OmniTrack Privacy Policy

1. Data Controller

The data controller responsible for your personal data is OmniTrack, based in Spain. For any questions regarding the processing of your data, you can contact us at omnitrackmedia@gmail.com.

2. Information We Collect

To provide you with media tracking services, we collect the following data:

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contractual necessity (Art. 6(1)(b)): Processing your authentication data and user-generated content is necessary to provide the OmniTrack service you signed up for.
• Legitimate interest (Art. 6(1)(f)): We collect technical and usage data to maintain app stability, prevent abuse, and improve the service.
• Consent (Art. 6(1)(a)): OmniTrack currently shows no ads, so no processing is based on advertising consent. If advertising is reintroduced, we will first request your consent within the app (where required) and update this policy beforehand.

You may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal.

4. How We Use Your Information

We use the data collected to:

• Provide and maintain your library sync features.
• Manage your user account and secure authentication.
• Personalize your experience within the app.
• Send technical notifications or service updates.

5. Third-Party Services

OmniTrack relies on the following third-party services that may process your data:

• Clerk — authentication and identity management.
• Convex — server-side data storage.
• Vercel — hosting of the website omnitrack.media.
• Expo (EAS Update) — delivery of app updates; receives device and app version metadata when the app checks for updates.
• Google (OAuth) and Apple (Sign In) — social login identity providers.

We also interact with external APIs to retrieve media metadata (covers, synopses, etc.):

• TMDB (movies and TV).
• IGDB / Twitch (video games).
• Google Books (books).
• Open Library / Internet Archive (books and authors).
• Inventaire (books and authors).
• Wikidata and Wikipedia, operated by the Wikimedia Foundation (books and authors).

OmniTrack does not share your personal data or private reviews with these media APIs. Requests to them are made from our servers, not from your device, and only contain anonymous search queries or media identifiers.

The exception is images (posters, covers, and author photos): the app loads them directly from these providers’ image servers (image.tmdb.org, images.igdb.com, books.google.com, covers.openlibrary.org, upload.wikimedia.org, inventaire.io), so those servers can see your device’s IP address.

6. Advertising

OmniTrack currently shows no advertising. The Google Mobile Ads SDK included in the app is not initialized and makes no ad requests, so no advertising identifiers (such as the IDFA or Google Advertising ID) or ad interaction data are collected.

If advertising returns in the future, we will first request your consent within the app (including Apple’s App Tracking Transparency prompt where applicable) and update this policy before any ads are shown.

7. Data Storage and Security

Your data is stored securely using Convex infrastructure. We implement standard security measures to protect your information against unauthorized access, alteration, or destruction.

All communication between the app and the server is conducted via encrypted protocols (HTTPS).

8. International Data Transfers

OmniTrack uses third-party services (Clerk, Convex, Vercel, Expo) whose servers are located in the United States. This means your personal data may be transferred to and processed outside the European Economic Area (EEA).

These transfers are safeguarded by Standard Contractual Clauses (SCCs) approved by the European Commission, or by the EU-U.S. Data Privacy Framework where applicable. You can request more information about these safeguards by contacting us.

9. Data Retention

We retain your personal data for as long as your account is active and as needed to provide the service.

When you delete your account, your data is removed immediately from our live systems. Backup copies, if any, are retained for up to 30 days before being overwritten.

OmniTrack does not currently collect advertising data, so none is retained.

10. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Correct any inaccurate or incomplete information.
• Erasure: Delete your account and all associated data through the app settings.
• Portability: Request a copy of your data in a structured, machine-readable format.
• Restriction: Request that we limit the processing of your data under certain circumstances.
• Objection: Object to the processing of your data based on legitimate interests.
• Withdraw consent: Where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with a supervisory authority. If you are in Spain, you may contact the Agencia Española de Protección de Datos (AEPD) at aepd.es. If you are in another EU/EEA country, contact your local data protection authority.

To exercise any of these rights, contact us at omnitrackmedia@gmail.com.

11. Children’s Privacy

OmniTrack is not directed to children under 13 years of age. We do not knowingly collect personal information from minors. If we discover that a child under 13 has provided us with data, we will delete it immediately.

12. Changes to This Policy

We may update our Privacy Policy periodically. We will notify you of any significant changes by posting the new version within the application. We encourage you to review this policy regularly.

13. Contact

If you have questions about this Privacy Policy, want to exercise your data rights, or have concerns about our data practices, you can contact us at:

OmniTrack

Spain

Email: omnitrackmedia@gmail.com

Account Deletion

You can delete your account from the app settings. For step-by-step instructions and data removal details, see: