Privacy Policy

Last updated: 25 August 2026

This Policy explains how REDFROGBLACK LIMITED ("we", "us", "our") collects, uses and protects personal data across the OmniModi Service, which includes: (a) the omnimodi.com marketing website, (b) the OmniModi Student mobile application on iOS and Android (the "App"), and (c) any related web application at app.omnimodi.com.

1. Who We Are (Data Controller)

REDFROGBLACK LIMITED, company number 16557982, registered in England and Wales, registered address Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA, is the data controller for personal data processed through the Service. Contact for privacy queries: support@omnimodi.com.

2. Personal Data We Collect

The categories of personal data we collect depend on which part of the Service you use.

2.1 Marketing website (omnimodi.com)

• Contact-form data: your name, email, school (optional) and message when you request a demo.
• Strictly-necessary session cookies used to keep the site working. No advertising or analytics cookies are set unless you explicitly consent.

2.2 App and web application (Student account)

• Account and authentication data: the identifier and email address returned by your chosen sign-in provider (Sign in with Apple, Sign in with Google, or email magic link). If you use Sign in with Apple with "Hide My Email", we only receive Apple's private relay email. We do not receive or store passwords.
• Profile data: the display name, tutor-frog avatar, exam system (for example UK GCSE), qualification, subjects and modules you choose during onboarding.
• Learning progress: the questions you attempt, your answers, scores, streaks, weak-spot analysis, and the state of each game or module.
• AI chat data: the free-text messages you exchange with the tutor-frog AI, so we can generate responses, tune difficulty and moderate content for safety.
• Subscription and billing metadata: for App Store or Google Play subscriptions we receive a transaction identifier and subscription status from Apple or Google; we never receive your card details. For web-based subscriptions, Stripe processes the payment and returns a customer ID, billing country and last-four digits only.
• Push-notification tokens: if you turn on notifications, we store the token issued by Apple Push Notification service or Firebase Cloud Messaging so we can send you reminders and daily-goal nudges. You can turn notifications off at any time in your device settings.
• Device and diagnostic data: app version, operating system, device model, coarse language and region, crash reports and error logs.
• Support correspondence: anything you send to support@omnimodi.com.

We do not collect precise location data, contacts, health data, photos or the microphone/camera streams. We do not use any advertising SDKs and we do not track you across other apps or websites.

3. How We Use Personal Data (Purposes and Legal Bases under UK GDPR)

Purpose	Data used	Legal basis
Provide and operate the Service	Account, profile, learning progress, chat, device data	Performance of contract
Process subscriptions and refunds	Subscription metadata, support correspondence	Performance of contract; legal obligation
Safeguarding: moderate AI chat and detect abuse	AI chat content, account identifier	Legitimate interests (protecting Students) and legal obligation
Send push reminders and product emails you have opted into	Push token, email, learning progress	Consent
Debug crashes and improve reliability	Diagnostic and device data	Legitimate interests (running a stable service)
Respond to a demo request or support enquiry	Contact-form data, correspondence	Legitimate interests / consent
Comply with legal and regulatory obligations	Any of the above, as required	Legal obligation

We do not use personal data for automated decision-making that has legal or similarly significant effects on you. AI chat replies are generated content, not automated decisions.

4. Safeguarding Students Under 18

The App is designed for Students preparing for GCSE examinations (typically ages 14 to 16). We take specific steps to protect Students under 18:

• The App contains no adverts, no third-party analytics SDKs, no advertising identifiers and no cross-app tracking.
• The AI tutor uses automated safeguards that block the model from producing sexual, self-harm, hateful, violent or otherwise age-inappropriate content, and that block a Student from being coaxed into producing such content.
• The App exposes an in-context reporting tool so Students can flag any AI response that feels unsafe. Reports are reviewed by a human within 24 hours.
• Learning content is age-appropriate and scoped to the Student's chosen qualification and subjects.
• We do not knowingly create accounts for anyone under 13. If we learn that we have inadvertently collected personal data from a child under 13, we will delete it promptly.

5. Cookies and On-Device Storage

Marketing website: we use only strictly-necessary session cookies. No advertising, marketing or third-party analytics cookies are set unless you explicitly consent through the cookie banner.

App: we use standard on-device storage (Keychain on iOS, EncryptedSharedPreferences on Android) to keep you signed in and to cache your recent learning progress for offline use. No advertising identifiers (IDFA / GAID) are collected.

6. Who We Share Personal Data With (Processors)

We share personal data only with the service providers we need to run the Service, under written data-processing terms:

• Supabase (backend database and authentication) — hosted in the EU.
• Vercel (web hosting for omnimodi.com and app.omnimodi.com) — served from the EU region.
• Apple (Sign in with Apple, App Store subscriptions, Apple Push Notification service).
• Google (Sign in with Google, Google Play subscriptions, Firebase Cloud Messaging for Android push).
• Stripe (payment processing for web-based subscriptions).
• OpenAI and/or equivalent AI providers (generating tutor-frog chat responses). AI providers process your chat content as processors under a data-processing agreement and do not use your content to train their public models.
• Email delivery (transactional email for magic-link sign-in, receipts and support replies).

We do not sell personal data and do not share it with advertisers, data brokers or analytics networks.

7. International Transfers

Personal data is primarily stored in the United Kingdom and the European Economic Area. Where a processor transfers data outside the UK/EEA (for example, some AI-model APIs), we rely on the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or an adequacy decision, so your data continues to receive an essentially-equivalent level of protection.

8. Data Retention

• Account and profile: for as long as your account is active. Deleted on request or when your account is deleted.
• Learning progress and chat transcripts: for as long as your account is active, and deleted within 30 days of account deletion.
• AI-chat safeguarding logs: up to 12 months, then deleted or fully anonymised.
• Subscription and billing records: up to 7 years, to comply with UK tax and consumer-protection law.
• Support correspondence: up to 3 years after the last contact.
• Diagnostic and crash logs: up to 90 days.
• Marketing-website contact-form submissions: up to 2 years, then deleted unless you become a customer.

9. Your Rights Under UK GDPR

You have the right to:

• Access the personal data we hold about you;
• Have inaccurate data rectified;
• Have data erased (right to be forgotten), including by deleting your account inside the App;
• Restrict or object to processing;
• Data portability (receive your data in a structured, machine-readable format);
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing;
• Not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise any right, email support@omnimodi.com. We will respond within one month. If you are unhappy with our response you can complain to the UK Information Commissioner's Office (ico.org.uk).

10. How to Delete Your Account and Data

You can delete your account and all associated personal data at any time from within the App: Settings → Account → Delete account. You can also email support@omnimodi.com from the email address linked to your account and we will complete the deletion within 30 days.

11. Data Security

We host data with reputable EU-based providers. All connections use TLS in transit and data is encrypted at rest. Access to production data is limited to a small number of authorised engineers under strict access controls, logged and reviewed. We do not receive or store passwords or full payment-card details.

12. Changes to This Policy

We may update this Policy from time to time. Where changes are material we will notify you inside the App or by email before they take effect. The "last updated" date at the top of this page shows when it was last changed.

13. Contact

REDFROGBLACK LIMITED, Unit 13 Freeland Park, Wareham Road, Lytchett Matravers, Poole, England, BH16 6FA. Email: support@omnimodi.com. Company No. 16557982.

← Back to Home  |  Terms & Conditions →