Privacy Policy
Last Updated: November 6, 2025
Effective Date: November 6, 2025
Version: 1.0
1. Introduction
Welcome to Omni ("we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application Omni (the "App"). Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
Contact Information:
Email: omniworldimmersion@gmail.com
Location: Vancouver, British Columbia, Canada
We reserve the right to make changes to this Privacy Policy at any time and for any reason. We will alert you about any changes by updating the "Last Updated" date of this Privacy Policy. Any changes or modifications will be effective immediately upon posting the updated Privacy Policy on the App.
2. Information We Collect
2.1 Personal Information You Provide
Account Registration:
- Email address
- Name (display name)
- Password (encrypted)
- Profile picture (optional)
- Authentication provider information (Apple, Google, Facebook)
Content You Create:
- Photos and videos you upload
- Post titles and descriptions
- Comments and interactions
- Tags and categorizations
- GPS coordinates from photo EXIF data (ONLY with your explicit consent)
- Location names and places (ONLY with your explicit consent)
Profile Information:
- Bio and description
- Preferences and settings
- Liked posts and bookmarks
- Bookmark collections and lists
2.2 Automatically Collected Information
Device Information:
- We do NOT collect general device information (type, OS version, unique identifiers)
- Only camera metadata from EXIF data is collected (with your explicit consent)
Usage Data:
- We do NOT collect general usage analytics or tracking data
- Only functional data is stored (your likes, bookmarks, and posts as part of app functionality)
- Analytics tracking: We collect anonymous usage data including:
- Screen views and navigation patterns
- Feature usage (camera, search, posting)
- Post interactions (views, likes, comments, bookmarks)
- Search queries and results
- Profile actions and content reports
- App performance metrics
- This data helps us improve the app and fix issues
Media Metadata (EXIF Data):
With Your Explicit Consent Only:
When you grant EXIF consent during upload, we collect and store the following metadata from your photos and videos:
Camera and Device Information:
- Camera make and model
- Lens specifications
- Device manufacturer
- Software/firmware version
Photo Settings:
- ISO speed
- Aperture (f-stop)
- Shutter speed
- Focal length
- Exposure settings
- Flash usage
- White balance
- Metering mode
Date and Time:
- Original capture date/time
- Digitized date/time
- Modified date/time
- Timezone information
Location Data (GPS):
- Latitude and longitude coordinates
- Altitude (elevation above sea level)
- GPS speed (if moving when captured)
- Compass direction (ImageDirection - direction camera was pointing)
- Travel direction (DestBearing - direction of movement)
- GPS timestamp
- GPS accuracy indicators
Image Properties:
- Image dimensions (width x height)
- Resolution (DPI)
- Color space
- Orientation
- Compression ratio
Video-Specific Metadata:
- Duration
- Frame rate
- Video codec
- Audio codec
- Bitrate
- Video dimensions
Without EXIF Consent:
If you do not consent to EXIF extraction:
- NO EXIF metadata is collected or stored
- Only basic file information is retained (file size, type, format)
- GPS coordinates are NOT extracted or saved
- Your media cannot be placed on the map
- Camera details are NOT recorded
Important: EXIF consent is requested before each upload. You can choose to grant or deny consent for each post individually.
2.3 Location Data
We collect location data ONLY with your explicit consent in the following ways:
Camera-Based Location Collection:
- When you use the in-app camera, we request device location permission
- GPS coordinates are captured at the moment you take a photo/video
- Compass heading (direction camera is pointing) is recorded
- Travel direction (direction you're moving) is recorded if available
- Altitude and speed are captured if available
- This data is embedded in the media file temporarily
From Photo EXIF Data (Consent Required):
- GPS coordinates embedded in photos you upload
- Only extracted if you grant EXIF consent during upload
- Includes latitude, longitude, altitude, timestamp
- Direction data (compass bearing, travel heading)
Manual Entry:
- Locations you add or edit for your posts
- Place names and descriptions you provide
Geocoding:
- Converting GPS coordinates to readable place names using third-party services
- Reverse geocoding for map display
Location Permissions:
- Foreground Location Only: We only request location access when the camera is active
- Never Background Tracking: We do NOT collect location when the app is in the background or closed
- User Control: You can deny location permission at any time in device settings
- Without Location Permission: You can still use the app, but cannot use the camera feature or place posts on the map
What We Do NOT Collect:
- Real-time location tracking
- Background location when app is not in use
- Device GPS without your explicit camera use
- Historical location data
- Location from device sensors without camera use
3. How We Use Your Information
We use the information we collect to:
3.1 Provide and Improve Services
- Create and manage your account
- Store and display your uploaded content
- Enable social features (likes, bookmarks, comments)
- Show posts on interactive maps based on location (only with EXIF consent)
- Compress and optimize media for better performance
- Generate thumbnails and previews
- Extract and display EXIF metadata (only with your consent)
- Provide camera compass direction features
- Calculate accurate GPS positions for geotagging
3.2 EXIF Data Processing
When You Grant EXIF Consent:
- Extract comprehensive metadata from your media files
- Store GPS coordinates for map placement
- Display camera settings and technical details
- Enable location-based discovery features
- Preserve original capture information
- Calculate direction and orientation data
EXIF Data Filtering:
- We filter out potentially sensitive EXIF fields
- Personal identifiers in maker notes are removed
- Device serial numbers are not stored
- User comments in EXIF are filtered
- Only photography-relevant data is retained
Data Accuracy:
We make no guarantees about the accuracy of:
- GPS coordinates extracted from EXIF
- Location names from geocoding
- Compass direction data
- Altitude or speed measurements
- Timestamps or timezone information
3.2 Communication
- Send account notifications
- Respond to support requests
- Notify about policy changes
- Send optional promotional content (with consent)
3.3 Security and Fraud Prevention
- Authenticate users
- Detect and prevent abuse
- Monitor for security threats
- Enforce our terms of service
- Protect against unauthorized access
3.4 Analytics and Improvement
- Analyze app usage patterns
- Identify and fix bugs
- Improve user experience
- Develop new features
- Optimize performance
4. How We Share Your Information
4.1 Public Information
The following information is publicly visible:
- Your display name and profile picture
- Posts you upload (photos, videos, titles)
- Location data for your posts
- Likes and interactions (may be visible to other users)
4.2 Third-Party Service Providers
We share data with:
Firebase (Google Cloud Platform)
Authentication Providers
- Apple Sign-In
- Google Sign-In
- Facebook Login
- Data Shared: Email, name, profile picture (as provided by the service)
Content Delivery Networks (CDN)
- Purpose: Fast media delivery
- Data Shared: Uploaded media files
4.3 Legal Requirements
We may disclose your information if required to:
- Comply with legal obligations
- Respond to legal requests (subpoenas, court orders)
- Protect our rights and property
- Investigate fraud or security issues
- Protect user safety
4.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity. We will notify you of any such change.
5. Data Storage and Security
5.1 Storage Location
- Primary: Firebase Cloud Storage (Google Cloud Platform)
- Locations: United States and globally distributed servers
- Backup: Automated Firebase backups
5.2 Security Measures
Technical Safeguards:
- End-to-end encryption for data in transit (TLS/SSL)
- Encrypted storage for sensitive data
- Secure authentication (Firebase Auth)
- Regular security audits
- Firewall protection
- DDoS mitigation
Access Controls:
- Authentication required for all user actions
- Role-based access control
- Secure API endpoints
- Token-based authentication (JWT)
Data Protection:
- Automated backups
- Redundant storage
- Disaster recovery plans
- Regular security updates
5.3 Data Retention
We retain your data:
- Active Accounts: Indefinitely while account is active
- Deleted Accounts: Data permanently deleted within 30 days
- Backups: May persist in backups for up to 90 days
- Legal Hold: Retained if required by law
5.4 Content Moderation and Reporting
Automated Moderation:
- Content receiving a significant number of reports is automatically hidden from public view pending review
- Content with excessive reports is flagged as critical for immediate admin review
- Moderation decisions are based on report volume, severity, and context
Report Data Storage:
- We store report reasons, timestamps, and reporter information for moderation purposes
- Report data is retained for 2 years after the reported content is resolved
- Anonymous reporting is supported to protect user privacy
Human Review Process:
- All flagged content is reviewed by our moderation team
- We investigate the context and severity of each report
- Decisions are made based on our Community Guidelines and Terms of Service
- Action may include content removal, account warning, or suspension
Appeals Process:
- Users can appeal moderation decisions by contacting support
- Appeals are reviewed by human moderators within 48 hours
- Reinstated content may be subject to additional monitoring
6. Your Rights and Choices
6.1 Access and Control
You have the right to:
- Access: View all your personal data
- Correction: Update or correct your information
- Deletion: Delete your account and all data
- Portability: Download your data in a portable format
- Restriction: Limit how we use your data
- Objection: Object to certain data processing
6.2 Account Settings
You can control:
- Profile information and picture
- Email preferences
- Privacy settings
- Content visibility
- Notification preferences
6.3 Delete Your Account
To delete your account:
- Go to Settings > Account
- Select "Delete Account"
- Confirm deletion
What Happens:
- All posts, photos, videos deleted
- Profile and account information removed
- Likes, bookmarks, and interactions deleted
- Data removed from storage within 30 days
- Action is permanent and cannot be undone
6.4 Opt-Out Options
You can opt out of:
- Email communications (except essential account emails)
- Analytics data collection (limited functionality)
- Location data sharing (don't upload photos with GPS)
7. Children's Privacy
Omni is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will delete it immediately.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us.
8. International Users
8.1 Data Transfers
If you access Omni from outside the United States, your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate.
Our App is operated from Canada and uses servers located in the United States (Google Firebase). If you access our App from outside Canada or the USA, your information will be transferred to, stored, and processed in these countries.
8.2 Adequacy and Safeguards
- US-Canada Data Flows: We rely on appropriate safeguards including standard contractual clauses and the security measures provided by our service providers
- Other Countries: For users accessing from other jurisdictions, we take appropriate measures to ensure your data is protected in accordance with this Privacy Policy and applicable laws
- GDPR Compliance: For EU users, we comply with GDPR requirements for international data transfers
9. Your Rights
9.1 General Rights
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Export your data
- Opt-out of marketing communications
- Withdraw consent where processing is based on consent
9.2 Canadian Privacy Rights (PIPEDA)
If you are in Canada, you have:
- Right to access your personal information
- Right to challenge the accuracy and completeness of your information
- Right to withdraw consent
- Right to file a complaint with the Privacy Commissioner of Canada
- Right to know how your information is being used
- Right to request deletion of your information (subject to legal obligations)
9.3 US State Privacy Rights
9.3.1 California (CCPA/CPRA)
California residents have:
- Right to know what personal information is collected
- Right to know whether personal information is sold or shared
- Right to opt-out of the sale/sharing of personal information (we do not sell or share personal information)
- Right to deletion
- Right to correction
- Right to non-discrimination for exercising your rights
- Right to limit use of sensitive personal information
9.3.2 Other US States
Residents of Virginia, Colorado, Connecticut, Utah, and other states with privacy laws have similar rights including access, deletion, correction, and opt-out rights.
9.4 GDPR Rights (European Users)
If you are in the European Economic Area, you also have:
- Right to data portability
- Right to object to processing
- Right to restrict processing
- Right to lodge a complaint with a supervisory authority
9.5 Exercising Your Rights
To exercise any of these rights, contact us at omniworldimmersion@gmail.com. We will respond to your request within:
- 30 days (PIPEDA - Canada)
- 30 days (GDPR - European Union)
- 45 days (CCPA/CPRA - California)
- 45 days (other US state privacy laws)
- Reasonable timeframe for other jurisdictions
We may require verification of your identity before processing your request. You may also designate an authorized agent to make requests on your behalf.
10. Third-Party Links and Services
10.1 External Links
Our App may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies.
10.2 Third-Party SDKs
We use the following third-party services:
- Expo: React Native framework
- Google Play Services: Android functionality
- Apple Services: iOS functionality
11. Cookies and Tracking
11.1 What We Use
Local Storage:
- Authentication tokens
- User preferences
- Cached data for performance
Analytics:
- Basic usage statistics
- Crash reporting
- Performance monitoring
11.2 What We Don't Use
We do NOT use:
- Third-party advertising cookies
- Cross-site tracking
- Behavioral advertising
- Data brokers
12. Data Processing Activities
12.1 EXIF Consent and User Control
Explicit Consent Requirement:
- EXIF data extraction requires your explicit opt-in consent
- Consent is requested before each upload
- You can grant or deny consent per upload
- Consent status is saved with your upload preferences
- You can change your consent preference at any time
Visual Indicators:
- Green border: Full GPS data + direction/heading captured
- Yellow border: GPS coordinates only (partial data)
- Red border: No GPS data or EXIF consent denied
What Happens Without Consent:
- NO EXIF metadata is extracted
- NO GPS coordinates are saved
- NO camera information is recorded
- NO direction/heading data is captured
- Post cannot be placed on the map
- Technical image details not displayed
- Basic upload still functions normally
User Controls:
- View all EXIF data before posting
- Remove or adjust location manually
- Edit GPS coordinates before upload
- Delete posts with EXIF data at any time
- Export your data including EXIF information
- Request deletion of specific EXIF fields
EXIF Data Transparency:
- We clearly display what EXIF data will be extracted
- Color-coded indicators show data completeness
- Warning message if EXIF consent is denied
- Users can review GPS coordinates before posting
12.2 Media Processing
Image Processing:
- Automatic compression (reduces file size by 70-90%)
- Maximum resolution: 1080px (longest dimension)
- Thumbnail generation (multiple sizes for performance)
- EXIF data extraction (ONLY with explicit consent)
- Format conversion (to JPEG for compatibility)
- Resolution optimization for mobile devices
- Compression quality: 80% (configurable)
- GPS coordinate normalization and validation
EXIF Extraction Process:
- Consent Check: Before any EXIF processing, user must explicitly consent
- Initial Extraction: Raw EXIF data read from image files
- Data Filtering: Sensitive fields removed (serial numbers, user comments, personal identifiers)
- GPS Processing:
- Latitude/longitude extracted and validated
- Coordinate format standardized
- Altitude, speed, and direction data preserved
- GPS timestamp processed
- Camera Data: Make, model, lens, settings extracted
- Storage: Filtered EXIF stored securely with post data
Video Processing:
- Server-side compression using FFmpeg
- Codec conversion (H.264/H.265)
- Maximum resolution: 1080p
- Maximum duration: 120 seconds (2 minutes)
- Audio normalization and codec conversion
- Thumbnail extraction (at 1 second mark)
- Location metadata extraction (only with consent)
- Duration and technical metadata preserved
Compass and Direction Data:
- Real-time compass heading captured during photo/video capture
- ImageDirection field: Direction camera was pointing (0-360°)
- DestBearing field: Direction of travel/movement (if available)
- Magnetic heading calibrated for device orientation
- Direction data only captured when camera is active
File Size Limits:
- Images: Maximum 50MB per file
- Videos: Maximum 100MB per file
- Files exceeding limits are rejected
- Compression applied automatically before upload
12.3 Location Processing
GPS Data Extraction (Consent Required):
- GPS coordinate extraction from EXIF (only with user consent)
- Coordinate validation and normalization
- Altitude extraction (if available)
- Speed data extraction (if available)
- GPS timestamp processing
Direction and Bearing:
- Compass heading (ImageDirection): Direction camera pointed
- Travel bearing (DestBearing): Direction of movement
- Calculated using device magnetometer and GPS
- Calibrated for device orientation
- Magnetic declination not applied (raw magnetic heading)
Geocoding:
- GPS coordinates converted to readable place names
- Reverse geocoding (place names to coordinates)
- Uses third-party geocoding services (Google, Apple Maps)
- Place names cached for performance
- Map marker generation for display
Location Accuracy:
- GPS accuracy varies (typically 5-50 meters)
- Compass accuracy varies (typically 5-15 degrees)
- Altitude may be inaccurate or unavailable
- Speed data may be unavailable if stationary
- We make no guarantees about location precision
Location Privacy:
- Exact GPS coordinates visible only if you grant EXIF consent
- Location can be manually adjusted or removed before posting
- Private posts do not display location publicly
- You can delete location data by deleting the post
13. Data Breach Notification
In the event of a data breach that affects your personal information:
- We will notify you within 72 hours (GDPR requirement)
- Canadian users: We will notify as required under PIPEDA
- US users: We will notify as required under applicable state laws
- Notification will include details of the breach
- We will provide steps to protect yourself
- We will report to relevant authorities as required by law
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be effective immediately upon posting. We will notify you of material changes via:
- In-app notification
- Email notification
- Push notification
Continued use of the App after changes constitutes acceptance of the updated Privacy Policy.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
Email: omniworldimmersion@gmail.com
Location: Vancouver, British Columbia, Canada
Response Time: We aim to respond within 30 days
For Privacy Rights Requests:
- Canadian residents (PIPEDA): Reference "PIPEDA Request" in subject line
- California residents (CCPA/CPRA): Reference "CCPA Request" in subject line
- EU residents (GDPR): Reference "GDPR Request" in subject line
- Other US states: Reference "[State] Privacy Request" in subject line
Complaints:
- Canadian residents may file complaints with the Office of the Privacy Commissioner of Canada: www.priv.gc.ca
- California residents may file complaints with the California Attorney General: oag.ca.gov
- EU residents may lodge complaints with their local Data Protection Authority
16. Legal Basis for Processing (GDPR)
We process your personal data based on:
- Consent: You have given explicit consent
- Contract: Processing is necessary to provide the service
- Legal Obligation: Required by law
- Legitimate Interests: Necessary for our business operations
17. Automated Decision Making
We do NOT use automated decision-making or profiling that produces legal effects or significantly affects you.
18. Additional Information
18.1 Guest Mode
If you use the app without an account (Guest Mode):
- No personal information is collected
- Browsing activity is not tracked
- You cannot upload or interact with content
- Local preferences may be stored on device
18.2 Social Features
When you interact with others:
- Your likes may be visible to post authors
- Your bookmarks are private by default
- Comments are public
- Profile views may be logged
18.3 Data Minimization
We practice data minimization:
- Collect only necessary information
- Delete unused data
- Compress media to reduce storage
- Anonymize analytics when possible
Acceptance
By using Omni, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.
Last Updated: November 6, 2025
Version: 1.0
📄 Prefer a shorter version? Read the TL;DR Privacy Policy