Privacy Policy

Last updated: October 2026

Omniteca ("we", "our", or "us") operates the omniteca.app website, the Omniteca browser extension for Chrome and Firefox, the Omniteca iOS app, and the Omniteca Android app (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

Account information. When you sign in with Google or Apple, we receive your name and email address from the identity provider. We store this to identify your account.

Saved content. We store the URLs, titles, descriptions, thumbnails, and metadata of content you choose to save via the Service.

AI-extracted data. We use AI to extract structured information from your saved content (e.g. recipe ingredients, movie titles, place addresses). This data is stored in your account and is never used to train AI models.

Usage data. We record basic usage information such as save counts, activity timestamps and which of our apps each save was made from, for quota enforcement and service improvement. If you allow it, the iOS and Android apps and the browser extension also send product analytics events about how you use them (for example which screens you open, when you look at the upgrade options, or which sharing option you pick); on the website and web dashboard, the same kind of events are only collected after you accept analytics cookies. These events are pseudonymous: they are linked to your account identifier, but never include your name, your email address, the content you save or the pages you visit. When you sign up, we also record which of our apps you signed up in and, if you arrived through a link carrying campaign information or from another website, that campaign and the website's domain (on Android, the campaign comes from the Play Store link and is only read if you allowed analytics).

Crash and error reports. If the iOS or Android app or the web dashboard crashes or runs into an error, a technical report is sent to us. It contains technical details only: the error and where in our code it occurred, the app version, the operating system, the device model or browser, a random installation identifier (mobile apps only), and a short trail of the technical events leading up to it (such as which screen was open). These reports are not linked to your account and never include your name, email address, the content you save, or screenshots. We do not store IP addresses with them. The browser extension does not send crash reports.

Payment information. Payments are processed by a third-party payment processor. We do not store your card details. We receive and store subscription status, plan tier, and invoice records.

Push notification tokens. If you enable push notifications on iOS or Android, we store your device token to deliver notifications. You can disable this at any time in your device settings.

Affiliate click data. When you click an affiliate link generated by the Service, we record the click event (linked to your account) for reporting purposes.

2. How We Use Your Information

• To provide, operate, and maintain the Service.
• To process your saves and run AI classification and enrichment.
• To manage your subscription and enforce usage quotas.
• To send transactional emails (e.g. welcome email, a one-time getting-started email if you haven't saved anything yet, billing receipts).
• To send push notifications you have opted into.
• To generate affiliate links relevant to your saved content.
• To improve and develop the Service using pseudonymous analytics.

We do not sell your personal data to third parties.

3. Third-Party Services

We use carefully selected third-party services to operate the Service. Each acts as a data processor under our instructions and has its own privacy policy. We share only the minimum data necessary for each service to function.

• Database and authentication infrastructure — stores your account, saves, and preferences.
• AI content processing — classifies and extracts structured data from your saves. Content is processed transiently and not retained for model training.
• Payment processing — handles subscription billing and invoices. Card details are never transmitted to us.
• Push notification delivery — routes notifications to your iOS or Android device via platform notification services.
• Affiliate and enrichment partners — used to generate relevant purchase or booking links for applicable saved content.
• Product analytics — records the pseudonymous usage events described above, stored in the EU, to help us understand how the Service is used and where to improve it.
• Error and crash monitoring — receives the crash and error reports described above so we can find and fix bugs. Reports are stored in the EU and deleted automatically after at most 90 days.
• Transactional email — delivers account-related emails such as welcome messages and billing confirmations.

4. Data Retention

We retain your account data and saved content for as long as your account is active.

When you request deletion of your account, we permanently and irreversibly delete all data associated with your account — including your saves, collections, preferences, device tokens, and billing records — from our systems and from all third-party processors immediately. This includes removing your billing profile from our payment processor and flagging your analytics profile for erasure under applicable data protection processes.

You can also delete all your saved content without closing your account at any time from Account Settings → Your data → Delete all saves.

5. Your Rights (GDPR / UK GDPR)

If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access (Art. 15) — you can request a copy of all personal data we hold about you.
• Right to rectification (Art. 16) — you can correct inaccurate data directly in Account Settings, or contact us.
• Right to erasure (Art. 17) — you can permanently delete all your data and close your account from Account Settings → Your data → Delete account. Deletion is immediate and propagates to all systems and processors we use.
• Right to data portability (Art. 20) — you can export a complete archive of all your personal data (saves, collections, account details, billing records) at any time from Account Settings → Your data → Export all saves.
• Right to restriction of processing (Art. 18) — you may request that we restrict processing of your data in certain circumstances.
• Right to object (Art. 21) — you may object to processing based on legitimate interests.

Most of these rights can be exercised directly within the app without needing to contact us. For requests that cannot be fulfilled in-app, contact us at [email protected]. We will respond within 30 days.

6. Legal Basis for Processing (GDPR)

We process your personal data on the following legal bases:

• Contract (Art. 6(1)(b)) — processing necessary to provide the Service you signed up for, including storing saves, managing quotas, and processing payments.
• Legitimate interests (Art. 6(1)(f)) — service statistics recorded on our servers (such as completed saves and subscription changes) to improve the Service, crash and error reporting to keep the apps and the web dashboard stable, fraud prevention, and security.
• Consent (Art. 6(1)(a)) — push notifications, which you can withdraw at any time in device settings; and product analytics, which you can withdraw at any time in the app's account settings, at the bottom of the extension's menu (in Firefox, also in the add-on's permissions) or via the cookie banner on the website and web dashboard.

7. Cookies & Analytics

The website and web dashboard use cookies and local storage to maintain your authentication session. We also use analytics tools to collect usage data to improve the Service. Analytics cookies are only set with your consent, which you can grant or withdraw at any time via the cookie banner. In the iOS and Android apps and the browser extension, product analytics stay off until you allow them, and you can change your choice at any time in the app's account settings or at the bottom of the extension's menu. We do not use advertising or third-party tracking cookies. Crash and error reporting does not use cookies.

8. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the date above. Continued use of the Service after changes constitutes acceptance.

10. Contact & Data Controller

Jacopo Panozzo, trading as Omniteca, based in Munich, Germany, is the data controller for personal data processed under this policy. Full legal contact details are available in our Impressum.

For privacy-related requests, questions, or complaints, contact us at [email protected]

If you are located in the EEA and believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local supervisory authority.