What Ochii knows about you.

What is collected

Your account. Ochii signs you in with Google and receives the name, email address and profile picture that Google returns, plus the handle derived from it. Your picture appears on Ochii only if you choose it in Settings; initials are the default. There is no password to lose because Ochii never sees one.

What you record. The places you rate, the ratings themselves, your notes, the dates you visited, the optional attributes beside a visit, your wishlist, and the lists you build.

What you send us about others. Reports about a rating, place, list or profile, and the accounts you have blocked. A report is kept even after it is resolved, because a pattern across several reports is the thing that makes moderation work.

Nothing is bought from data brokers, and nothing is inferred about you beyond what you typed.

What is public, and what is not

This is the part worth reading twice, because Ochii is a public product by design and it is easy to assume otherwise.

• Public while your profile is public: your handle, display name, bio, your chosen picture (if enabled), your ratings and their notes, and any list you set to public. These appear on your profile, on restaurant pages, and in share cards anyone can open without an account.
• Private always: your email address, your wishlist, your private lists, the reports you file, and who you have blocked. The person you blocked is not told.
• Your choice: setting your profile to private in Settings takes your profile, your ratings and your lists off the public site, including lists you had published.

Public pages are cached and can be indexed by search engines, and copies may persist in caches or archives outside Ochii’s control for a while after you change your mind.

Who else processes it

Ochii runs on a small number of services. Each one is listed with what it receives.

• Google

  Sign-in. Ochii never sees or stores a password.

  Your name, email address and profile picture, from the Google account you choose to sign in with.

• Supabase

  The database and authentication behind the product. Hosted in the ap-south-1 region, in India.

  Everything in your account: your profile, ratings, notes, lists, wishlist, reports and blocks.

• Vercel

  Hosting and delivery of the site, plus aggregate traffic analytics.

  Standard request data, including IP address, browser, and pages requested. Vercel Analytics counts page views without cookies or cross-site identifiers.

• OpenStreetMap (Nominatim)

  Looking up a restaurant's address and coordinates when someone adds a missing place.

  Only the place name typed into the add-place form. No account information is sent.

• PostHog

  Optional product analytics, loaded only after you choose Allow analytics.

  Page and product events tied to your account. Rating and note text, report text, searches and email addresses are excluded.

• Sentry · not yet switched on

  Error monitoring, so a crash is seen rather than guessed at.

  Diagnostic data about an error, which can include the page you were on and your account id.

Nothing is sold, and nothing is shared for advertising. Data is disclosed otherwise only where the law requires it.

Cookies

Ochii uses first-party cookies to keep you signed in and to remember whether you allowed optional analytics. The light or dark theme is stored in your browser’s local storage. If you allow analytics, PostHog stores a first-party identifier in local storage and receives page and product events; it is not loaded before that choice. There are no advertising cookies and no cross-site advertising trackers.

Your rights, and how to use them

Under India’s Digital Personal Data Protection Act 2023, you can:

• See and correct what is held about you. Your profile, ratings, notes and lists are all editable in the product itself.
• Delete everything. Deleting your account in Settings removes your profile, ratings, notes, lists, wishlist and blocks, immediately and for good. It is not a deactivation and there is no recovery window, so it is worth being sure.
• Withdraw analytics consent at any time through Analytics choices in the footer. Deleting your account withdraws consent for all account processing and removes the account data described below.
• Complain, using the contact below, and escalate to the Data Protection Board of India if the answer is unsatisfactory.

Two things survive a deletion, and it is fair to say so: reports you filed about other people stay, with your identity removed, because deleting an account should not erase the evidence in a complaint against someone else; and places you added to the shared catalogue stay, because they are facts about restaurants rather than about you.

How long it is kept

For as long as you have an account, and then no longer. Deletion is immediate rather than scheduled. Ochii’s free-tier database does not provide a user-accessible backup or recovery copy, and server logs are retained by the hosting providers under their own policies.

Children

Ochii is not intended for anyone under 18, and accounts are not knowingly created for them. If you believe a child has an account, please use the contact below and it will be removed.

Sources and attribution

Addresses and coordinates in the catalogue come from OpenStreetMap and are used under the Open Database Licence. © OpenStreetMap contributors.

Changes

If these promises change in substance, the date at the top changes with them and the new version is published here before it takes effect.

Getting in touch

A published contact address for privacy questions and complaints is being finalised and will appear here before Ochii opens to the public. Until then, account deletion in Settings removes everything immediately and needs nobody’s help.