Privacy at Onimo

Private. Always.

Enforced by architecture, not by policy.

A promise you cannot check is only a slogan. This page sets out what Onimo does with your data, what we will never do with it, and where the promise stops. It is written to be held against us.

What we promise

Built to find, not to follow.

Only you see where

Where your cat goes is visible to you alone. Location data stays in your Onimo account. It is never sold and never shared.

Finding, not tracking

Your Onimo sleeps most of the time. There is no continuous stream of positions, because finding a cat does not require one.

Other homes cannot reach your Onimo

Other Finders help you find your cat, but they can never make contact with an Onimo that is not on their own profile.

European infrastructure

The systems Onimo runs on sit outside American cloud providers. Engineered in EU.

Onimo is a privacy intermediary, not a pass-through. We are not in a position to sell what we deliberately never hold.

Where the promise stops

The honest edges.

Two things are true at once, so we say both.

Our promise covers the location data of the people who use Onimo, and the infrastructure we run ourselves. It does not cover the one-off platforms a purchase runs through, such as a crowdfunding or shop platform, and it does not cover ordinary marketing email that you asked for and can stop at any time. Those parties have their own terms, and we are not going to pretend otherwise.

Data we could share

Numbers, never names.

We do not sell personal data. Not now, and not at a better offer.

What we may do is share aggregated figures with organisations that can put them to use: how often cats in a region go missing, how long they stay away, how far they tend to travel. Those numbers say something about cats in general and nothing about your cat, your household or your address. Where it earns money, it goes towards keeping the subscription low for the people who own an Onimo.

This is where a promise usually gets vague, so here are the rules it has to pass, every time:

  1. No personal data leaves Onimo. No names, no addresses, no email addresses, no device identifiers.
  2. Only figures about groups large enough that no single household or animal can be picked out of them.
  3. Never the movements of one cat, in any form, to anyone.
  4. What is shared, with whom and why, is published here before it happens.

Oversight

Not our word alone.

A rule is worth what the check on it is worth. Onimo should not be the only party deciding whether Onimo is keeping to the rules above, so we are setting up independent oversight for exactly this decision, with the power to stop a proposal.

It works in both directions. A proposal that meets the rules is approved; a proposal that is refused comes with the rule it fails, in writing, here. That way this is something you can read and check rather than something you have to feel good about.

Who sits on it and how they are appointed is being worked out. We will publish that here before the first proposal is ever tested, and until that oversight is in place, nothing is shared.

Questions

Ask us anything about this.

Privacy questions, data requests, or a hole in the reasoning above: write to privacy@onimo.com.