Legal

Privacy Policy

This Privacy Policy explains how OMA ("we," "us," or "our") collects, uses, discloses, and protects information when you use the OMA mobile and web application (the "App").

Last updated: May 19, 2026

1. Who We Are

Controller/Operator: OMA App

Contact email: help@getoma.app

2. Scope

This Privacy Policy applies to personal information processed through the App and related services.

3. Information We Collect

We collect the following categories of information:

  1. Account and identity information
    • Name, email address, and profile photo provided by Google Sign-In.
    • Internal user identifiers (for example, Supabase user ID).
  2. User content
    • Spaces, sections, cards/tasks, descriptions, recurrence settings, completion history, and related content you create in the App.
  3. Device and technical information
    • Push notification token (for Firebase Cloud Messaging).
    • Basic technical data needed for authentication/session security and service operation (for example, timestamps and session metadata).
  4. Preference and settings data
    • App preferences such as selected theme, timezone, and notification settings stored on your device and/or account profile.
    • Home screen widget cache: task, supply, and restock data written to on-device local storage so Android home screen widgets can display your information without a network request.

We do not intentionally collect special categories of sensitive personal data unless you choose to place it in task content.

4. How We Use Information

We use personal information to:

  1. Provide and operate the App, including authentication and account access.
  2. Sync your data across devices and sessions.
  3. Deliver notifications you enable.
  4. Maintain security, detect abuse, and troubleshoot issues.
  5. Comply with legal obligations and enforce our Terms of Use.

5. Legal Bases (EEA/UK Users)

If GDPR/UK GDPR applies, we process personal information under one or more of these bases:

  1. Contract: to provide the App you request.
  2. Legitimate interests: to secure and improve the App.
  3. Consent: for optional notifications or where required by law.
  4. Legal obligation: where processing is required by law.

6. How We Share Information

We do not sell your personal information.

We may share information with service providers that process data on our behalf:

  1. Supabase (authentication, database, backend services)
  2. Google (Google Sign-In)
  3. Firebase Cloud Messaging by Google (push notifications)

We may also disclose information:

  1. If required by law, regulation, legal process, or governmental request.
  2. To protect rights, safety, security, and prevent fraud/abuse.
  3. In connection with a merger, acquisition, financing, or asset sale.

7. International Data Transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.

8. Data Retention

We retain data for as long as needed to provide the App, comply with legal obligations, resolve disputes, and enforce agreements.

Typical retention approach:

  1. Account/profile data: retained while your account is active.
  2. User content: retained until deleted by you or upon account deletion, subject to backup and legal requirements.
  3. Logs/security records: retained for a limited period as needed for security and operations.

9. Your Rights and Choices

Depending on your location, you may have rights to:

  1. Access personal information.
  2. Correct inaccurate information.
  3. Delete your information.
  4. Object to or restrict certain processing.
  5. Data portability.
  6. Withdraw consent where processing is based on consent.

To exercise rights, contact: help@getoma.app

You can also:

  1. Disable notifications in the App or device settings.
  2. Stop using the App at any time.

10. Account Deletion

You may request account deletion by contacting help@getoma.app or using any in-app deletion mechanism if available.

When deletion is completed, we remove or anonymize personal information unless we need to retain certain records for legal, security, or legitimate business reasons.

11. Security

We use reasonable technical and organizational safeguards to protect personal information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Children's Privacy

The App is not directed to children under 18. We do not knowingly collect personal information from children below the applicable age threshold.

13. California Privacy Notice (if applicable)

If you are a California resident, you may have rights under the CCPA/CPRA, including rights to know, delete, correct, and limit use/disclosure of sensitive personal information where applicable.

We do not sell or share personal information for cross-context behavioral advertising as those terms are defined under California law.

To submit a request, contact: help@getoma.app

14. Third-Party Services

The App relies on third-party services that have their own privacy policies. Review them here:

  1. Supabase: https://supabase.com/privacy
  2. Google: https://policies.google.com/privacy
  3. Firebase: https://firebase.google.com/support/privacy

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and provide additional notice when required.

16. Contact Us

For questions or privacy requests:

Email: help@getoma.app