Privacy

Privacy in plain language

Ompera is a free public beta. This page describes how the service works today. It will be reviewed before paid features launch.

The short version

• We never store the content of your prompts or the model's answers.
• We keep request metadata (time, model, duration, token counts, result) for 7 days so you and we can see activity and fix problems.
• If you share a model, we keep daily totals of its time online and of the requests it served, as your sharing record and rating.
• We don't sell data, show ads or use third-party analytics or tracking. The one outside party the Android app reports to is Google ML Kit, its translation engine: metrics about how it performs, never your text (see below).
• When you use a model connected from someone's computer (your own or a pool member's), that computer's owner can read the requests it receives. See who can see your requests.

What we store about your account

• Account: an account ID and the name you choose.
• Sign-in: the public part of your passkeys (never the private key), or the address of a wallet you sign in with. We never see wallet keys or funds.
• API keys and device credentials: only a one-way fingerprint (hash), so even we cannot recover the key.
• Connected models and devices: the names and model addresses you connect, the model's display name, and for Android phones basic device details (model, Android version, app version) to show status and help with problems.
• Pools: the pools you created or joined, their members, and request counts between members.
• Sharing record: if you share a model, daily totals for each device you connected: time online, how many requests it was asked to answer, how many it answered and how many failed, and how often its connection dropped and came back. Your rating is counted from these totals. No individual requests.
• Character totals: daily input and output text volumes by approved model, for requests you used or served. Own usage, workspace tests, partial replies, tool text and reasoning are kept separate. These totals contain counts, never prompts or answers.
• Payout address, if you saved one earlier. Payments are not active during the beta.

What happens to your requests

Your app sends a request to the Ompera API over HTTPS. Ompera reads it in memory to check your key, route it to the model and count text volume, then passes the answer back. The text is not written to disk or logs.

• Unshielded models (models connected from a computer through Chrome): the request reaches the model server on that computer. Its owner — you, or the pool member who connected the model — can read it.
• Network models (run inside the Ompera Android app): the standard app does not show requests to the phone's owner, but someone who controls or modifies the device may still inspect them. Ompera's gateway processes them in memory.

Metadata we keep

For each request: time, model address, which of your API keys made it, which provider served it, duration, time to first response, character counts when available, generation speed, result and a random request ID. Usage metadata is kept for 7 days and connection history for 8 days, then deleted. Daily sharing and character totals are kept while the account exists. You can see your character counts in Workspace → Activity. Aggregated, anonymous numbers appear on the public status page.

Cookies and storage in your browser

One essential cookie keeps you signed in (it is sent only to Ompera and cannot be read by page scripts). Your browser also remembers the light/dark theme, your connector settings (server address, model, model address), that you accepted the connector's privacy note and, until you stop sharing or close the tab, that a connector tab is sharing a model — never keys or tokens.

Feedback you send

When you write to us through the feedback form, we keep your message, the pictures you attach and the email address you leave for a reply. Unless you switch them off in the form, we also keep the details it shows you before you send: the page you came from and its title, your account ID if you are signed in, your browser, window size and language, the site version and, on the connector page, the connector's state and the extension version. We use them only to understand and answer your message. They stay on the Ompera server for 90 days and are also delivered to our mailbox, where they stay until we delete them.

If you choose Send error report in the desktop app, it sends app and system versions, graphics and driver checks, the selected model, the latest error and recent app diagnostics, linked to your account and device. These reports contain no prompts or responses; credentials and your home folder name are removed. They are available only to Ompera support, stay on the server for up to 90 days and are not emailed automatically.

The Android app sends an error report by itself when something fails, unless you switch off Send error reports automatically in its Settings. A report says what failed and the error message, the steps in the app just before it (such as starting or stopping sharing and the app's sharing states), the phone model and Android version, free and total memory and storage, battery, temperature and network state, and the app's sharing settings, linked to your account and phone. It contains no prompts or responses: for a failure while answering a request it keeps only the kind of error. Credentials are removed. These reports are available only to Ompera support, stay on the server for up to 90 days and are not emailed.

Ompera Bench, the phone test app, sends the results of each test run unless you switch off Send results to Ompera in its Settings. A result says which phone ran it (manufacturer, model, chip, Android version, memory size, number of processor cores), the app version, which models, engines, compute units and groups of cores were tested, their speeds and input lengths, the temperatures and processor clocks during the run, whether the phone was charging, and how warm you marked the case. It is linked to a random number made by that installation, not to your account, and contains no prompts, answers or location. These results are kept to compare phones and settings and are available only to Ompera.

When something fails in Ompera Bench (the app or an engine crashes, Android closes it, or an engine does not start), it also sends an error report, unless you switch off Send error reports. The report says what failed, the phone and app version, the app's last steps, and the app's own recent warnings from the phone's system log; Android lets an app read only its own log lines. Its test texts are fixed, so a report holds no prompt or answer of yours. Error reports are deleted after 90 days.

Service providers

Ompera runs on a rented server and uses Cloudflare for its domain and network protection. Those companies process network traffic (such as IP addresses) to deliver the service. IP addresses are also used briefly by Ompera to limit abuse.

The Android app's translation service runs Google ML Kit on the phone, so the text you translate stays there. ML Kit sends Google metrics about how its translation and language detection perform: the phone's maker, model and Android version, the app's name and version, the languages set, errors and an identifier of the app's installation, used by Google for diagnostics and usage statistics and not shared further. Google describes it in its ML Kit data disclosure.

Your choices

• Revoke API keys, remove devices, stop sharing and remove sign-in methods at any time in your workspace.
• Export your activity from Workspace → Activity.
• To delete your account and its data, write to us through the feedback form.

Contact

Questions about privacy? Write to us through the feedback form.