Privacy Policy

• We do not sell your personal information, and we never have. • We do not "share" your personal information for cross-context behavioral advertising, and we do not use it for targeted advertising. • There are no ads, advertising cookies, analytics trackers, or data brokers in OmniDex. • OmniDex does not record your phone calls. • We use your information to run the Service you asked for: storing your contacts, connecting your calls and texts, billing your prepaid credit, keeping your account secure, and answering your questions. • You can see, download, correct, or delete your information. You can delete your whole account at any time in Settings. • To make a privacy request, email omnidex@mycontacts247.com. We respond within 45 days.

Information you give us • Account details: your name, email address, password (we store only a scrambled one-way hash, never the password itself), profile photo, language and display preferences, and the phone number you verify. • Contacts you save: names, phone numbers, email addresses, mailing addresses, company and job title, notes, photos or icons, categories, and whether a contact is a favorite or an emergency (ICE) contact. You type these in or import them from a CSV or vCard file you choose. We never read the address book on your phone on our own. • PINs and access settings: your calling PIN, any household or caregiver PINs you create and what they can do, and your payment PIN (stored only as a one-way hash). • Messages and calls you start: the people and numbers you call or text, and the words of the text messages you send through OmniDex. • AI requests: questions you type to the AI Secretary, and the contact name and description you enter if you ask OmniDex to create a contact icon. • Support requests: anything you tell us when you email or contact us. Information created when you use the Service • Call details: the number you called, the number you called from (caller ID), date, time, length, status, rate, and cost of each call. • Text message details: message content, sender and recipient numbers, date and time, delivery status, and replies your contacts send back to the OmniDex number. If someone texts the OmniDex number from a number that isn't linked to an account, we keep that message so we can route it and prevent abuse. • Voice commands on the PIN line: when you say a contact's name or speak a text message, our phone provider turns your speech into text so we can carry out the request. We receive the text, not a recording of your voice. • Credit and billing records: credit packs you buy, amounts, your prepaid balance, receipts, referral credits, and, if you save a card, the card brand and last four digits. Your full card number goes directly to our payment processor, Square. We never see it or store it. • Device and security information: device names and types, sign-in sessions, trusted-device and NFC tag tokens, PIN attempts and lockouts, and security events (for example, failed sign-ins or blocked calls). • Technical information: IP address, browser and device type, and the date and time of requests. Our hosting provider and our servers record these automatically to deliver pages and to keep the Service secure. Information from others • Your contacts: when your contacts text the OmniDex number back, we receive their phone numbers and messages. • Service providers: Twilio tells us whether calls and texts connected; Square tells us whether a payment went through. • Household or caregiver PIN users: if you give someone a PIN, information about the calls they make with it is added to your account. Cookies and similar technology We use only the cookies and local storage needed for the Service to work: keeping you signed in (sign-in sessions expire after 14 days), remembering your language, and saving display settings such as your theme. We do not use advertising cookies, tracking pixels, or third-party analytics. What we do not collect We do not collect precise location, biometric identifiers (we don't create voiceprints), Social Security or government ID numbers, or health information. We don't build profiles about you or make guesses about your interests or characteristics.

We use personal information only to: • Provide the Service: store and show your contacts, run the PIN phone line, connect calls, send and receive the texts you start, and keep your call and message history. • Handle prepaid credit: process purchases, keep your balance, apply referral credits, cap calls to the credit you have, and send receipts. • Verify you and keep your account secure: phone and email verification codes, sign-in, PIN checks, device trust, fraud and abuse prevention, and blocking calls to unsupported or premium numbers. • Run the AI features you choose to use (see Section 4). • Send you service messages, such as verification codes, password reset links, receipts, and missed-call alerts you have turned on. We do not send marketing email or marketing texts. • Answer your questions and support requests. • Fix problems, keep the Service working, and make it better, using the minimum information needed. • Follow the law, respond to valid legal requests, and enforce our Terms of Service. We collect and use only what is reasonably needed for these purposes. We don't use your information for advertising, and we don't make automated decisions about you that have legal or similarly significant effects.

We do not sell personal information, and we do not share it with anyone for their own marketing. We disclose it only as described here. Service providers (processors) These companies work for us under contracts that let them use your information only to provide their service to OmniDex, keep it confidential and secure, and help us honor your rights: • Twilio: connects phone calls, sends and receives text messages, sends phone verification codes, and turns spoken commands on the PIN line into text. Twilio receives phone numbers, call details, message content, and voice audio in real time while a call or command is in progress. • Square: processes credit-pack payments and stores saved cards. Square receives your payment card details directly from you, plus the purchase amount and a customer ID. • Neon: hosts our database, where your account, contacts, and history are stored. • Vercel: hosts the website and app servers. Vercel processes the requests your browser or app sends us, including IP addresses. If xAI is unavailable when you ask OmniDex to create a contact icon, the contact name, the style you pick, and the description you type may instead be sent to an OpenAI image-generation model, either through Vercel's AI service or directly to OpenAI. No other image service is used. • Resend: delivers our emails, such as verification codes and password reset links. Resend receives your email address and the email content. • xAI: powers the AI Secretary and creates contact icons. AI Secretary (xAI): only after you tap Allow in the app, your AI Secretary question and the names and categories of your saved contacts are sent to xAI, a third-party AI service, to generate the reply. Phone numbers, email addresses, notes, and PINs are not sent. If you do not allow it, nothing is sent and the rest of OmniDex works normally. We also never send your contacts' mailing addresses, companies, or job titles. If you ask OmniDex to create a contact icon, the contact name, the style you pick, and the description you type are sent to xAI's image model to create the picture. Others, in limited cases • People you choose: the contacts you call or text see the OmniDex caller ID and receive your messages. Invitation texts you send include your name. Anyone you give a household or caregiver PIN can reach your contacts as that PIN allows. • App stores: Apple and Google distribute the apps and may collect information under their own privacy policies. We do not receive your App Store or Google Play payment details. • Legal and safety: we may disclose information if the law requires it (for example, a valid subpoena or court order), or if we believe it's needed to protect the rights, property, or safety of our users, the public, or OmniDex, including to prevent fraud. • Business transfer: if OmniDex is merged, sold, or reorganized, information may transfer to the new owner, who must continue to protect it as described in this policy. We will tell you before that happens. Your contacts are never shared with other OmniDex users, unless you give someone a PIN for your account.

In the past 12 months we have not sold personal information, shared it for cross-context behavioral advertising, or used or disclosed it for targeted advertising or for profiling that produces legal or similarly significant effects. We don't plan to start. We have no actual knowledge of selling or sharing the personal information of anyone under 16, because we don't sell or share anyone's. If that ever changes, we will update this policy first, give you a clear way to opt out, and ask for opt-in consent wherever the law requires it. Global Privacy Control: We honor the Global Privacy Control (GPC) signal as a valid request to opt out of the sale and sharing of your personal information and of targeted advertising. Because we don't do any of those things for anyone, every user is already opted out, so there's nothing for the signal to switch off and OmniDex works the same either way. We treat "Do Not Track" signals the same way. We don't track you across other websites.

Some information OmniDex handles counts as "sensitive" under certain state laws: • Your account login (email address and password). • The content of text messages you send and receive through OmniDex. • Payment card details, which Square collects and stores. OmniDex keeps only the card brand and last four digits. We use and disclose this information only to provide the Service you request, to keep it secure, to prevent fraud, and as the law otherwise allows. We never use it to infer characteristics about you. Because of that, California law doesn't require a "Limit the Use of My Sensitive Personal Information" link, but you can still contact us about it at any time. We do not ask for, and do not intentionally collect, other sensitive data such as racial or ethnic origin, religious beliefs, health or mental health information, sex life or sexual orientation, gender identity, citizenship or immigration status, genetic or biometric data, precise location, union membership, or financial account login credentials. Please don't put this kind of information in contact notes. If you do, it stays private in your account and is used only to show it back to you. We don't knowingly collect personal information from children under 13 (see Section 12).

OmniDex does not record your phone calls. When you place a call through OmniDex (on the PIN line, the website, or the app), Twilio connects you to the person you're calling, and the call audio passes through Twilio's network in real time. We keep the call details listed in Section 2, such as the number, time, length, and cost, but not what was said. Before October 5, 2026, calls connected through the PIN line were automatically recorded by our phone provider because of a leftover setting from an earlier version of the Service. No OmniDex feature ever played, transcribed, or used those recordings. We have turned that setting off, and on October 5, 2026 we permanently deleted all of the recordings that had been made. On the PIN line, speech recognition turns the names and messages you say into text so we can carry out your request. We don't keep audio of your voice.

OmniDex may send user-initiated texts via the shared OmniDex SMS number (+1 (504) 949-7225) on behalf of account holders to their contacts — from the in-app Messages tab or when you choose message (2) on the PIN line. Call 1-877-720-OMNI ((877) 720-6664) or (504) 949-7225 with your PIN for voice. Texts you send to your contacts always go out from the local OmniDex number, never from the toll-free line. Toll-free number (account messages only). OmniDex's toll-free number 1-877-720-OMNI ((877) 720-6664) is used only for OmniDex's own business messages to account holders: one-time verification codes (sent only when you request one), account notifications such as a low call-credit balance or missed-call notices, and customer care replies. You opt in with a separate, optional checkbox that is unchecked by default when you create your account; consent is not a condition of purchase or service. Texts you send to your own contacts are never sent from the toll-free number. Messaging data we collect includes message content, destination and sender numbers, delivery status, and related carrier metadata. We use this data only to deliver the texts you start, show conversation history in your account, honor STOP/HELP and other opt-out requests, and operate and secure the SMS feature. Creating an account does not enroll you or your contacts in a marketing or promotional SMS program. Consent. OmniDex texts are sent only when you start them: a message you write, an invitation you choose to send to a contact, a verification code you request, or a missed-call alert you turn on in Settings (off by default). When you text or invite someone through OmniDex, you confirm that you know them and that they expect to hear from you. We do not send marketing or promotional texts, and we don't use automated systems to text people who haven't been contacted by a user. Message frequency varies (user-initiated). Message and data rates may apply. Reply STOP to opt out. Reply HELP for help. When anyone replies STOP, we stop texting that number from OmniDex and keep a record of the opt-out so we can keep honoring it. We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. We do not sell or share mobile/phone numbers with third parties for their marketing. Mobile numbers and other phone numbers are not sold or shared with third parties for their marketing. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All of the categories of sharing described elsewhere in this policy exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Carriers are not liable for delayed or undelivered messages. For help: reply HELP to an OmniDex text, call 1-877-720-OMNI ((877) 720-6664) or (504) 949-7225, or use in-app Settings. Privacy: https://www.mycontacts247.com/privacy. Terms: https://www.mycontacts247.com/terms.

We keep personal information only as long as we need it for the purposes in this policy: • Account details, contacts, PINs, and preferences: until you delete them or delete your account. • Call history, text messages, purchases, balance, and saved-card references: while your account is open. They are deleted when you delete your account. • Sign-in sessions: they expire after 14 days. Verification codes and password reset links expire within minutes to hours and work only once. • Security, fraud-prevention, and AI-usage logs, and texts from numbers not linked to any account: up to 24 months, then deleted, unless we need them longer to investigate fraud or abuse or to meet a legal obligation. • SMS opt-out (STOP) records: as long as needed to keep honoring the opt-out. • Hosting request logs: generally 30 days or less. • Database backups: deleted information is removed from short-term backups within 7 days. • Our service providers keep their own records for limited periods under their policies and the law. For example, Square must keep payment records, and Twilio keeps call and message logs. Deleting your account. In Settings, you can delete your account at any time. That immediately removes your profile, contacts, PINs (including household and caregiver PINs), devices and sign-in sessions, calling account and balance, call history, purchase history, saved cards (including at Square), and text conversations. Some limited records may stay for the periods listed above, such as security logs, opt-out records, and records we must keep by law. When you delete your account, we also delete your saved cards and customer profile at Square. Square keeps its own records of past payments as the law requires.

We use reasonable administrative, technical, and physical safeguards, including: • Encryption in transit (HTTPS/TLS) and encryption at rest by our database host. • Passwords and payment PINs stored only as one-way hashes. • Account-level access controls, so one user can never see another user's contacts. • PIN attempt limits and lockouts, device trust checks, and limits on calling and spending. • Staff access to account information only when needed. Support access to a user's private details requires a code from that user and expires automatically. • Security event logging to detect fraud and abuse. No system is perfectly secure. If a data breach affects your personal information, we will notify you and the authorities as the law requires.

The AI Secretary is optional. When you use it, your question and your contacts' names and categories are sent to xAI as described in Section 4, and only after you tap Allow in the app. If you don't allow it, nothing is sent. Contact phone numbers, emails, addresses, and notes are never sent. AI answers can be wrong, so please check anything important. Contact icon creation is also optional. Only the contact name and the description you type are sent to the image service (see Section 4). Before the first icon is created, the app asks you to allow sending this to xAI (and, only if xAI is unavailable, to OpenAI directly or through Vercel AI Gateway); nothing is sent unless you tap Allow. We do not use your contacts or messages to train AI models. Our AI providers receive only the information described above, and only to answer the request you made.

OmniDex is made for adults and teens. It is not directed to children under 13, and children under 13 may not create an account. Teens 13 to 17 should use OmniDex only with a parent's or guardian's permission. A parent or guardian may let a child use the parent's own account, for example with a household PIN for calling family. In that case the account and its information belong to the parent, who is responsible for that use. Our App Store age rating of 4+ means the app contains no objectionable content. It doesn't mean the Service is designed for young children. We don't knowingly collect personal information from children under 13. If we learn that we have, we will delete it. Parents can contact us at omnidex@mycontacts247.com to review or delete their child's information. We do not sell or share the personal information of anyone, including minors.

Depending on where you live, state law gives you rights over your personal information. These laws include the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and the privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, Nebraska, and other states with similar laws. We offer these rights to all US users: • Know and access: confirm whether we process your personal information, and get the categories and specific pieces we have, where it came from, why we use it, and the categories of companies we disclose it to. • Portability: get a copy of your information in a portable, commonly used format. You can also export your contacts as a vCard file at any time in the app. • Correct: fix information that is wrong. You can edit most of it yourself in the app. • Delete: have us delete your personal information, subject to limited legal exceptions. You can also delete your account in Settings. • Opt out: of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects. We don't do any of these, but you may still ask, and we will record your choice. • Limit the use of sensitive personal information: we already use it only as described in Section 6. • List of third parties: residents of states such as Oregon, Minnesota, and Maryland can ask for a list of the specific third parties we have disclosed their information to. Our current service providers are named in Section 4. • Non-discrimination: we will never deny you service, charge you a different price, or give you a lower quality of service because you used your privacy rights. • Appeal: if we decline your request, you can appeal (see Section 15). If you don't have an OmniDex account but your information is stored in a user's contacts, you can contact us too. We will help where we can, and we may refer you to the user who saved your information.

• Email: omnidex@mycontacts247.com with the subject "Privacy Request." Tell us what you'd like (for example, access, a copy, correction, deletion, or opt-out). • In the app: you can view, edit, export, and delete your information, and delete your account, in Settings. Verification. To protect your account, we confirm your identity before we act on a request. We usually do this by matching the request to the email address and phone number on your account and sending a code you need to enter. For requests to get specific pieces of information, or to delete it, we may ask for a bit more. We use any information you give us for verification only for that purpose. Opt-out requests don't need verification. Authorized agents. You may use an authorized agent to make a request for you. The agent must give us written permission signed by you, or a valid power of attorney. Unless the agent has a power of attorney, we may also ask you to confirm your identity directly with us. Timing. We confirm we received your request within 10 business days and respond within 45 days. If we need more time, we may extend that once by up to 45 more days, and we will tell you why within the first 45 days. Requests are free. If requests from one person are clearly unfounded or excessive, for example more than twice in 12 months, we may charge a reasonable fee or decline, and we will explain why.

If we decline all or part of your request, we will explain why. You can appeal by replying to our decision or by emailing omnidex@mycontacts247.com with the subject "Privacy Appeal" within 60 days. Someone who did not make the original decision will review it. We will tell you in writing what we decided and why within 45 days, or within the shorter time your state's law requires. If we deny your appeal, we will tell you how to contact your state Attorney General to file a complaint.

This policy is our notice at collection. In the past 12 months we have collected the following categories of personal information defined by the CCPA, from the sources described in Section 2, for the purposes described in Section 3: • Identifiers: such as your name, email address, phone number, IP address, and account ID. • Customer records (Cal. Civ. Code § 1798.80): such as your name, phone number, and the brand and last four digits of a saved card. • Commercial information: such as credit packs bought, balance, and call charges. • Internet or other electronic network activity: such as security logs, device and browser type, and how you use OmniDex features. • Audio and electronic information: call details and text messages. Spoken PIN-line commands are converted to text in real time, and calls are not recorded. • Professional information: only the company and job title you choose to save for your contacts. • Sensitive personal information: account login, text message content, and payment card details (see Section 6). We do not collect protected classification characteristics, biometric information, precise geolocation, education information, or inferences used to build a profile about you. We disclosed each category above for business purposes only to the service providers in Section 4 and as otherwise described there. We did not sell or share any category. Referral credit (notice of financial incentive). If you share your referral code and a friend joins OmniDex with it, you may get $3.00 in calling credit for each qualifying referral, up to 3 per month. The program uses your referral code and the fact that your friend signed up with it. You join by sharing your code, and you can stop at any time by no longer sharing it or by emailing us. We base the credit's value on our reasonable estimate of the value of a new customer to OmniDex, considering our typical costs to provide the Service and win new users. Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes. Retention. How long we keep each category is described in Section 9.

Nevada. We do not sell covered information as defined in Nevada law (NRS 603A). Nevada residents can still send an opt-out request to omnidex@mycontacts247.com, and we will record it. Washington, Nevada, and other states' consumer health data laws. OmniDex does not collect, use, share, or sell "consumer health data" as defined by Washington's My Health My Data Act or similar laws, and the Service isn't designed to. The emergency (ICE) contact feature only marks which of your contacts to call quickly; it doesn't record health information. Colorado, Connecticut, Virginia, and other states. We are the "controller" of your personal information, and the companies listed in Section 4 are our "processors." Sections 13 through 15 explain your rights and how to appeal.

We may update this policy as the Service or the law changes. We will post the new version here with a new effective date. If we make a material change, we will tell you in the app or by email before it takes effect. If a change would let us use your information in a materially different way than we told you when we collected it, we will ask for your consent first.

OMNIDEX LLC 121 Elvie Ct Avondale, LA 70094 Email: omnidex@mycontacts247.com Website: https://www.mycontacts247.com For questions about this policy, your information, or OmniDex text messages, email us or use in-app Settings. For SMS help, reply HELP. To stop texts, reply STOP.