Privacy Policy

MyMy Innovations operates under a strict Zero-Surveillance and Local-First data mandate. We believe that tools should serve their users, not extract value from their behavior or identity.

Single Purpose

OmniChat provides a unified, multi-model AI assistant workspace in your Chrome browser side panel, allowing you to interact with advanced language models using your own custom API keys.

Data Storage & Handled Content

• ✓ API Keys: User-supplied API keys (e.g. OpenAI, Anthropic, DeepSeek, Gemini, Groq, Ollama) are saved exclusively within your browser's local sandbox (chrome.storage.local). Keys are never relayed to, stored by, or visible to MyMy Innovations servers.
• ✓ Chat Histories & Prompts: Your prompts, system instructions, and chat transcripts remain 100% on your local machine.
• ✓ Direct Peer-to-Provider Communication: When you execute an AI query, your browser makes a direct, authenticated HTTPS connection straight from your device to the respective provider's public API endpoint (e.g., api.openai.com, api.anthropic.com). Your interactions are governed exclusively by your agreement with that third-party AI provider.

Permissions Justification

• storage: Required to persist your local provider settings, selected models, and local conversation histories.
• sidePanel: Required to display the chat workspace directly inside Chrome's native side panel without cluttering your browser tab bar.
• activeTab / contextMenus (optional): Invoked only when you explicitly select text on a webpage and click "Explain with OmniChat" or "Summarize".

Single Purpose

DeepSeek Response Saver intercepts and recovers streaming AI responses and reasoning chains on chat.deepseek.com, preventing data loss caused by sudden content moderation overrides, network drops, or UI resets.

Data Storage & Handled Content

• ✓ Zero External Network Transmissions: The extension transmits no data over the internet. There are zero background network pings, telemetry, or server uploads whatsoever.
• ✓ Local Stream Interception: In-flight Server-Sent Event (SSE) chunks and <think> reasoning traces are intercepted inside the DOM of chat.deepseek.com and immediately cached to local chrome.storage.local.
• ✓ In-Place Restoration: If an active turn is interrupted or censored, the extension reads from your local storage to reconstruct the response in a dedicated container directly underneath the message on your screen.

Permissions Justification

• host_permissions: ["https://chat.deepseek.com/*"]: Strictly limited to the official DeepSeek chat interface. The extension has zero access to any other website, tab, or browsing activity.
• storage: Required to persist rescued response text and reasoning steps on your local disk so they can be re-rendered when you reload or navigate chats.

Single Purpose

DNA enables internet users to broadcast their human preference against automated AI scraping and algorithmic slop by natively emitting standard IETF RFC 7240 Prefer: no-ai HTTP request headers, while verifying organic web badges on compliant web servers.

Data Storage & Handled Content

• ✓ Zero Data Collection or Inspection: DNA does not inspect the contents of your webpages, read form submissions, log URLs, or record your browsing history.
• ✓ Declarative Header Rule: The header modification rule is executed directly by the Chrome browser's native networking layer via declarativeNetRequest. Extension code does not sit in the middle of or analyze your web traffic.
• ✓ Zero External Servers: DNA operates completely offline with no backend communication.

Permissions Justification

• declarativeNetRequest: Used exclusively to instruct the browser engine to append the standard Prefer: no-ai request header without requiring programmatic access to sensitive web traffic.
• storage: Used solely to store your local preferences (such as enabling/disabling the protocol or badge indicator styles).
• activeTab: Used only to verify the Preference-Applied response header of the current site when you click the extension popup to view its organic status.

Single Purpose

Incognito Tab Manager provides a secure, encrypted snapshot vault for private browsing sessions, paired with an instantaneous anti-prying lock that obscures sensitive open tabs whenever the user steps away from their computer.

Cryptography & Security Standards

• ✓ AES-256-GCM Military-Grade Encryption: All saved session tab titles, URLs, and metadata are strongly encrypted client-side using authenticated AES-256-GCM before being committed to storage.
• ✓ PBKDF2 Key Derivation: Your master password is never stored in plain text. Key derivation utilizes PBKDF2 with SHA-256 and thousands of hashing iterations.
• ✓ Zero Cloud Leakage: Encrypted blobs exist only inside your local browser. They are never transmitted over the internet or synchronized across Google accounts. If you forget your master password, your saved sessions cannot be decrypted by anyone, including MyMy Innovations engineers.

Permissions Justification

• tabs & tabGroups: Necessary to capture tab URLs and titles in active Incognito windows upon your explicit instruction, and to restore saved sessions back into tabs.
• storage: Holds the encrypted session ciphertext blobs and local extension configuration.
• alarms: Powers the automated timeout timer that activates the anti-prying lock after user inactivity.
• scripting / in-page overlay: Used exclusively to render the protective blur curtain and dummy title disguise on active tabs during lock mode.

Your Absolute Data Sovereignty (GDPR & CCPA/CPRA)

Under regulations including the European General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA/CPRA), users possess the right to access, rectify, port, and delete their data.

Because MyMy Innovations operates on a zero-knowledge architecture and maintains no centralized user databases, you already retain 100% custody of your data. There is no remote account to delete or personal data residing on our servers.

Instant Data Purge Instructions

You can erase all data associated with any of our extensions at any time through standard browser mechanisms:

• 1. In-Extension Clear: Open the extension's settings or options menu and click "Clear All Local Data" or "Reset Database".
• 2. Uninstall Extension: Right-click the extension icon in Chrome and choose "Remove from Chrome". Chrome automatically purges all chrome.storage.local entries for that extension immediately.

Children's Privacy Protection (COPPA)

None of our Chrome extensions or web tools are directed toward children under 13 years of age, nor do we knowingly collect or solicit any personally identifiable information from children. Our companion platform (Hey Kid AI at hi.heykid.ai) operates with dedicated speech recognition safeguards and collects zero student profiles or identifiable telemetry.

Chrome Web Store Developer Policy Adherence

All extensions adhere strictly to Google's Chrome Web Store Developer Program Policies, including the Single Purpose Policy, the Minimum Permissions Policy, and the User Data FAQ requirements.

We may periodically review and update this Privacy Policy to reflect technical enhancements or regulatory updates. Any changes will be published here with an updated effective date.

If you have questions, feedback, or require technical clarifications regarding our cryptographic standards or permission justifications, please contact our privacy response team: