How Omaku handles your data.

Plain language. Only what is true today.

Last updated · 4 July 2026

1. What this notice covers

This notice covers both:

• the Omaku mobile app (iOS and Android), and
• the omaku.app landing site and the early-access waitlist you can join from it.

Omaku is a calm daily companion for older adults and the family who care for them — memories, reminders, medicines, to-dos, and a private family circle to share moments. This notice explains, in plain language, exactly what we collect and why.

2. Who is responsible

3. Omaku is local-first

You can use Omaku on your own — the Today screen, memories, reminders, medicines and to-dos — with no account and no internet. Used this way, your content lives only on your device; we never receive it.

Data leaves your device only when you choose to sign in and join or create a family circle. Then, and only then, your circle’s content is synced to our cloud so the family members you’ve invited can see it too.

4. What the app collects (when you sign in)

Account. When you sign in to use family features, we receive from your sign-in provider:

• your email address;
• your display name (you can edit it), used for the greeting and to show who sent a message;
• a user ID that identifies your account to the sync engine.

Content you create in a family circle. Synced so your invited family can see it:

• Memories — text, and any photos, videos or voice recordings you add;
• Family messages you send into your circle (text, photo, voice, video, or a “tap”);
• Reminders, to-dos and daily-moment answers;
• Medicines — names, doses, notes, an optional photo of the pill bottle, and a log of doses taken;
• Your family circle — its name, who is a member, and their roles.

Notifications. If you allow them, we store a device push token so we can notify you when your family sends something.

We do not collect your location, contacts, calendar, browsing history, or advertising identifiers. There is no advertising and no third-party analytics or tracking anywhere in Omaku.

5. What the landing site collects

If you submit the waitlist form on omaku.app, we receive your email address, the language the page was showing (so we can write to you in it), a source tag and timestamp for basic diagnostics. Our CDN provider Cloudflare also logs technical request data (IP address, user-agent, request path) for security; Cloudflare’s retention is in their privacy policy. The page sets no cookies and uses no ad or analytics trackers.

6. Why we process it, and the legal basis

• Running the app for you (syncing your circle’s content, delivering notifications, keeping you signed in): performance of our service to you and our legitimate interest in providing it — Article 6(1)(b) and 6(1)(f) GDPR.
• The waitlist email: your consent, given by submitting the form — Article 6(1)(a) GDPR. You can withdraw it any time.

7. Where your data lives, and who processes it

Your family-circle content is stored in the European Economic Area — on Amazon Web Services (AWS), Europe (Ireland) region, eu-west-1. The processors that handle data on our behalf are:

• Amazon Web Services (AWS) — cloud database, media storage, and account authentication for the app (in the EEA, eu-west-1).
• Google and Apple — when you choose “Sign in with Google” / “Sign in with Apple,” they verify your identity and share your email and name with us.
• Expo (Expo push service) — relays notifications to your device via Apple’s and Google’s push networks.
• Cloudflare — serves and protects the omaku.app landing site.
• Resend — stores the waitlist email list (landing site only).

We do not sell, rent, or share your data with advertisers, data brokers, or social platforms.

8. International transfers

Your family-circle content stays in the EEA (AWS Ireland). Some processors above (Google, Apple, Expo, Resend) are established in the United States, so limited data — such as your sign-in identity, a push token, or a waitlist email — may be transferred there. Those transfers are protected by the EU-U.S. Data Privacy Framework and/or standard contractual clauses.

9. Security

Data is encrypted in transit (HTTPS/TLS to api.omaku.app) and encrypted at rest on AWS. Access to production systems is restricted and authenticated.

10. How long we keep it

• Memories and other content you save are kept until you delete them or delete your account.
• Family-message media (photos, videos and voice you send into the feed) is automatically removed from our servers about 90 days after sending, unless you save it to Memories.
• Waitlist email: kept until you unsubscribe, ask us to delete it, or 12 months after launch if you never became a user.

11. Deleting your account and data

You can permanently delete your account at any time, right in the app: Menu → Settings → My account → Delete account. This erases your account and the personal data saved only to you, on your device and in our cloud. Content you shared into a loved one’s family circle stays with them, but is anonymised — your name is replaced with “Former member.” You can also email hello@omaku.app to request deletion.

12. Your rights under GDPR

You have the right to:

• Access the personal data we hold about you;
• Have inaccurate data corrected (rectification);
• Have your data deleted (erasure / “right to be forgotten”);
• Restrict or object to processing;
• Receive your data in a portable format;
• Withdraw consent at any time.

To exercise any of these rights, email hello@omaku.app. We will respond within 30 days as required by GDPR. There is no charge.

13. The supervisory authority

The relevant data protection authority is Persónuvernd (the Icelandic Data Protection Authority), Rauðarárstígur 10, 105 Reykjavík, Iceland. Website: personuvernd.is. You have the right to lodge a complaint there if you believe your data protection rights have been violated.

14. Children

Omaku is intended for adults (18+) and is not directed to children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, please contact us and we will delete it.

15. Changes to this notice

If we materially change how Omaku handles your data, we will update this page — and, for material changes, tell users in the app or by email before the change takes effect. The “Last updated” date at the top always reflects the current version.