Privacy Policy

1. Who handles your information

Your establishment decides why and how it uses workplace records, who joins its workspace, and which roles can access enabled features. Oomūli provides the service and handles account, service-operation, and support information. The legal operator, its address, and the allocation of controller and processor responsibilities must be confirmed in the approved policy and establishment agreement.

2. Information we receive

Account information includes email address, account identifier, preferred name, profile photo, status, and sign-in information. Establishments supply invitation addresses, roster names, memberships, and roles. If you choose a supported third-party sign-in method, the authentication provider supplies information needed to sign you in.

Workplace content may include channel and direct messages, thread replies, reactions, saved messages, attachments, voice recordings, schedules, shift notes, availability, time-off requests, incident descriptions and media, stock-list activity, and related history. Only enabled features apply. A record may contain information about coworkers or other people supplied by you or your establishment.

Service information includes read state, presence and typing signals, notification preferences and delivery records, push subscription details, timestamps, and security or usage records. Support includes the question or ticket you submit and diagnostics you choose to share. Hosting and infrastructure providers may process IP addresses, browser or device information, and request logs to operate and secure the service.

3. How information is used

Information is used to authenticate accounts, enforce access permissions, deliver workplace features, save preferences, synchronize activity, send configured communications, respond to support, investigate misuse, and maintain the service. Establishments use their records for their own workplace purposes and are responsible for explaining those purposes and any applicable legal basis.

Optional AI features process the content described below to answer a support question or translate selected text. Information must not be repurposed for unrelated uses without the notices, legal basis, and choices required by applicable law.

4. Who can see workplace information

Messages and attachments are available according to conversation membership and access permissions. Establishment roles govern access to schedules, incident records, time-off requests, and other workflows. Support tickets and reviewed diagnostic context may be available to authorized Oomūli support operators. Account and establishment administration may expose relevant identity, membership, and audit information to authorized administrators.

Private conversations use access controls rather than end-to-end encryption. Do not assume that every administrator can read every private message or that workplace records are visible only to their author. Ask your establishment about its roles and record-handling practices. People who can read a record may download, print, or copy it outside Oomūli.

Profile photos use public URLs and can be accessed by anyone with the link. Chat and incident attachments follow their respective access controls. A public profile photo should not contain information you need to keep private.

5. Service providers and other disclosures

Supabase supplies authentication, database, file storage, and real-time infrastructure. Web hosting serves the app. Where configured, Resend delivers email and browser or device push services deliver notifications. Those services receive information needed for their tasks, such as email addresses, generic notification links, or push subscription endpoints.

the configured AI provider (DeepSeek or OpenAI) processes content for the optional features described in the next section. Third-party sign-in providers process your chosen sign-in. The final provider list, contracts, processing locations, and provider retention must be confirmed before this policy takes effect.

Information may also be disclosed when legally required, to address security or misuse, or as part of a lawful business transfer with appropriate protections and notice. This draft does not establish whether any advertising, sale, or sharing as defined by privacy law occurs; those practices and any required opt-out mechanisms must be verified before publication.

6. AI support, translation, and audio

When enabled, Oomi sends a bounded support question, relevant prior support dialogue, selected help content, language and page hints, and limited support conclusions to the configured AI provider (DeepSeek or OpenAI). Personal schedule lookup routes use authorized service data rather than sending schedule results to the configured AI provider (DeepSeek or OpenAI). Do not put secrets or unnecessary workplace details in a support question.

Choosing Translate sends the selected authorized text to the configured AI provider (DeepSeek or OpenAI). The original remains available. Sending a voice message as an attachment shares the recording with its conversation recipients. For dictated text, use your device’s speech-to-text feature and review its privacy settings; Oomūli receives the text you submit.

A support ticket created through Oomi includes the support excerpt and context you review and confirm. AI providers' own retention, training use, and transfer safeguards require confirmation; this draft makes no promise of zero retention or exclusion from training.

7. Browser storage, permissions, and tracking choices

Browser storage supports sign-in sessions, language, appearance and accessibility choices, selected establishments, invitation handling, and message drafts. Draft text may remain in the current tab's session storage across reloads. Clearing browser data removes local information and may sign you out; it does not delete records stored by the service.

Microphone access is requested for recording. Browser notifications and background push require device permission. You can change these permissions in your browser or device settings. Notification preferences control optional delivery; authentication and invitation messages are separate.

Hosting cookies, analytics, cross-site tracking, advertising, and the treatment of Do Not Track or Global Privacy Control signals need an operational review before publication. No claim that these signals are honored or that the service has no cookies is made in this draft.

When product usage collection is enabled, Oomūli records fixed feature identifiers, theme and display preferences, observation times and short active-app intervals. A random identifier stored in this browser distinguishes its preferences from your other browsers. Account identifiers are used internally for deduplication and aggregate account counts; this metadata is not anonymous. Operator reports contain aggregate counts and durations, without workplace content, personal tip values, filenames or raw account/browser identifiers. The collector honors browser Do Not Track and Global Privacy Control signals. Missing or offline observations are not reconstructed. Metadata retention and deletion procedures require confirmation before live enablement.

8. Retention and deletion

Retention depends on record type, establishment instructions, service needs, legal obligations, and backup or security requirements. A schedule for workplace content, account data, support, logs, notifications, files, backups, and provider copies is pending confirmation. This draft does not promise a fixed deletion deadline.

Signing out, leaving a channel, archiving a conversation, or losing establishment access does not automatically delete its history. Editing or deleting a visible message does not guarantee removal from audit history, backups, recipients' copies, or retained files. Deletion requests require review of shared records, legal obligations, and applicable rights.

9. Your choices and privacy requests

You can edit available profile fields, choose language and accessibility preferences, manage optional notifications, and use available message controls. Ask your establishment to correct roster, scheduling, incident, or other workplace records. Account closure, data export, and privacy requests may require a separate process; this draft does not imply that a self-service deletion or export button exists.

Depending on where you live and which laws apply, you may have rights to access, correct, delete, or obtain a copy of information, object to or restrict processing, withdraw consent, or appeal a decision. Applicable California rights may include opting out of sale or sharing and limiting certain uses of sensitive information. Mandatory rights are not waived by these documents.

Send privacy requests to support@oomuli.com; you do not need an account to email us. Procedures for identity verification, authorized agents, responses, appeals, and complaints must be confirmed for the jurisdictions served before publication. For workplace records, the request may need to be coordinated with your establishment. Do not send passwords or unnecessary identification documents in a request.

10. Security and processing locations

The service uses authentication and permissions to limit access. No online service can guarantee absolute security. Keep your device and credentials secure, and report suspected account misuse promptly. Public profile photos and copies made by recipients have different exposure from access-controlled records.

Providers may process information in countries outside your own. The approved policy must identify relevant processing locations and any transfer safeguards required by applicable law. No specific hosting region, certification, or international transfer mechanism is promised by this draft.

11. Children and younger workers

Oomūli is a workplace service and is not directed to children under 13. Establishments must only invite people legally permitted to use it. Before publication, the operator must confirm the minimum age and any notices or permissions required for younger workers in the jurisdictions served. If you believe a child has supplied information improperly, use the confirmed privacy contact to request review.

12. Policy updates and contact

An approved policy should display its effective date and version and explain how material changes are communicated. New purposes for previously collected information require any notice and consent or other legal basis required by law.

For privacy questions or requests, email support@oomuli.com. Oomūli is based in Washington, United States. The operator’s legal name, mailing address, and effective date are pending confirmation. Signed-in users can also ask for service support through Oomi. Former users and other affected people can use the email contact without signing in.