European privacy rights

Controller and purposes

Omnibus, Ltd operates this product website; use the privacy contact below to reach the operator. Website messages are processed to answer requests and handle related pre-contract steps where relevant. Security and necessary site operations rely on legitimate interests, subject to applicable law. Optional analytics relies on your consent.

Desktop app error reports (Sentry)

The desktop app sends error reports to Sentry (Functional Software, Inc., USA), which processes them for us as a processor. A report contains the error type and message with the home folder, user name, quoted texts and paths removed; the stack trace; the app version; the operating system and its version; the computer model and processor architecture; a random installation identifier; and the IP address of the computer that sends it, which Sentry may store with the report. Reports never contain your photos, videos or their contents, the names of your files, folders or phones, or license keys.

Crash reports are always sent; other error details and logs only while Settings > Photos & privacy > Send diagnostics is on (on by default; you can turn it off at any time). The legal basis is our legitimate interests in keeping the app stable and secure (Art. 6(1)(f) GDPR and UK GDPR). You can object by turning Send diagnostics off; crash reports stay on because we need them to fix crashes. Reports are transferred to the USA under Sentry's data processing terms with Standard Contractual Clauses and kept for 90 days, Sentry's default retention.

Licenses and purchases (Lemon Squeezy)

Website purchases of a license are handled by Lemon Squeezy (Lemon Squeezy, LLC, USA) as the merchant of record, under its own privacy policy; it processes your payment details and we never see your card. To deliver, activate and support your license, we receive your email address, the order number and the product and plan, and the app sends Lemon Squeezy the license key and a short computer label such as "Mac 3f9a". The legal basis is performance of a contract (Art. 6(1)(b) GDPR and UK GDPR). This data is processed in the USA; ask the privacy contact about transfer safeguards. Lemon Squeezy is a Stripe company: card payments are processed on the infrastructure of Stripe, Inc. on Lemon Squeezy's behalf, and we never receive card data.

Make a request

Depending on the applicable law, you may request access, correction, erasure, restriction or portability, object to legitimate-interest processing and withdraw consent. Describe the request without sending extra identity documents or your photo library. We may ask for proportionate verification and explain any legal reason information must be retained. You can also complain to your supervisory authority.

Providers and transfers

Hosting, contact verification, message storage and consented analytics can involve Cloudflare, Vercel and Google outside your country. Ask the privacy contact about applicable transfer safeguards and provider details. The local desktop copy process is distinct from this website processing and does not require uploading your photos to those providers.