Omriya
Privacy policy
Last updated
Omriya is a wishlist app for gift occasions. This page says what it stores about you, who can see it, and what you can do about it. Questions go to support@omriya.app.
Who we are
Omriya is made and run by its developer, a sole proprietor (ФОП) registered in Ukraine. The stores show the trader details they are required to show; the way to reach us is email. “We” on this page means the operator of Omriya, the controller of the data described here.
What we store
What you give us. The email address you sign in with, or the name and email Apple or Google pass on (a private relay address, if you chose one). Your display name and, if you add them, a birthday, a photo, a language and a currency. The people you keep wishes for, with the name you enter and, if you add them, a birthday and a photo; that is information about somebody else, and by entering it you confirm you may. Your wishes, lists, events and savings goals, as you typed them. Contributions to a goal are numbers you write down; Omriya never connects to a bank. Which wishes you reserved on other people’s lists, and when. What you write to us.
What the app records. Which screens are opened and what is done on them, as counts, ids and settings, so we can see what people use. Never a wish title, a list name, a person’s name, an email address, a price, a link or a search, and no session recording. The city and country a connection comes from, worked out from the IP address, which is then discarded. When something goes wrong, a crash report with the error, the app version, the device model and system version, and your account id; not your IP address. Our servers keep ordinary request logs, IP address included, for a short time.
From the stores. When you buy Omriya Plus, Apple or Google take the payment. We learn your plan, which store, which product and when it expires. We never see your card.
On your device. Your session, your settings, and the reminders you set. Reminders are scheduled by the app on the device and never leave it. Omriya sends no push notifications.
Who can see what
Your wishes are visible to you alone until you put them on a list and share it. We do not read them, and reach the database only to fix a problem you asked about.
A shared list is visible to anyone who has its link: the list’s name, the name of the person it is for, and each wish with its title, price, photo, link and description. The link is the access and it goes wherever you send it. Regenerate the link or close the list and the old link stops working. Photos are served from public addresses so that chat apps can draw a preview; a photo’s address that somebody saved keeps working after the list is closed.
Reservations are hidden from the person the list is for. Everyone else sees that a wish is taken, never by whom. If you keep a list for somebody else, you see that a wish on it is taken, and still not by whom. We hide reservations in the database, not only on the screen. We cannot stop a person who reserved something from telling.
Mail to people who reserved. When a wish somebody reserved is deleted, taken off the list, marked received or changed, we email them so they do not buy the wrong thing. The mail carries the wish’s title and the list’s name, which is what they could see by opening the list. Cancelling the reservation is how these mails stop.
Who handles it for us
We use other companies for hosting and database, email delivery, subscription receipts, usage analytics, crash reports and serving the web pages. Each handles data only on our instructions. Your data is stored in the European Union. Some of these companies are in the United States, and data reaches them under the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework. We do not sell personal data and do not share it with advertisers.
Cookies
The apps use no cookies. The web app and the shared list pages keep your session and an anonymous analytics id in your browser’s local storage. The website counts visits without cookies. Each of these notes the city and country a connection comes from, worked out from the IP address, which is then discarded. Nothing sets an advertising cookie.
How long we keep it
Your account and everything in it, until you delete the account in the app under Profile, Account. Deletion is immediate and removes every profile, wish, list, event, reservation, goal and photo; backups expire within thirty days. The subscription belongs to the store and is cancelled there. Usage records carry your account id and nothing that names you; after deletion the id points at nobody, and we remove the records on request. Crash reports are kept ninety days. Mail to people who reserved is deleted once sent. Mail to us is kept as long as we need it to help you, and deleted on request.
Your rights
Export everything from the app under Profile, Account: a JSON file with all the account holds, which never includes who reserved your own wishes. Correct any field in the app. Delete the account in the app. For anything else the law gives you, such as objecting or restricting, write to us; we answer within a month. You can complain to a supervisory authority: in Ukraine the Parliament Commissioner for Human Rights, in the EU the data protection authority where you live.
Where the law asks us to say why we process data: running the service you signed up for is performance of our contract with you; usage and crash records are our legitimate interest in seeing what works, built to carry nothing personal beyond an id; keeping payment records is a legal obligation; access to your camera or photo library happens only when you ask, and that is consent, withdrawable in your device settings.
Children
Omriya is for people aged 13 and over, or the age at which your country lets you agree to a service like this, if higher. A parent may keep wishes for a child as a person on the parent’s own account. If you believe a child holds an account, write to us and we delete it.
Changes
When this page changes, the date at the top changes. If a change matters to you, the app tells you before it takes effect.