not you use it, everything held for you is deleted twenty-four hours after your last message or answer, and once it is deleted we keep no record that you were here beyond a short marker that stops a message already in flight from landing afterwards. That marker holds no words, no address and nothing that identifies you, and it too is removed after thirty days.

An erased account never writes again. A conversation that was still being composed at the moment you erased does not land afterwards under an account that no longer exists, which would leave two turns nobody could read and nobody could delete.

Payments

Omi can be used without paying. If you choose a paid plan or the 90-day term, the payment is taken by our payment gateway, Razorpay, which receives your payment details directly. We do not receive or store card, bank or UPI credentials.

From the gateway we receive, and we keep, the payment reference, the amount, the date, the plan and whether the payment succeeded, was refunded or failed. We use this to give you what you paid for, to issue a receipt and to handle a cancellation or a refund. We keep these payment records for as long as tax and accounting law requires, including after an account is erased; when an account is erased we remove the details that identify you from them.

Prices, what each plan includes, how a plan renews and how to cancel are shown before you pay. Refunds follow the Refund and Cancellation Policy.

No tracking beyond what is named above

We use no third-party analytics and no advertising trackers. We use no cookies other than those strictly necessary to deliver the website, and the only one we set ourselves is the session cookie described above. We do not sell, rent or trade personal data, and we do not share it for advertising. We may disclose personal data where required by law, by a court or by a competent authority.

Our service providers at this stage are four: our hosting provider in Germany; our content-delivery provider; the authentication provider that runs our sign-in, described above, which receives the verified email address that identifies you; and the artificial-intelligence services described in the next section. Each processes personal data only for the purposes of providing its service to us. There is no fifth, and if one is added this page names it before it is used.

How the wording gets written

Part of what Omi says is put into readable prose with the help of third-party artificial-intelligence services, outside India. On this page we name them by the part they play rather than by their brands, because the house does not put a machine's name in front of a reader as though it were an author. That is not a way of hiding who they are: the companies are named, one by one, in the astraxpro.com Privacy Notice at clause 3.1, with the terms they hold material under at clause 3.5 and the same names again in the service-provider list at clause 6.2. If a further provider is enabled, that Notice is updated to name it before it is enabled.

The transfer itself, and what is and is not sent to those services, is described in clauses 3.2 to 3.4 of that Notice, and this page does not restate it in different words. Nothing about which machine helped write an answer is kept in your conversation record.

astraxpro.com privacy notice →

Your rights

Subject to applicable law, you have the right to obtain a summary of the personal data we hold about you and how it is processed; to have it corrected, completed or updated; to have it erased; to withdraw your consent; to nominate another person to exercise your rights in the event of your death or incapacity; and to make a grievance.

To exercise any right, write to [email protected]. We will respond within 30 days of receipt.

Most of these you can exercise without writing to anybody. Reading back a conversation, taking a copy of it, deleting it, reading what Omi has noticed and removing any line of it, and deleting the account outright are all controls on the surface itself. The address above is for everything those controls do not reach, and for a grievance.

You may also complain to the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023.

Consent, and withdrawing it

We process the personal data described above on the basis of your consent, which you give when you answer the two questions, and also when you sign in if you choose to. This is consistent with the Digital Personal Data Protection Act, 2023. You may withdraw your consent at any time, and withdrawal will be as easy as giving it. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

We may also process personal data where required to comply with applicable law or to establish, exercise or defend a legal claim.

Children

This hostname is not intended for persons under 18 years of age and we do not knowingly collect personal data from them. If we learn that we hold such data, we will delete it.

Security

We apply reasonable technical and organisational measures appropriate to this stage, including encryption of data in transit and access controls on our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs we will act in accordance with applicable law.

Who to write to

Privacy questions and grievances go to [email protected], or by post to Omnovate (OPC) Private Limited, Plot No. 427 & 428, Phulnakhara, Bhubaneswar 752101, Odisha, India. The Grievance Officer is Mrs. Deepika Dwivedy, and the full arrangement — what to put in a complaint, when it is acknowledged, and in what time it is disposed of — is on the grievance page.

Grievances, and who answers →

Changes to this notice

We may update this notice. The revised version is posted on this hostname with a revised date at the top of the page. Where a change is material, and we hold an address we may reach you at, we will tell you.