Privacy policy

Last updated October 20, 2026

Incident Report Builder ("the app") is run by Omnia Toolbox. It turns footage from your Ring cameras into incident reports. This policy explains what we collect, why, and what you can do about it.

What we collect

• Your account: your email address and a scrambled (hashed) version of your password. We never store the password itself.
• Your Ring connection: your Ring account ID and the access keys Ring gives us when you connect. We don't receive your Ring password.
• Footage you put in reports: when you build a report, we download the camera names, event times and types, snapshots and video clips for the cameras and time window you chose, plus any notes you write. We don't access your cameras at any other time.
• Subscriptions: Ring sells and bills subscriptions to this app. Ring tells us which plan you have, whether it's active, and which cameras it covers. We never see your payment details.
• Security and audit logs: IP addresses and request times, used to prevent abuse such as password guessing, and a record of each time a report is built, viewed, downloaded, shared, opened through a share link or deleted. Audit records are kept for one year.

How we use it

Only to provide the app: building your reports, letting you download and share them, sending password-reset emails, and keeping the service secure. We do not sell your data, use it for advertising, use your footage to train AI models, or run facial recognition or license-plate recognition.

Who sees it

• You. Only you can see your reports when signed in.
• People you share a report with. Anyone who has a share link you created can view and download that report until the link expires or you revoke it. We email you every time someone opens or downloads a report through one of your links.
• Not our staff. We do not view your footage. For support we work from report IDs, times and error messages. If you want help with a specific video, you can create a share link for us yourself and revoke it afterwards.
• Service providers who run parts of the app for us, only as needed to provide it:
  • Fly.io (hosting): stores your account, reports and footage on encrypted servers in the United States.
  • Our email delivery provider (email delivery): sends password resets and notices. Emails contain report titles and share-link names, never footage.
  • Cloudflare (domain name service and support email forwarding): does not receive your footage.
• Authorities, if the law requires it. We'll only disclose data when legally compelled, and we'll tell you unless the law forbids it.

How long we keep it

• Reports and their footage are deleted automatically 30 days after they're built. If you subscribe to Report Vault, your reports are kept for as long as that subscription is active. When it ends, reports older than 30 days are deleted 7 days later, and we email you first. You can delete a report at any time.
• If you disconnect the app in the Ring app, we delete your Ring access keys right away and email you. Your reports and footage are deleted 7 days later, unless you reconnect before then.
• If you delete your account, we delete your account, Ring connection, reports and footage right away.
• Whenever we delete a report or your account, we email you a confirmation. Our encrypted backups are erased within 5 days, after which no copy remains.

Security

All traffic is encrypted with HTTPS, and your data is stored on encrypted servers. Passwords are hashed. Share links use long random addresses that can't be guessed, and they expire.

Your choices and rights

You can download, delete or stop sharing any report, and delete your account from the Account page. To ask for a copy of your data or for anything else, email support@omniatoolbox.com. Depending on where you live, you may have additional rights under local law, and we'll honor them.

Children

The app is not meant for anyone under 18.

Changes

If we change this policy in a way that matters, we'll email you before the change takes effect.