Omniscient Desktop privacy policy

Last Updated: October 17, 2026

This Privacy Policy explains how Stellaxis OÜ ("Omniscient," "we," "us," "our") collects, uses, shares, and protects personal data when you use the Omniscient desktop application for macOS and Windows and its related support services (the "Services").

1. Who We Are

Controller: Stellaxis OÜ
Address: Ahtri 12, Tallinn, 10151, Estonia
Email: hello@omniscient-app.com

2. Scope

This Policy applies to personal data processed through:
1. Omniscient Desktop application for macOS and Windows
2. Desktop support communications
3. Infrastructure supporting the desktop application

3. Personal Data We Collect

We may collect the following categories of personal data:

3.1 Support Data

• Messages and issue reports you send us, conversation identifiers, and an app-installation support identity
• Your name or reply email address if you choose to provide them
• Technical diagnostics automatically included with support messages, such as app and OS versions, device memory, runtime information, and available error details
• Original input files and associated metadata if you explicitly choose to share them through an available support file-transfer feature

We may associate support records with analytics and diagnostic records using app or installation identifiers to investigate your request. These identifiers are pseudonymous; they are not a guarantee of anonymity.

3.2 Device and Technical Data

• Device model, OS version, app version
• Language/region, network information
• App/device identifiers

3.3 Usage and Analytics Data

• Feature interactions (page views, feature usage, settings changes, exports)
• Session activity, timestamps, performance metrics
• Desktop session replay of interface layout and interactions, including visible interface text, clicks, scrolling, and navigation; entered text in editable fields is masked as described below
• Onboarding inputs (e.g., experience level, tools used, discovery source)

We use PostHog session replay to understand interface problems and improve usability. Replay reconstructs the App interface and interactions; it is not a video recording of your desktop. Text entered into input fields, editable textareas, and editable content is masked before replay data is sent. Read-only and disabled textareas remain visible as interface output. Visible interface text may include names or other values displayed elsewhere after entry; masking an editable field does not automatically hide every later display of that value.

Images, video, audio, and 3D canvases are excluded from replay. Console logs and network request or response bodies and headers are not recorded in replay. Local file paths are redacted from replay data. These replay protections do not describe separate support messages, diagnostic uploads, or original files that you choose to share, which are covered in the relevant sections below.

3.4 Diagnostics and Logs

• Crash reports, stack traces, error messages, and performance diagnostics
• Diagnostic bundles containing application logs, processing context, and technical metadata about imported files and synchronisation

The App can upload diagnostic bundles automatically during processing or when reporting an issue. Logs and technical metadata may include project or file names and details of the operations performed. These diagnostic uploads are separate from the optional sharing of original input files through support.

3.5 Update and Release Validation Data

• App version and build, platform, architecture, release channel, and installation identifiers used for release validation and update delivery
• Connection information, including the IP address used to contact the service

3.6 Content and Project Data

• Video, audio, camera data, scans, calibration data, and metadata that you import or generate for local processing
• Original files and related metadata you explicitly choose to share for support, where that feature is available

Importing a project for desktop processing does not by itself upload all of its original media to us. Technical information about the project may be included in analytics or diagnostics as described above. If you choose to share original inputs for support, the shared package can include original recordings and their associated camera, calibration, and other metadata, which may contain personal information.

4. Sources of Data

We collect data:
1. Directly from you (support messages, inputs)
2. Automatically from your device and app usage
3. From service providers supporting the Services

5. How We Use Data (Purposes and Legal Bases)

We process personal data to:

1. Provide and operate the Services (desktop processing, synchronisation, support, and update delivery)
Legal basis: legitimate interests

2. Maintain security, prevent abuse, and protect integrity
Legal basis: legitimate interests; legal obligations

3. Debug issues, monitor performance, and improve quality
Legal basis: legitimate interests

4. Send support responses and operational communications
Legal basis: legitimate interests

5. Comply with legal and regulatory obligations
Legal basis: legal obligations

6. How We Share Data

We do not sell personal data.

We use the following providers for the desktop services:

• PostHog: product analytics and interface session replay, using app and installation identifiers, feature interactions, technical properties, and replay data described above.
• Sentry: crash and error monitoring, including error reports, stack traces, and technical context.
• Google Firebase Authentication: authentication of the App's support identity and access to support conversations.
• Render: hosting of our first-party support service and its database, which process support identities, conversations, messages, and associated technical diagnostics. Where original-input sharing is available and you choose to use it, that support service also handles the file transfer and storage.
• Google Cloud / Firebase: diagnostic-upload endpoints, storage of diagnostic bundles and related database records, and release-validation and update-delivery infrastructure.

These providers receive the data needed for the functions described above. This desktop notice does not describe payment processing for a separate website or iOS purchase; those activities are covered by the applicable website or iOS privacy policy.

We may also disclose data:
- To authorities or advisors when legally required
- In connection with a merger, acquisition, or asset transfer

All vendors process data only for contracted purposes.

7. International Data Transfers

Your data may be processed outside your country (including the United States).

Where required, we use appropriate safeguards (such as Standard Contractual Clauses) and additional protections under applicable law.

8. Data Retention

New session replay recordings are retained for 30 days. This period applies to recordings made under the current retention setting; older recordings may remain subject to the setting in effect when they were recorded. This session replay period does not describe retention of separate analytics events, crash reports, or support records.

Crash and error reports stored in Sentry are retained for 30 days. This period applies to Sentry records; separate application logs, uploaded diagnostic bundles, and support conversations have their own retention arrangements.

For other personal data, we retain it for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide and improve the Services, maintain security, and comply with legal obligations.

In some cases, data may be retained for an indefinite period, particularly where:
- It is required for ongoing operation of the Services
- It is necessary for debugging, analytics, or product improvement
- It is stored in backups or logs that are periodically overwritten

9. Security

We use reasonable technical and organizational safeguards, including encryption and secure transmission (HTTPS/TLS).

However, no system is fully secure.

You should maintain independent backups of important data.

10. Your Privacy Rights

Depending on your jurisdiction (including EU/UK and California), you may have rights to:

1. Access your data
2. Correct inaccurate data
3. Delete data
4. Restrict or object to processing
5. Data portability
6. Withdraw consent
7. Lodge a complaint with a supervisory authority

To exercise rights, contact: hello@omniscient-app.com

We may verify your identity before processing requests.

We do not sell personal data for monetary consideration.

11. Children's Privacy

The Services are not directed to children under 13 (or higher age where required by law).

If we discover unauthorized collection of children's data, we will delete it.

12. Third-Party Services and Links

Our Services may integrate or link to third-party services.
Their privacy practices are governed by their own policies.

13. Changes to This Policy

We may update this Policy periodically.

We will post updates and revise the "Last Updated" date.
Where required, we will provide additional notice or obtain consent.

14. Contact

Stellaxis OÜ
Email: hello@omniscient-app.com
Website: https://omniscient-app.com