Ommy Privacy Policy

Last updated: 6 November 2026

Ommy is a mobile app that tells you spoken stories about places nearby while you travel. This policy explains what personal data we process, why, and what rights you have.

Who is responsible

Ommy is provided by HeyOmmy, the sole proprietorship of Lars Nijland, registered with the Dutch Chamber of Commerce (KvK) under number 42174318, Kockengen, the Netherlands. For all privacy questions and requests: support@heyommy.com.

What data we process

Account data. If you register with email: your email address and an encrypted (hashed) password. If you sign in with Google: only a fixed identifier of your Google account. We use this to create your account and sign you in. Google also sends your name and email address when you sign in, but we don't store them.
Location data. While a trip is active, the app periodically sends your GPS position to our server to determine whether you're near an interesting place. For places that produced a story, we keep that place's coordinates, linked to your account, so you can see them on the map and replay the story. Separately, we keep a technical log of every place considered during a trip (including ones that didn't produce a story) to tune the app's sensitivity - the location in that log is rounded (~100 metres) and kept for at most 90 days. Outside an active trip, the app collects no location.
Map usage. When you view the map, the app loads map tiles directly from OpenFreeMap, Esri, or OpenTopoMap (depending on the map style you chose) - those providers see your IP address and which area you're viewing, outside of Ommy's own server.
Photos. The app loads photos of places directly from Wikimedia Commons - Wikimedia sees your IP address and which photo is requested, outside of Ommy's own server.
App usage. Which places produced a story, which stories you played, your preferences (interests, language, voice, child profiles), and any questions you ask after a story. We use this to run the app and show your history.
Feedback you send. If you give feedback in the app (a comment on a story or in Settings, or picking your favourite story after a trip), we store your text and choice together with the story it is about, the app version and your device model, linked to your account. We use this only to improve Ommy; it is deleted when you delete your account.
Quality measurement ("Help improve Ommy"). During a trip the app sends a few short signals: that a trip started or stopped, whether a story arrived on time and played, how far you listened, whether you asked for "Tell me more", and the type of error if something went wrong. This is linked to your account, a random trip identifier and the story it is about - without place names, distance, speed or direction of travel. We use it only to see whether Ommy tells its stories on time and well. On by default; you can turn it off in Settings > Privacy, and it stops immediately. Under the same switch we also count whether you open the Pro screen, which Pro feature you saw a lock on, and whether you tapped a subscription, so we know what makes Pro worthwhile - this too without place names or location.
Detailed diagnostics (optional). Only if you turn on "Detailed diagnostics" in Settings (off by default): during a trip we then also send which place produced a story, at what distance and speed, linked to your account and a trip identifier, to help us track down tricky problems. If you leave it off, this kind of data never leaves your device.
Crash reporting. If the app or our server crashes or runs into an error, a technical error report is sent automatically: what went wrong, the app version, your device model and Android version, and a random identifier for this installation - without your name, email address, or location coordinates. We use this only to make Ommy more stable.
Purchase data (Ommy Pro). If you get Ommy Pro, Google Play handles the payment. We only receive from Google which subscription you have, its status and end date, and a purchase reference, linked to your account – never your payment details. We use this to unlock Pro for you.

Legal basis and purpose

We process account data, location during a trip, and app usage because it's necessary to deliver the service you're using (performance of a contract). We process the detailed diagnostics based on your consent (you turn them on yourself); the quality measurement and crash reporting are based on our legitimate interest in a working, stable app that tells its stories on time - using as little data as possible, and you can always turn the quality measurement off.

Sharing with other parties

We don't sell your data and don't share it with third parties for their own purposes. To deliver the service, we use processors that act solely on our instructions:

Hosting (Render, Cloudflare R2) – running and storing the backend and audio files.
Geoapify – turning coordinates into information about nearby places.
Anthropic and Google – generating story text and answering follow-up questions.
Google and ElevenLabs – converting text to speech.
Wikimedia / Wikipedia – fetching public background information and looking up nearby places, based on a position rounded to about one kilometre.
Sentry (servers in the EU) – collecting crash and error reports.
Google Play – payments for Ommy Pro. Google itself is responsible for your payment details.
Google Play Integrity – checks, when you sign in or create an account, that the app is genuine and running on a genuine device. We only receive a yes or no and do not store it with your account.

In addition, the in-app map (see "Map usage" above) loads tiles directly from OpenFreeMap, Esri, and OpenTopoMap - that traffic doesn't go through our server, so we don't see which tiles you request, but those providers do.

Some of these parties are based outside the EU. Where that's the case, the transfer relies on the European Commission's standard contractual clauses or an adequacy decision.

Retention period

We keep your account and its history until you have it deleted. In the app you can clear individual visited places. The technical tuning log (see "Location data" above) is automatically deleted after at most 90 days, regardless of whether your account still exists. You delete your account and all associated data in the app via Settings → Delete account, or - if you sign in with Google - via the account-deletion web page or by emailing the address above. Deleted data is removed from backups within 30 days.

Your rights

You have the right to access, correct, delete, and receive a copy of your data, and to object to processing based on legitimate interest. Send your request to support@heyommy.com. You can also file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl), or your own country's supervisory authority.

Children

Ommy is not directed at children. We don't knowingly collect data from children under 16. The app's "kids mode" is a narration style that an adult account holder configures; children don't create their own account.

Changes

We update this policy as the app changes. The date at the top shows the most recent version.