OMEN

Privacy Policy

Last updated: 16 September 2026

This Privacy Policy is entered into between you and Ruby Inc, doing business as Omen (“Omen”, “we”, “us” or “our”). It explains what personal data we collect when you use the website at www.getomen.xyz, the Omen mobile application and related services (the “Services”), how we use it, who we share it with, and the rights you have. Ruby Inc is the data controller for this data.

1. Who we are

Omen is owned and operated by Ruby Inc, a company registered in Georgia. You can reach us at contact@getomen.xyz.

2. Data we collect

Waitlist. When you join the waitlist we collect your email address and the time you signed up. To prevent abuse we also store a keyed hash of your IP address; we do not store the address itself.

Account and login. When you sign in to the app through our authentication provider we receive an account identifier and, depending on the method you choose, your email address or the identifier and name associated with your Google or Apple account. We do not receive your password.

Wallets and transactions. We collect the public addresses of the wallets connected to your account and the on-chain transactions you submit through the app, including token, amount, network fee and status. Blockchain data is public by design and is not controlled by us. We never collect your seed phrase or private keys.

Profile. If you set up a public profile we store the username, display name, bio and avatar colour you choose. This information is visible to other users. If you link an X account, we also store the handle, name and picture X gives us.

Lists you build. We store the tokens you add to your watchlist, the accounts you follow and any dividend reinvestment rules you set, so that the app can show them back to you on any device.

Usage and device data. The app contains no analytics, advertising or crash-reporting software. We do not record the screens you open or the taps you make, and we do not keep a history of what you search for: a search is used to answer that request and is not saved to your account. Requests to our servers necessarily carry an IP address and basic technical details such as the operating system and app version, and the app sends your device’s time-zone offset so that daily figures run from your own midnight. Our API uses your IP address only to limit how often requests can be made, held in memory for about a minute and never written to our database. Our hosting provider records requests in server logs for security and performance and keeps them for a limited period.

Wallet apps on your device. So that you can sign in with an external wallet, the Android app asks the operating system which installed apps can handle Solana wallet requests. The answer is used on your device to show you the choices and to open the wallet you pick. It is not sent to us or to anyone else, and we cannot see the other apps you have installed.

Location. We do not collect your location. The app requests no location permission and contains no location, mapping or advertising software.

Communications. If you contact us we keep the correspondence and the details you give us so we can respond.

3. How we use data

  • to provide, operate, secure and improve the Services;
  • to create and manage your account and wallet access;
  • to build and submit the transactions you request and, where enabled, to pay network fees on your behalf and enforce sponsorship limits;
  • to show your public profile and activity to other users;
  • to manage the waitlist and contact you about early access, updates and changes to the Services;
  • to detect, prevent and investigate fraud, abuse and security incidents, and to enforce our Terms of Service;
  • to comply with legal obligations and respond to lawful requests.

Where the law requires a legal basis, we rely on the performance of our contract with you, our legitimate interests in running and protecting the Services, your consent where we ask for it, and compliance with legal obligations.

4. Who we share data with

We share personal data only as needed to run the Services, with providers who process it on our behalf under contract:

  • authentication and embedded-wallet infrastructure;
  • hosting, database and content-delivery providers;
  • blockchain node, indexing and market-data providers;
  • email delivery providers for waitlist and account messages.

Transactions you submit are broadcast to public blockchain networks and routed through third-party decentralised protocols; those networks and protocols see your wallet address and transaction details. We may also disclose data to comply with law, to protect our rights or the safety of users, or as part of a merger, acquisition or sale of assets. We do not sell personal data.

5. International transfers

Our providers may store and process data outside Georgia, including in the European Union and the United States. Where required we use appropriate safeguards, such as contractual protections, for these transfers.

6. Retention

We keep waitlist data until you ask to be removed or the waitlist is closed. Account, profile and transaction records are kept while your account is active and for as long as needed afterwards to meet legal, accounting and security obligations. Server logs are kept for a limited period. Data recorded on a public blockchain cannot be deleted by us.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of Georgia have the rights set out in the Law of Georgia on Personal Data Protection and may complain to the Personal Data Protection Service. Residents of the European Economic Area and the United Kingdom may complain to their local supervisory authority. To exercise a right, email contact@getomen.xyz. We may need to verify your identity before responding.

8. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls and server-side transaction checks. No system is completely secure, and you are responsible for keeping your devices and login credentials safe.

9. Cookies and local storage

The website uses only strictly necessary storage, such as anti-abuse tokens for the waitlist form. The app stores a session token and your preferences on your device. We do not use third-party advertising cookies.

10. Children

The Services are not directed to people under 18 and we do not knowingly collect data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy. The “Last updated” date at the top shows when the current version took effect. Material changes will be announced through the Services or by email where we have your address.

12. Contact

Ruby Inc, doing business as Omen. A company registered in Georgia. Email: contact@getomen.xyz.