Privacy Policy
Omoi Station · Last updated 26 September 2026
Omoi Station is designed so that it never needs to see your data. There is no Omoi account, no Omoi server holding your library, no analytics, no advertising, and no tracking. This policy explains what that means in practice, and is deliberately specific about the few moments the app does talk to the network.
The short version
- We do not collect, store, sell, or share your personal data. Your library is never kept on a server of ours.
- What you save lives on your device and in your own iCloud account.
- While you try Omoi, your saves are classified by Omoi Cloud, Omoi's own server: each save's text is sent to it to work out what the save is, and is not kept. After an included number of saves, classification moves to your device unless you subscribe. You can choose on-device classification at any time in Settings, and then nothing is sent.
- You can also optionally choose a third-party AI provider with your own key. Either way, the text of a save is sent for classifying it only. Search always happens on your device.
- The app fetches the pages you save and looks up details about them from third-party services. Those services see the request and your IP address, as they would if you opened the page in a browser. They are not told who you are.
Information we collect
Nothing that identifies you. Omoi Station has no user accounts, no sign-up, no analytics SDK, and no crash reporting service. The one thing that reaches us is Omoi Cloud's usage record, described below: a one-way hashed identifier with counts and costs, never your name, email, Apple Account details, or what you saved.
Information the app stores, and where
| What | Where it lives | Leaves your device? |
|---|---|---|
| Items you save — links, notes, screenshots, video, titles, images, who shared them | On device, and mirrored to your own iCloud private database (iCloud.app.omoistation) |
Only to your own iCloud |
| Search index, embeddings, similarity graph, subject taxonomy | A local-only database on the device | No — never synced, and rebuildable from scratch |
| Theme, app settings, the weekly digest schedule | On device | No |
| Optional third-party API keys you enter yourself | The device keychain | No |
Your saved library is synced using Apple's CloudKit to the private database of your own iCloud account. We cannot read it. Apple processes it as your iCloud provider under Apple's Privacy Policy. If you are not signed into iCloud, everything simply stays on the device.
Omoi Cloud (included while you try Omoi, or by subscription)
When you start using Omoi Station, and whenever you subscribe to Omoi Cloud, each save's title and page text is sent to Omoi's own server to classify it, instead of running on your device or through a third-party provider you chose. In that case:
- We keep none of it. The text is used to produce the classification and is not stored or logged. Our operational telemetry records only counts, timings, cost, and a one-way hashed identifier — never your URLs, titles, or page text.
- We do not know who you are. To keep one allowance per person rather than per install, the app sends Apple's signed record of your subscription or, while you are trying Omoi, of your download of the app. The server checks Apple's signature, then keeps only a one-way hash of that record's identifier, with how much Omoi Cloud you have used. It is not an account, and it carries no name, email, or Apple Account details.
- A provider still does the inference. Omoi's server forwards the text to a third-party model provider under contract not to train on it or retain it; the provider sees the text and Omoi's server address, not you.
- It is your choice, and reversible. Choosing On-device in Settings → Classifier, at any time, returns classification to your device and nothing further is sent. So does using up the included allowance without subscribing, or letting a subscription lapse.
When the app uses the network
Omoi Station makes network requests to work out what you saved and to fill in detail about it. It never sends an account identifier, device identifier, or advertising identifier, because it does not have any.
1. The page you saved. The app fetches the URL directly to read its title, image and
description. That website sees the request and your IP address, and a request header
identifying the app (OmoiStation/1.0) — much as your browser would.
2. Detail lookups. To enrich a save, the app sends a search term derived from the item — typically its title, or an identifier already present in the URL — to whichever of these services is relevant to the kind of thing you saved:
| Service | Used for | Their policy |
|---|---|---|
| Apple Music / iTunes Search | music and app metadata | Apple |
Apple Maps (MKLocalSearch) |
places — address, phone, website | Apple |
| MusicBrainz & Cover Art Archive | tracklists, credits, artwork | MetaBrainz |
| TVmaze | series and episode data | TVmaze |
| Open Library | book editions and covers | Internet Archive |
| GitHub | software repository details | GitHub |
| Reddit, Hacker News (Algolia), Google News | discussion and reviews about a save | Reddit · Algolia · Google |
| YouTube, Vimeo, Spotify, SoundCloud | embedded previews and thumbnails | Google · Vimeo · Spotify · SoundCloud |
| TMDB and OMDb | film and television data | TMDB · OMDb |
TMDB and OMDb are off unless you turn them on: they require an API key that you create yourself and enter in Settings. The key is stored in your device keychain and used only to sign requests to that service.
3. Music identification. If you share a clip and the app identifies the music in it, ShazamKit computes a numerical signature of the audio on your device and sends that signature — not the audio, and nothing that identifies you — to Apple's music catalogue to find a match.
4. Speech model downloads. The first time the app transcribes speech in a given language, Apple's Speech framework may download a language model from Apple. The transcription itself runs entirely on your device.
5. Optional third-party classification (BYOK). Off by default. If you choose a model provider in Settings → Classifier and enter your own API key, then — and only then — the app sends the readable text of each save (its title and page text) to that provider so its model can classify it. You choose the provider and pay them directly under your own account; Omoi has no server in between. Your key is stored in your device keychain and used only to sign requests to that provider. Clearing the field and choosing "On-device" switches classification back to the on-device model, and nothing further is sent.
| Provider | Used for | Their policy |
|---|---|---|
| Anthropic | classifying a save (if selected) | Anthropic |
| OpenAI | classifying a save (if selected) | OpenAI |
| OpenRouter | classifying a save (if selected) | OpenRouter |
OpenRouter is a router rather than a model host: text sent to it is forwarded to whichever company serves the model you picked, under that company's own terms. Which company that is depends on the model name you enter, and OpenRouter publishes the routing for each model on its site. If you would rather your saves reached exactly one named company, choose Anthropic or OpenAI instead.
On-device intelligence
Classification, subject labelling, text extraction from images, speech transcription, and
similarity are performed on your device, using Apple's on-device frameworks
(FoundationModels, Vision, SpeechAnalyzer) and the app's own local logic. The
content of your saves is not sent anywhere to be categorised or summarised — except while
Omoi Cloud classifies them (while you try Omoi, or by subscription), or if you opt into a
third-party classification provider, as described above. Everything else stays on device
regardless.
Notifications
The optional weekly digest reminder is a local notification scheduled on your device. No push server is involved and we are not told whether you enable it.
Retention and deletion
You are in control of all of it:
- Delete an individual item in the app.
- Delete the app to remove everything stored on the device, including the local index.
- Remove the synced copy at any time in Settings → your name → iCloud → Manage Account Storage → Omoi Station.
Because we hold no copy of your data, there is nothing for us to delete on request, and no data export to provide beyond what is already in your iCloud account. Omoi Cloud's usage record (a hashed identifier and counts) holds nothing you saved and cannot be linked back to you by us.
Children
Omoi Station is not directed at children under 13, and we do not knowingly collect information from anyone — of any age — because we collect no information at all.
Your rights
Where the UK GDPR, EU GDPR, CCPA or similar laws give you rights over personal data held by a company, there is very little here for them to act upon: your library never reaches us, and Omoi Cloud processes a save's text only for the moment it takes to classify it. What we keep is the pseudonymous usage record above. Data held in your iCloud account is subject to your rights against Apple as its processor. Questions: privacy@omoistation.com.
Changes
If this policy changes we will update the date at the top of this page, and note substantive changes in the app's release notes.
Open source
Omoi Station is open source under the MIT licence. Every claim on this page can be checked in the code at github.com/pdcgomes/omoi-station.
Contact
Questions about privacy: privacy@omoistation.com