Privacy Policy

This Privacy Policy explains how OmniScrypt Studio, a software development business operating under an assumed business name registered in the State of Idaho (“OmniScrypt Studio,” “we,” “us,” or “our”), collects, uses, discloses, and protects information in connection with the website at omniscryptstudio.com (the “Website”).

OmniScrypt Studio is the “controller” (or, under California law, the “business”) responsible for the personal information described here. This policy is incorporated into our Terms of Use. Our contact details are in Section 19.

Each of our applications collects different information for different purposes and is covered by its own Privacy Policy, which you accept inside that application and which is available in the application and on that application's own website:

• BloodlineAI — genealogy and DNA research. Governed by the BloodlineAI Privacy Policy and, for residents of Washington, Nevada, and Connecticut, the BloodlineAI Consumer Health Data Privacy Policy.
• Akashic Compass — guidance, reflection, and personal tracking. Governed by the Akashic Compass Privacy Policy.
• PillTally — medication tracking, in development. Will be governed by its own Privacy Policy on release.

This policy also does not apply to information you provide to the Apple App Store, Google Play, or any other third-party service, or to any website we link to. If you want to know how an application handles your information, read that application's policy — not this one.

The Website is a brochure site. There are no accounts, no logins, no purchases, and no user-generated content. We collect only the following.

3.1 Information you give us through the contact form

If you choose to send us a message, we collect what you type into the form:

• your name (either a full name, or a first and last name, depending on your screen size);
• your email address;
• a website or URL, if you choose to enter one (this field is optional); and
• the contents of your message.

Your submission is delivered to us by email. We do not maintain a separate database of contact-form submissions; the message lives in our email inbox and in the logs our web host keeps for outgoing mail.

3.2 Information you give us by emailing us directly

If you write to support@omniscryptstudio.com or legal@omniscryptstudio.com, we receive your email address, any name or signature block you include, and whatever you choose to tell us, together with the ordinary technical headers your mail provider attaches.

3.3 Information collected automatically by our web host

Like essentially every website, ours runs on a server that keeps standard access logs. These logs are created by our hosting provider, not by any tracking code we added, and typically record:

• your Internet Protocol (IP) address;
• the date and time of your request;
• the page or file requested and the response status;
• your browser type, version, and operating system (from the user-agent string);
• the referring page, if any; and
• the approximate region an IP address is associated with.

We use these logs to keep the Website running, to diagnose errors, and to detect and stop abuse such as spam submissions, scraping, and attacks. We do not use them to build a profile of you, and we do not link them to your identity.

We think it is as useful to tell you what is absent as what is present. On this Website:

• there are no advertising networks, ad pixels, conversion trackers, or retargeting tags;
• there is no third-party analytics — no Google Analytics, no Meta Pixel, no heatmap or session-recording tools;
• there are no social-media embeds, share widgets, or login buttons;
• there are no accounts, passwords, or user profiles;
• we do not process payments and never see a payment card number;
• we do not operate a newsletter or mailing list, and we will not add you to one because you used the contact form;
• we do not buy personal information from data brokers or append data from outside sources;
• we do not use your information to train, fine-tune, or evaluate any artificial-intelligence model, and we do not feed contact-form messages into any AI system; and
• we do not make automated decisions that produce legal or similarly significant effects about you, and we do not engage in profiling.

This Website does not set any cookies of its own. We do not use advertising, analytics, personalization, or preference cookies, and there is nothing to consent to or opt out of. Your browser may cache page files and fonts as part of its normal operation; that cache lives on your device and is not readable by us.

If this ever changes — for example, if we add privacy-respecting analytics or a preference cookie — we will update this Section, revise the “Last Updated” date, and, where consent is required, ask for it before setting the cookie.

We want to be precise about this, because it is the one place where a third party sees a request from your browser.

These providers act as our service providers or processors. They are permitted to use the information only to provide their service to us, and are not permitted to sell it or use it for their own marketing. Each has its own privacy policy, which governs its own practices.

We use the information described in Section 3 for these purposes and no others. Where the laws of the European Economic Area or United Kingdom apply, the corresponding legal basis is noted in brackets.

• To read and answer your message. To understand what you asked, reply to you, and follow up if needed. [Legitimate interests; steps taken at your request prior to entering a contract.]
• To route your message correctly. To forward an application-specific question to the right support address. [Legitimate interests.]
• To operate, maintain, and secure the Website. To serve pages, diagnose errors, prevent and investigate spam, scraping, fraud, and attacks, and keep the site available. [Legitimate interests; legal obligation.]
• To comply with law and protect rights. To respond to valid legal process, enforce our Terms of Use, and protect the rights, property, and safety of OmniScrypt Studio, our users, and the public. [Legal obligation; legitimate interests.]

We do not use your information for marketing, advertising, profiling, or product research, and we do not use it for any purpose that is materially different from, unrelated to, or incompatible with the purposes described here without telling you first.

We share personal information only in the limited circumstances below.

• Service providers. Our hosting and email providers, described in Section 6, process information on our behalf and under our instructions.
• Legal requirements. We may disclose information if we believe in good faith that disclosure is required by law or legal process, or is reasonably necessary to protect the rights, property, or safety of OmniScrypt Studio, our users, or the public. Where we are legally permitted to do so, we will notify you before responding to a request for your information, unless doing so would be unlawful, would endanger someone, or would be futile.
• Professional advisers. Our attorneys, accountants, and insurers, when reasonably necessary and under a duty of confidentiality.
• Business transfer. If OmniScrypt Studio is involved in a merger, acquisition, financing, reorganization, or sale of all or substantially all of its assets, information may be transferred as part of that transaction. We will require the recipient to honor this policy, or give you notice and a choice before your information becomes subject to a materially different policy.
• With your direction. When you ask us to share information, or direct us to do so.

We do not disclose personal information to advertisers, data brokers, marketing partners, or artificial-intelligence developers, and we do not permit any service provider to use it for those purposes.

OmniScrypt Studio does not sell personal information, and does not share personal information for cross-context behavioral advertising, as those terms are defined by the California Consumer Privacy Act and comparable state laws. We have not done so in the twelve months preceding the Effective Date of this policy. We also do not sell or share the personal information of any consumer we know to be under 16 years of age. Because we do not sell or share, there is no opt-out to offer — but if that ever changes, we will update this policy and provide a clear opt-out mechanism before any such activity begins.

We use reasonable administrative, technical, and physical safeguards appropriate to the very limited amount of information this Website handles. These include serving the Website over encrypted HTTPS connections, keeping the number of people with access to our inboxes to a minimum, protecting our accounts with strong credentials and multi-factor authentication, validating and filtering contact-form input to block injection and spam, and collecting no more than we need in the first place — which is the most effective safeguard of all.

No method of transmission or storage is completely secure, and email in particular is not a confidential channel. We cannot guarantee absolute security, and you send information to us at your own risk. If we become aware of a security breach affecting your personal information, we will notify you and any regulator as required by applicable law.

Depending on where you live, you may have some or all of the following rights regarding personal information we hold about you. We extend these rights to every visitor, regardless of state of residence, to the extent they apply to the small amount of information described in this policy.

• Know and access. Confirm whether we hold personal information about you and obtain a copy, along with the categories collected, the sources, the purposes, and the categories of recipients.
• Correct. Ask us to correct inaccurate personal information.
• Delete. Ask us to delete personal information we hold about you.
• Portability. Receive a copy in a portable, readily usable format, where technically feasible.
• Opt out of sale, sharing, targeted advertising, and profiling. We do not do any of these, as explained in Section 9, so there is nothing to opt out of.
• Limit use of sensitive personal information. We do not collect sensitive personal information through the Website.
• Non-discrimination and non-retaliation. We will never deny you service, charge you a different price, or provide a different level of quality because you exercised a privacy right.
• Withdraw consent. Where we rely on consent, you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

How to make a request

Email support@omniscryptstudio.com with the subject line “Privacy Request” and tell us what you would like us to do. Please write from the email address you used to contact us, or give us enough detail to locate your information.

Verification. Before we act on a request to access, correct, delete, or port information, we must reasonably verify that the request comes from you. Because the only identifier we usually hold is an email address, we ordinarily verify by confirming that you can receive and reply from that address. We may ask a limited follow-up question if the request is unclear. We use information provided for verification only for that purpose.

Authorized agents. You may use an authorized agent to make a request. We may ask the agent for written, signed permission from you, and may ask you to verify your identity with us directly.

Timing. We will acknowledge your request promptly and respond within 45 days, and we may extend that period by an additional 45 days where permitted, in which case we will tell you why before the first period ends. There is no charge unless a request is manifestly unfounded, excessive, or repetitive, in which case we will tell you the reason and any fee before proceeding.

Appeals. If we decline your request in whole or in part, we will explain why. You may appeal by replying to our decision or by emailing legal@omniscryptstudio.com with the subject line “Privacy Appeal.” We will review the appeal and respond in writing within 45 days (or 60 days where a state's law allows), explaining our reasoning. If we deny the appeal, we will tell you how to file a complaint with your state Attorney General or other supervisory authority.

Limits. Some rights are subject to exceptions. For example, we may need to keep information to comply with a legal obligation, to establish or defend a legal claim, or to complete a transaction you requested. We will tell you if an exception applies to your request.

This Section supplements the rest of the policy for California residents and serves as our notice at collection under the California Consumer Privacy Act, as amended (“CCPA”).

Sources. Directly from you, and automatically from your browser and our hosting provider.

Sale, sharing, and sensitive information. We have not sold personal information, have not shared it for cross-context behavioral advertising, and have not collected sensitive personal information through the Website in the preceding twelve months. We do not use or disclose sensitive personal information for purposes that would require us to offer a right to limit.

Retention. See Section 10.

“Shine the Light.” California Civil Code § 1798.83 permits residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We make no such disclosures.

Exercising your rights. Use the method in Section 12. Because the Website has no account system, that email method is the only one we offer, and it is the one designated for California requests.

A growing number of states — including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky, and Rhode Island — have comprehensive consumer privacy laws. Most of them apply only to businesses that process personal information about a large number of consumers or that derive revenue from selling it, and a brochure website with a contact form ordinarily falls well below those thresholds. We nevertheless extend the substantive rights in Section 12 to residents of every state, along with the appeal process described there.

Consumer health data (Washington, Nevada, Connecticut). We do not collect consumer health data through this Website, and we ask that you not send health information through the contact form. BloodlineAI, which does handle health-adjacent information, maintains a separate Consumer Health Data Privacy Policy available in that application and on its website.

Nevada. Nevada residents may direct a covered business not to sell certain covered information. We do not sell covered information, but you may submit a verified request to support@omniscryptstudio.com.

Genetic privacy. Several states regulate direct-to-consumer genetic data specifically. This Website collects no genetic data of any kind. Genetic data handled by BloodlineAI is addressed exclusively in the BloodlineAI Privacy Policy.

The Website is intended for a general adult audience. It is not directed to children, and we do not knowingly collect personal information from anyone under 13 years of age, or from anyone under 16 for the purposes of sale or sharing (which we do not engage in). If you believe a child has provided us personal information through the contact form, please email support@omniscryptstudio.com and we will delete it promptly.

We operate from the United States, and our hosting and email providers store information in the United States. If you visit the Website or contact us from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States, where privacy laws may differ from those in your country. Where required, we rely on appropriate transfer mechanisms, including the European Commission's Standard Contractual Clauses. Residents of the European Economic Area and the United Kingdom may also have the right to lodge a complaint with their local supervisory authority.

Some browsers transmit a “Do Not Track” signal or an opt-out preference signal such as Global Privacy Control. Because this Website does not track visitors across sites and does not sell or share personal information, there is nothing for such a signal to turn off, and its presence or absence does not change how we handle your information. We honor these signals in the sense that our practices already comply with what they ask for.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date and version number at the top of this page. If we make a material change — for example, if we begin using analytics, add a mailing list, or change how we use information we already hold — we will post a prominent notice on the Website before the change takes effect, and, where the law requires it, obtain your consent. We encourage you to review this page periodically.

For a privacy request concerning a specific application and the data it holds, please use that application's own privacy address. We cannot access application data from this Website, and routing your request correctly is the fastest way to have it honored within the deadline the law sets.