Privacy Policy

Last updated September 21, 2026

Olomir ("we", "us") respects your privacy. This policy explains what we collect, why, and the choices you have. It is written to be read, not to be survived.

Who runs Olomir

Olomir is built and operated by the Olomir team. There is no advertising business, we do not sell your data, and we do not hand it to anyone outside of what it takes to run the service. Questions and data requests go to support@olomir.com.

What we collect

Account information — the email address and sign-in identifier you use to log in: Sign in with Apple, Google, or email with a verification code.
Content you create — notes, to-dos, chat messages, journal entries, goals, habits, images, and personal notes you record in the app. This may include sensitive personal information you choose to record (such as moods, reflections, or health-related notes); we treat it as private to your account.
Data you bring in through device permissions — calendar events, photos you attach, text transcribed from your voice, and your approximate location if you grant access to it. See "Device permissions" below for exactly what leaves your device.
Preferences — timezone, language, day-start time, and nickname.
Usage data — usage counts for AI features, and a small set of product events that carry no text of yours (app opened, sign-in completed, sign-up step reached). These events never contain the content of your entries.
Device anti-abuse identifier — to determine trial eligibility and prevent repeated claims, we process a limited identifier associated with the device. It is not used for advertising or cross-app tracking.
Push token — if you enable notifications, the anonymous token your device issues so reminders can reach it.

Device permissions

Every permission below is optional, is asked for only when you first use the feature it belongs to, and can be revoked at any time in your system settings. They exist only to make the experience smoother — grant none of them and Olomir is still complete.

Microphone and speech recognition — used for voice input. The transcription is performed by your device's built-in speech service (Apple on iOS, Google on Android), and the audio never reaches us: we receive only the resulting text, in the input box, and only if you then send it. Because the system service does the work, Apple's or Google's own privacy policy governs how the audio is handled on their side.
Calendar — used so the assistant can plan around what is already on your schedule. For events inside your sync window, the title, start and end time, location, and the name of the calendar are copied to your Olomir account, which means they are visible to the assistant in the same way your own entries are. Event notes, attendees, and invitee email addresses are never read. You choose the sync window when you first connect a calendar, including "don't import" — and revoking the permission stops any further syncing. Events already imported stay in your account until you delete them, like anything else you record.
Photos and camera — used to attach an image to what you record and to save images you export back to your photo library. We access only the specific images you pick or capture, never your library as a whole.
Notifications — used for reminders and daily briefings you have asked for. Delivery goes through Apple's and Google's push services, which see the notification text in transit.
Approximate location — only if you grant it, used to add a local weather note to your daily briefing. Your most recent location is stored on your account for that briefing, used for nothing else, and deleted with your account.

How we use it

To provide the core features of Olomir, including the AI assistant that organizes and summarizes what you record ("AI Organize" can be turned off).
To personalize responses, authenticate you, manage usage limits, and keep the service stable and secure.

We do not sell or rent your personal data, we do not share it for cross-context behavioral advertising, and we do not use your content to train AI models.

AI processing

Olomir is an AI assistant. When you use an AI feature — chatting with the assistant, letting it organize what you record, generating summaries and daily briefings — the relevant chat messages, journal content, and uploaded images are sent to third-party AI providers that process them solely to generate responses, classify your entries, and support assistant features.

Not everything goes through a model. If you record something yourself with "AI Organize" turned off, that content is not sent to any AI provider and no AI processing record is created for it — it is simply stored in your account exactly as you wrote it. AI processing happens only when you actually use an AI feature.

How requests are routed. These requests are forwarded to model providers — such as Google, OpenAI, and Perplexity — through a third-party AI routing service. On our routing account, training permission is disabled and zero data retention is enabled, so requests are only sent to providers that neither train on them nor keep them after the response is generated.

No human review. No one at Olomir reads your entries or your chats. When a bug needs reproducing, it is reproduced on a test account of our own. The only content of yours we ever see is content you deliberately send us: when you submit feedback you may attach the specific assistant reply you are reporting, and that attachment is a toggle you control — turn it off and we see only the description you wrote.

Search and memory. So you can search your own history by meaning rather than exact words, each entry gets a search index of its own. It cannot be read back as text, and it disappears the moment the record is deleted. Separately, the assistant keeps a short list of things it has learned about you so it does not have to ask twice. You can read, edit, and delete that list yourself under Me → Memory.

Data the assistant derives. Organizing your entries produces derived data — tags, categories, daily counts, and a rough read of emotional tone. It lives in your account under the same rules as everything else and is deleted with it.

Third-party services

A cloud infrastructure provider — database, authentication, and file storage. Your account and everything in it lives here.
An AI routing service — when you use an AI feature, the request is forwarded through it to the model providers listed above; training is disabled and zero data retention is enabled on our account. Nothing passes through it when you are not using an AI feature.
A product analytics provider — receives only the events listed under "What we collect", tied to your account, your sign-in method, and your interface language. Session replay and automatic capture are switched off, so the text of your entries, notes and chats never reaches it.
An email service provider — sends transactional email: verification codes, password resets, and occasional service email. We record whether a message was delivered, bounced, or reported as spam so we can tell when our email is broken.
Apple Push Notification service and Firebase Cloud Messaging — deliver notifications to your device.
A subscription management provider — processes App Store purchase identifiers, subscription status, product, renewal, refund and entitlement events so we can provide and restore Premium access. It never receives your journal content.
Open-Meteo — if you grant location permission, your approximate location is sent to Open-Meteo to fetch the local forecast, with no account or identifier attached.
Contributor wall — if you explicitly opt in after a contribution of yours is accepted, we publish only a server-generated masked email label and an administrator-written contribution title. Your full email address is never published, and you can withdraw the display at any time.

Where your data is stored

Your account and its contents are stored in Singapore. Product analytics are processed in the United States. AI requests are processed wherever the model provider operates, without being retained. If you are in the EU, the UK, or another region with transfer rules, using Olomir means your data is processed outside that region.

Data security

Data is encrypted in transit (HTTPS/TLS) and at rest.
Your records are isolated per account — only your account can read what you wrote.
Deleting your account requires you to re-authenticate, so a borrowed unlocked phone cannot erase your account.

No method of transmission or storage is 100% secure, so we cannot guarantee absolute security.

Deleting things, and how long we keep them

Deleting an entry. Deleted entries go to Trash. From that moment the assistant can no longer see them: they are excluded from every context the AI reads. They stay recoverable by you for 30 days, after which the entry and any attached images are permanently deleted from our systems. You can also delete an item from Trash yourself, which erases it immediately.

Deleting your account. You can delete your account in the app at any time. This permanently removes your entries, tasks, chat messages, images, memories, and profile data, unregisters your device from notifications, and revokes Olomir's Sign in with Apple authorization.

Feedback you submitted, and the record of any reward given for it, is kept as an independent log of how feedback was handled; after account deletion it is no longer connected to you.

Limited transaction, entitlement, device anti-abuse and audit records may also be retained where necessary to process refunds, restore purchases, prevent repeated claiming of the free experience, comply with the law, or resolve disputes. Deleting your Olomir account does not cancel an Apple subscription; cancel it in your Apple account settings.

Exporting your data

Settings → Export produces a Markdown timeline of what you wrote, the assistant's text replies, and your long-form pieces — grouped by day and readable as-is — and can save the images you uploaded to your photo library. The export screen lists exactly what is included and what is not, so you are never left thinking you exported something you did not.

Your choices

Turn AI Organize off and nothing you record is sent to a model.
Revoke microphone, calendar, photos, notifications, or location at any time in system settings.
Read, edit, or delete what the assistant remembers about you under Me → Memory.
Recover or permanently erase anything you deleted, in Trash.
Export everything, in Settings → Export.
Delete your account, in the app, without emailing anyone.

Your rights

Depending on where you live, you have rights to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Most of these you can exercise yourself using the controls above; for anything else, email support@olomir.com and we will respond within 30 days.

Where the GDPR applies, we process your data to perform our agreement with you (providing the app), on the basis of legitimate interests (keeping the service secure and working), to comply with legal obligations, and — for sensitive information you record and for every device permission — on the basis of your consent, which you can withdraw at any time. You also have the right to complain to your local data protection authority.

Where the CCPA applies: we do not sell or share your personal information, and we have not done so in the preceding twelve months. We will never discriminate against you for exercising a privacy right.

If something goes wrong

If a breach affects your personal data, we will notify affected users without undue delay and notify the relevant supervisory authority within 72 hours where the law requires it.

Legal requests

We will disclose your data to a government or law enforcement body only where we are legally required to. We will limit any disclosure to what is actually demanded, and we will tell you it happened unless we are legally prohibited from doing so.

Children

Olomir is not intended for anyone under 13, and we do not knowingly collect their personal information. Where local law sets a higher age of digital consent — 16 in parts of the EU — that age applies instead. If you believe a child has given us personal information, email us and we will delete it.

Changes

We may update this policy. The "last updated" date above always reflects the current version, and material changes will additionally be announced in the app or by email before they take effect.

Contact

Questions about privacy, or want to exercise your data rights? Email support@olomir.com or visit www.olomir.com.