Privacy Policy

01. About this policy

OmniBand is operated by C&Si Unlimited Space Innovation Technology (Shenzhen) Co., LTD (“we”, “us”, or “our”).

This policy describes how OmniBand processes information when you create an account, connect supported health providers, import Apple Health files, and use your dashboard. Provider services have their own privacy policies.

02. Information we process

• Account information: your email address or phone number, account profile, and authentication information used for registration, sign-in, and account recovery.
• Connected health information: records made available by Oura, WHOOP, or Google Health (Fitbit) under the permissions you grant. Depending on your source, these may include sleep, activity, workouts, heart rate, and recovery metrics.
• Imported information: the Apple Health ZIP file you upload, supported records extracted from it, and import progress information.
• Connection and service information: provider authorization credentials held by the backend, synchronization status, and operational information needed to deliver and troubleshoot the service.

03. How information is used

OmniBand uses account information to authenticate you and manage your session. Connected and imported health information powers the dashboard, provider views, readings, and trends you request. Connection and import status helps show whether data is available and whether an operation needs attention.

The application uses session cookies for authenticated requests. The browser does not store or refresh provider access or refresh tokens. It may store an Apple Health import job identifier locally so it can resume displaying import progress.

04. Google & Fitbit data

Connecting Google Health (Fitbit) sends you to the provider’s authorization flow. Review the consent screen for the exact permissions requested. OmniBand uses the authorized data to provide its health synchronization and dashboard features.

OmniBand’s use of information received from the Google Health API and Developer Tools adheres to the Google Health API Developer and User Data Policy, including its Limited Use requirements. Human access and transfers are limited to the purposes and exceptions permitted by that policy.

You can review or remove Google account connections at Google Account connections. Other providers offer access controls in their account settings.

05. Sharing & security

Connecting a provider involves exchanging authorization and data requests with that provider. Service infrastructure also processes information to operate OmniBand. The operator must confirm the service providers, processing locations, any other disclosures, and applicable safeguards before this policy takes effect.

Keep your account credentials private and use a trusted device. No online service can guarantee absolute security. This policy must describe the verified production safeguards rather than promise measures that have not been confirmed.

06. Retention & deletion

We retain account information and health records indefinitely, with no preset automatic deletion period, unless you request their deletion.

To request account closure or deletion of your health records, email developer@csi.space and specify the account and data your request concerns. Requests are handled manually. This is an email-based process, not an automatic deletion action in the application.

Revoking provider access prevents future access under that authorization; it does not by itself delete information already imported into OmniBand. To request deletion of existing records, contact us using the email above.

Details still under review: retention and deletion rules for original upload files, operational logs, and backups, including any legally required retention. These rules and any deletion timeframes must be confirmed before this policy takes effect.

07. Your choices

You choose whether to connect a provider or upload an Apple Health file. You can decline provider permissions or revoke an existing authorization in the provider’s settings; features requiring that data may then be unavailable.

Depending on where you live, you may have rights to access, correct, export, or delete personal information and to object to or restrict certain processing. Contact developer@csi.space with privacy questions or requests to exercise your rights.

08. Contact & updates

For support, privacy inquiries, account closure, or data deletion requests, email developer@csi.space.

This draft must not be used as the final consent-screen privacy policy until the outstanding data-handling practices and publication details above are confirmed. The final policy will display an effective date. Material changes to privacy practices should be communicated through an appropriate service notice.

See also our terms of service.