Privacy Policy
Last updated: 19 October 2026
The short version
- We calculate your Human Design, Gene Keys and astrology from the birth details you enter, and we save your charts to your account so they sync across your devices.
- We use your email to send you your chart and to run your account. News about Omni only goes to you if you agree: in the EU, the UK and Switzerland you tick a box when you sign up, elsewhere you can switch it off at any time. Every email has a one-click unsubscribe.
- Payments go through Stripe. We never see or store your card number.
- We share data only with the service providers listed below, who process it for us. We never sell it.
- Ad measurement cookies are used only if you accept them in the cookie banner.
- You can see, download, correct or delete your data at any time. You can delete your account yourself from the profile menu.
1. Who is responsible
The controller of your personal data is Vital Alchemy LLC, a Wyoming limited liability company, business address 1032 E Brandon Blvd 4545, Brandon, FL 33511, USA, represented by its managing member Luciano Armani. Email: luciano@omnicharts.app.
We have not appointed a data protection officer, because the law does not require one for our activities.
2. What we collect and why
| What | Why | Legal basis (GDPR) |
|---|---|---|
| Birth date, time and place, the name you give a chart, and the chart results | To calculate, show and save your charts and sync them across your devices | Contract, Art. 6(1)(b) |
| Email address, and your name and profile picture if you sign in with Google | To create and secure your account, send your chart and sign-in links, and tell you about changes to your account | Contract, Art. 6(1)(b) |
| Gender (optional) | To word readings and reports correctly | Contract, Art. 6(1)(b) |
| Purchase details: plan, amount, billing country and address, Stripe customer ID (never your card number) | To sell and manage your plan, issue receipts and meet tax and accounting duties | Contract, Art. 6(1)(b); legal obligation, Art. 6(1)(c) |
| Product news by email | To tell you about new features and offers. You can switch this off in any email or in your email preferences | In the EU, the UK and Switzerland: only with your consent, Art. 6(1)(a), given by ticking the box when you sign up. Elsewhere: legitimate interest, Art. 6(1)(f) |
| Usage data: pages and features opened, device and browser type, approximate country, errors, and for signed-in members a recording of how the app was used (session replay, with typed text masked) | To find bugs, keep the app fast and understand which features help people | Legitimate interest, Art. 6(1)(f). You can object at any time |
| How you arrived: a marketing tag, the referring site, or a partner referral code | To know which channels and partners bring people to Omni, and to pay partner commissions | Legitimate interest, Art. 6(1)(f); consent where required for storage on your device |
| Ad measurement (Meta Pixel and Meta Conversions API) | To measure whether our ads work | Consent, Art. 6(1)(a), given in the cookie banner. Withdraw it at any time in the banner settings |
| Community posts, replies, profile name and picture, images you attach | To run the community | Contract, Art. 6(1)(b) |
| Bug reports and feedback you send, with any screenshots | To answer you and fix problems | Legitimate interest, Art. 6(1)(f) |
| Client charts that Pro members enter about other people | To run the Pro tools. For this data the Pro member is the controller and we process it on their behalf | The Pro member's own basis; we act under Art. 28 GDPR |
| Technical data: IP address, browser, time of request, sign-in cookies | To deliver the site, keep you signed in and protect it from abuse | Legitimate interest, Art. 6(1)(f) |
Omni computes readings automatically from your birth data. This never produces a decision with legal or similarly significant effects on you.
You do not have to give us any of this. Without birth details we cannot calculate a chart, and without an email we cannot create an account.
3. Cookies and storage on your device
- Always on, because the app needs them: the sign-in cookies (om_beta, om_tier), your saved charts, language and settings in your browser's storage, and the record of your cookie choice.
- Usage analytics (PostHog): in the EU, the UK and Switzerland, PostHog stores nothing on your device until you accept.
- Ad measurement (Meta): only after you accept in the cookie banner.
- Partner referral (om_ref): when you arrive through a partner link, a cookie remembers the partner for 30 days so they can be credited.
Fonts and the app's code are served from our own domain. Two exceptions: some code libraries load from public content networks (cdnjs by Cloudflare, esm.sh), and a font that a community member picks for a post loads from Google Fonts when you view that post. Those services see your IP address when they deliver the file.
4. Who receives your data
These providers process data for us under data processing agreements. They may use it only to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| Vercel Inc. | Hosting and running the app, and file storage (Vercel Blob) | USA, global edge network |
| Upstash Inc. | Database for accounts, saved charts and contacts | USA (US East) |
| Amazon Web Services (Amazon SES) | Sending email | USA (US East) |
| Resend Inc. | Backup email sending | USA |
| PostHog Inc. (EU Cloud) | Usage analytics, error tracking, session replay | Frankfurt, Germany |
| Stripe Payments Europe Ltd. and Stripe Inc. | Payments and subscriptions | Ireland, USA |
| Google LLC / Google Ireland Ltd. | Sign in with Google; place and time zone lookups for birth places (sent from our server, without your IP address) | Ireland, USA |
| GeoNames (Unxos GmbH) | Place and time zone lookups, sent from our server | Switzerland |
| Cloudinary Ltd. | Storing images you attach to feedback or community posts | USA |
| Web3Forms | Delivering the bug report and feedback form to us by email | USA |
| BunnyWay d.o.o. (bunny.net) | Streaming the Learn videos | Slovenia, global network |
| Google (YouTube, privacy-enhanced mode) | A few Learn videos are YouTube embeds that load only when you play them | USA |
| Meta Platforms Ireland Ltd. | Ad measurement, only with your consent. For collecting this data, Meta and we are joint controllers | Ireland, USA |
Stripe as reseller: for customers in the EU and the UK, Stripe sells the plan to you as merchant of record and handles payment, tax and receipts under its own privacy policy. For that sale Stripe is a separate controller.
Transfers outside the EU: Omni is run from outside the EU, and some providers are in the USA. Where a country has no EU adequacy decision, we rely on the EU-US Data Privacy Framework for certified US companies, or on the EU Standard Contractual Clauses. You can ask us for a copy of these safeguards.
We may also disclose data where the law requires it, or to protect our rights in a dispute.
5. How long we keep it
- Account and saved charts: as long as you have an account. When you delete your account, or ask us to, we delete it within 30 days. Backup copies are deleted within a further 90 days.
- Community posts: until you delete them. If you delete your account, posts that others replied to stay up, credited to "Deleted user", without your name or picture.
- Email address for news: until you unsubscribe or ask us to delete it. After you unsubscribe we keep your address on a do-not-email list, only so we never write to you again.
- Purchase records: as long as tax and accounting law requires, up to 10 years.
- Usage analytics: PostHog keeps events for up to 1 year and session recordings for up to 30 days.
- Bug reports and feedback: up to 2 years.
- Server logs: up to 30 days.
6. Your rights
Under the GDPR you have the right to:
- access the data we hold about you and get a copy (Art. 15);
- have wrong data corrected (Art. 16);
- have your data deleted (Art. 17). You can delete your account yourself in the profile menu;
- restrict how we use it (Art. 18);
- receive your data in a common machine-readable format (Art. 20);
- object at any time to processing based on legitimate interest, including analytics and product news (Art. 21);
- withdraw any consent at any time, without affecting what happened before (Art. 7(3)).
To use any of these rights, write to luciano@omnicharts.app. We answer within one month.
You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. In Germany, that is the data protection authority of your federal state.
7. Security
Data is encrypted in transit, the database is access-controlled, and sign-in uses signed links and secure cookies. Only Luciano Armani has administrative access.
8. Children
Omni is not intended for anyone under 16. Please do not use it if you are younger than that.
9. Changes
We will update this page when our practices change and show the date at the top. For important changes we will also tell members by email.
Contact
Questions or requests: luciano@omnicharts.app (Luciano Armani, Vital Alchemy LLC).