Privacy Policy

OmniQ Labs Private Limited · applies to ThoughtsUPP and omniqlabs.com · Effective 8 September 2026

This policy explains what personal data OmniQ Labs Private Limited ("OmniQ Labs", "we", "us") collects when you use ThoughtsUPP (the app at thoughtsupp.com and app.thoughtsupp.com, including its WhatsApp messaging) and this website, why we collect it, who we share it with, and the choices you have. We are the data fiduciary for this data under India's Digital Personal Data Protection Act, 2023 and the data controller under the EU/UK GDPR where those laws apply.

1. Who we are

OmniQ Labs Private Limited (CIN U62011KA2026PTC216284) is a company incorporated in India with its registered office at SY.No 49/1, Villa No F2-01, Royal Tulip Villas, Sarjapura, Anekal, Bangalore, Karnataka 562125. For anything in this policy, write to privacy@omniqlabs.com or admin@omniqlabs.com.

2. What we collect

• Account and sign-in data. Your name, email address and Google account identifier when you sign in with Google; your mobile number when you sign in with a WhatsApp one-time code; a profile you choose to fill in.
• Your thoughts and plans. The text you type or speak into ThoughtsUPP, the answers you give to its questions (dates, places, people, budgets, preferences, traditions), files and photos you attach, and the plans, checklists and drafts the app builds from them.
• Group and room data. When you share a thought with other people, the members of that group, invitations, and the messages exchanged in its room.
• Messages sent on your behalf. When you tap Send on a draft enquiry, the message text, the recipient's phone number, delivery status, and any reply the recipient sends to our WhatsApp business number, which we show to you inside the relevant thought.
• Location and device context. Your approximate location and time zone when you allow it, so plans and discovery are relevant to where you are; device type, browser and app version; crash and performance logs.
• Usage data. Which features you use and when, so we can keep the service reliable and improve it.
• Website data. Standard server logs (IP address, pages visited, browser) when you visit omniqlabs.com.

We do not ask for, and ask you not to enter, government identity numbers, payment card numbers or passwords for other services.

3. Why we use it (purposes and legal basis)

• To provide the service you asked for — creating, organising and carrying your thoughts through to done; signing you in; sending reminders you set; showing group members what you chose to share. Basis: performance of a contract with you / consent under the DPDP Act.
• To send messages you explicitly approve — a vendor enquiry or reply goes out only when you tap Send on that specific message. Basis: your consent, given per message.
• To process your requests with AI. Your text is sent to AI model providers we contract with (see section 5) so the app can classify, draft and answer. Basis: performance of the contract.
• To keep the service secure and working — fraud and abuse prevention, debugging, capacity planning. Basis: legitimate interests / legal obligation.
• To improve the product. Aggregated, de-identified usage statistics. Where we wish to use the content of your interactions to train or fine-tune our own models, we do so only with your opt-in consent, and never with data you have marked private or with health, financial or similar sensitive content.

4. WhatsApp messaging

ThoughtsUPP uses the WhatsApp Business Platform operated by Meta. We use it to send you a one-time sign-in code, and, when you choose, to send an approved template message to a vendor or contact from our business number with your first name and your message text. Replies to that message are delivered to us by Meta and shown to you in the app. Meta processes these messages under its own terms and privacy policy. We do not read your personal WhatsApp chats; we only see messages sent to or from our business number.

5. Who we share data with

• People you share with. Members of a group or room you create or join see what you choose to share in it.
• Recipients of messages you send. A vendor you message sees your first name and your message.
• Service providers that process data for us under contract: cloud hosting (Amazon Web Services, Mumbai region), Meta (WhatsApp Business Platform), Google (sign-in, maps and places), AI model providers used to classify, draft and answer, workflow and notification infrastructure, and analytics/error tracking. They may only use your data to provide their service to us.
• Legal. Where required by law, court order or to protect rights, safety and the integrity of the service.
• Business transfer. If OmniQ Labs is acquired or merges, your data may transfer to the successor under this policy.

We do not sell personal data, and we do not share it with advertisers.

6. International transfers

Our primary servers are in India (AWS Asia Pacific — Mumbai). Some providers, including AI model providers and Meta, may process data outside India. Where they do, we rely on contractual safeguards and, for users in the EU/UK, standard contractual clauses or equivalent mechanisms.

7. How long we keep data

We keep your account and thoughts for as long as your account is active. Reminders, plans and messages stay until you delete them or your account. Server and security logs are kept for up to 90 days. When you delete your account, we delete or de-identify your personal data within 30 days, except where we must keep it to meet a legal obligation or resolve a dispute, and except for copies in routine backups, which expire within 90 days.

8. Your rights and choices

• Access and correction. See and correct the data we hold about you, in the app or by writing to us.
• Deletion. Delete individual thoughts in the app, or ask us to delete your whole account and data by emailing privacy@omniqlabs.com from your registered email or number. We confirm within 30 days.
• Withdraw consent. Stop location sharing, notifications or WhatsApp messaging at any time in the app or your device settings; withdrawing consent does not affect processing already done.
• Grievance redressal (India). Under the DPDP Act you may raise a grievance with our Grievance Officer at privacy@omniqlabs.com. We respond within the time the law allows. If you are not satisfied, you may approach the Data Protection Board of India.
• EU/UK users. You also have rights to restrict or object to processing, to data portability, and to complain to your local supervisory authority.

9. Children

ThoughtsUPP is not directed at children under 18 in India or under the age of digital consent in your country. We do not knowingly collect data from them; if you believe a child has given us data, write to us and we will delete it.

10. Security

Data is encrypted in transit and at rest, access is limited to staff and systems that need it, secrets are held in a managed vault, and we keep audit logs of access to messaging and notification systems. No system is perfectly secure; if a breach affects you we will notify you and the relevant authorities as the law requires.

11. Cookies and this website

omniqlabs.com uses only the cookies and local storage needed for the site and app to function. We do not run third-party advertising cookies.

12. Changes

We will post any change to this policy on this page with a new effective date, and tell you in the app if the change is material.

13. Contact

OmniQ Labs Private Limited, SY.No 49/1, Villa No F2-01, Royal Tulip Villas, Sarjapura, Anekal, Bangalore, Karnataka 562125, India · privacy@omniqlabs.com · admin@omniqlabs.com · +91 73384 67161