Privacy Policy

Last updated: May 21, 2026

1. Introduction

This Privacy Policy describes how omegaAPI ("we", "us", or "our") collects, uses, and protects your information when you use the omegaAPI Mac menu bar application ("App") and related services, including our API proxy infrastructure (collectively, the "Service"). By using the Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect the following information depending on your sign-in method:

  • Sign in with Apple: Your full name (as provided by Apple) and email address (which may be a private relay address if you choose to hide your email).
  • Email & Password: Your email address and a securely hashed password.
  • User ID: A unique identifier (UUID) is generated for your account.

2.2 Usage Data

We collect data about your API usage, including the provider used (e.g., OpenAI, Anthropic), model name, input and output token counts, request volumes, base cost, markup amount, and total cost. This data is necessary to operate the Service, calculate billing, manage your wallet, and run the daily Developer Grant program.

2.3 API Keys

omegaAPI generates unique API keys for you to authenticate with our proxy service. These keys are SHA-256 hashed before storage — we do not store your API keys in plain text. Only the key prefix is retained for identification purposes. You do not provide your own third-party API keys (e.g., OpenAI, Anthropic) to omegaAPI; we handle upstream authentication on your behalf.

2.4 Payment & Wallet Data

When you purchase credits through in-app purchases, we collect and store:

  • Purchase amount, product identifier, and transaction ID
  • Wallet balance and lifetime deposited amount
  • Auto-refill preferences and spending limit (hard limit) settings
  • Purchase history and credit ledger entries

Payment processing is handled by Apple through the App Store. We do not collect or store your payment card details or Apple Pay information.

2.5 Technical Data

We may collect basic technical information such as your application version, macOS version, and crash reports to improve the App.

2.6 Local Data

The App stores your theme preference (dark/light mode) locally on your device using macOS UserDefaults. This data is not transmitted to our servers.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the omegaAPI Service
  • Proxy API requests to OpenAI, Anthropic, and other supported providers on your behalf
  • Calculate usage costs, apply the service markup, and manage your prepaid wallet balance
  • Operate the daily Developer Grant program, including determining eligibility, selecting recipients, and covering selected users' daily API bills
  • Process in-app credit purchases and validate transactions
  • Send you service-related notifications
  • Improve and optimize the App and Service

4. Data Security

We implement industry-standard security measures to protect your data:

  • API keys are SHA-256 hashed before storage and are never displayed in full after initial creation
  • All communication between the App and our servers uses TLS encryption
  • Row-level security (RLS) policies ensure users can only access their own data
  • Purchase transactions include duplicate prevention mechanisms

However, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data, and you use the Service at your own risk.

5. Third-Party Services

We use the following third-party services to operate omegaAPI. Each service may collect and process data in accordance with its own privacy policy:

  • Supabase: Cloud database and authentication provider. Stores your account information, usage data, API key hashes, wallet data, and purchase records.
  • RevenueCat: In-app purchase management. Receives your user ID and purchase/transaction data to validate and manage credit purchases.
  • Apple (Sign in with Apple & App Store): Authentication and payment processing. Handles sign-in credentials and in-app purchase transactions.
  • Cloudflare Workers: Hosts our API proxy infrastructure. Processes your proxied API requests.
  • OpenAI & Anthropic: Upstream AI providers. Your API request content is forwarded to these providers to fulfil your requests.

6. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We share data only as necessary to operate the Service:

  • API request content is forwarded to the respective AI providers (OpenAI, Anthropic) to fulfil your requests
  • Purchase and transaction data is shared with RevenueCat and Apple for payment validation
  • Developer Grant draw results (draw date, amounts granted) are publicly visible for transparency, but only your user ID is associated — no personal contact information is publicly exposed

7. Data Retention

We retain your account and usage data for as long as your account is active. You may request deletion of your account and all associated data at any time by contacting us at support@omegaapi.com. Upon deletion, we will remove your personal data from our systems, though some anonymised or aggregated data may be retained for analytical purposes.

8. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your usage data
  • Withdraw consent for data processing (which may result in inability to use the Service)

9. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

10. Disclaimer

The Service is provided on an "as is" and "as available" basis. We make no representations or warranties regarding the accuracy, reliability, or completeness of any data collected, stored, or processed through the Service. We are not responsible for any data loss, corruption, or unauthorised access that may occur despite our security measures.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through the App or via email. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at support@omegaapi.com.