Privacy Policy | How Omnicogi Protects Your Data

1. Introduction

Omnicogi is operated by Iteruti Ltd ("we," "us," or "our"), a company registered in England and Wales under company number 14569520, with its registered office at 167-169 Great Portland Street, 5th Floor, London, United Kingdom, W1W 5PF. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website or use our application.

2. Information we collect

We collect and process the following types of information:

Account Information: When you register, we collect your email address, name, optional profile picture, and authentication identifier (via email/password, Google sign-in, or Apple sign-in).
Financial & Asset Data: We collect financial data that you voluntarily upload or enter into the Service, including transaction histories (buys, sells, dividends, interest, corporate actions), cash deposits, asset valuations, and point-in-time account snapshots across your portfolios and wealth accounts. This data is provided via CSV file exports or manual entry: we do not connect directly to your financial institutions. While Omnicogi is in Early Access, uploaded CSV files are retained for up to 90 days as part of our import diagnostics program to troubleshoot and improve broker export compatibility (see Data Security below).
Usage & Analytics Data: To monitor application stability, understand how features are used, and improve the user experience, we collect first-party product analytics and technical usage metrics. This includes app interactions, device and operating system details, and session trends. Usage analytics is on by default and can be turned off at any time in Settings > Privacy & analytics. We never collect names, emails, or personal financial amounts in analytics events, and analytics data is never used for advertising or shared with third-party advertisers.
Feedback & Support Data: If you submit feedback or support requests through the website or app, we collect your email address, your message, and diagnostic metadata (such as platform, app version, and screen name) to assist you.
Portfolio Sharing Data: If you choose to use our read-only sharing feature, we process the email address of the invited viewer and the visibility permissions you specify. You can revoke access at any time.
Push Notification Data: If you enable notifications, we collect a device push token (via Firebase Cloud Messaging) and your notification preferences to deliver portfolio alerts.
Diagnostic Data: We collect crash reports, error logs, and performance traces (via Sentry and Firebase Crashlytics/Performance). Diagnostic data is scrubbed of personal information before transmission; only an anonymous account identifier is retained.

We never ask for your account credentials. Omnicogi does not request, store, or have access to your broker or banking usernames, passwords, or API keys. We do not connect to your accounts in any way. Your data is imported only from CSV files that you export manually and choose to upload.

Your financial data is used strictly to generate your asset analytics. We will never share your personal financial data with third-party advertisers or use it for ad targeting.

3. How we use your information

We use the information we collect for various purposes, including:

To provide, maintain, and operate our Service (including double-entry ledger calculation, Capital Gains Tax pooling, performance metrics, and net worth roll-ups).
To communicate with you regarding your account, security notices, and service updates.
To measure product usage, troubleshoot issues, and enhance user experience (first-party analytics under legitimate interests, with opt-out available).
To diagnose failed or incorrect CSV imports and refine support for UK broker export formats.
To comply with legal and regulatory obligations.

4. Data security

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, and destruction. Specifically:

Encryption at rest: All data stored on our servers is encrypted using AES-256 encryption via Google Cloud (Firebase) infrastructure.
Encryption in transit: All data transmitted between your browser or mobile device and our servers is encrypted using TLS (Transport Layer Security).
No broker credentials stored: Because we do not connect to your brokerage accounts, there is zero risk of your broker login credentials being compromised through Omnicogi.
Storage retention: Uploaded CSV files are retained for up to 90 days to diagnose import errors and expand UK broker compatibility, after which they are automatically deleted by server-side purge routines. If you delete your account, any uploaded CSVs are deleted immediately.

While we take reasonable steps to safeguard your data, no system is completely secure. We encourage you to use a strong, unique password for your Omnicogi account.

5. Third-party services & processors

We use trusted third-party service providers to support our operations. Each provider processes data under strict contractual confidentiality and data protection terms:

Firebase (Google Cloud): Cloud hosting, authentication, database storage (Cloud Firestore), file storage (Firebase Storage), serverless execution (Cloud Functions), product analytics, crash reporting (Crashlytics), performance monitoring, and push notification delivery (FCM). Protected by Firebase App Check and reCAPTCHA.
Sentry: Real-time application error logging and performance tracing across web and mobile platforms. Diagnostic reports have personal data scrubbed and attach only an opaque account identifier.
Brevo: Transactional email delivery for account verifications, password resets, and portfolio share invitations.
Authentication Providers (Google & Apple): If you choose to sign in via Google or Sign in with Apple, your identity is authenticated by the respective provider in accordance with their privacy policies.

6. Your rights & account deletion

Under the UK General Data Protection Regulation (UK GDPR), you have rights regarding your personal data, including the right to access, rectify, restrict, or delete your information, as well as the right to object to processing.

You can export your complete portfolio data at any time via Export data (JSON) under Profile in the app.

When you request account deletion through the app or by contacting us, your account authentication is removed and your entire personal data—including all portfolios, transaction ledgers, snapshots, wealth records, and uploaded files—is completely erased from our active database and file storage.

7. Changes to this policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

8. Contact us

If you have any questions about this Privacy Policy or wish to exercise any of your data protection rights, please contact us at help@omnicogi.com or write to Iteruti Ltd at 167-169 Great Portland Street, 5th Floor, London, United Kingdom, W1W 5PF.