Privacy Policy

THB INFOTECH PRIVATE LIMITED ("THB Infotech", "we", "us", "our") operates Ouchy. This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you use Ouchy.

Account information

Depending on how you register, we may process:

• email address
• username
• account ID
• authentication information
• age / eligibility information
• account preferences

Character information

If you create or customise a Ouchy character, we may process the character name, personality, preferences, communication style, relationship preferences and character configuration.

Conversation information

• text messages
• conversation history
• conversation summaries
• memories
• relationship-state information
• AI-generated responses

Voice information

When you use voice functionality we may process:

• microphone audio
• speech transcription
• generated speech
• voice-session metadata
• duration
• latency and technical information

Do not treat Ouchy as a secure vault. Do not intentionally submit passwords, banking credentials, card numbers, government ID numbers, authentication codes or highly confidential business information.

How we use information

• provide Ouchy and authenticate users
• maintain accounts and conversation memory
• personalise experiences and provide voice conversations
• process payments and calculate voice usage
• prevent fraud and detect prohibited activity
• moderate content and protect minors
• maintain cybersecurity and troubleshoot technical issues
• improve system reliability
• comply with legal obligations and respond to support requests

AI processing

Your conversations may be processed by our AI infrastructure and third-party technology providers necessary to deliver the service. Where third-party AI providers are used we implement appropriate contractual and technical controls consistent with our obligations.

Conversation privacy

Ouchy conversations are private within the normal operation of the service. However, privacy does not mean absolute secrecy. Information may be accessed or disclosed where reasonably necessary for safety moderation, fraud prevention, cybersecurity, technical troubleshooting, customer support, legal compliance, or responding to valid legal requests.

Voice privacy

Voice sessions may be processed through third-party speech-to-text, text-to-speech and realtime providers. Where voice is recorded or retained rather than merely processed transiently, the product discloses that fact and obtains any legally required consent. Voice recording never happens silently.

Memory

If memory is enabled, information from conversations may be converted into structured memory to personalise future conversations. You may have controls to view memories, delete individual memories, clear memories, disable certain memory functions and delete your account.

Payment information

Ouchy does not store complete payment-card numbers where payment processing is handled by a third-party processor. Payment providers may process card information, billing address, transaction information, payment status and fraud/risk information.

Cookies & analytics

We may use essential cookies, authentication cookies, security technologies, analytics, performance monitoring and fraud prevention. Non-essential tracking is implemented according to applicable consent requirements.

Data sharing

• hosting providers
• AI infrastructure providers
• speech-to-text and text-to-speech providers
• realtime communication providers
• payment processors
• age-verification providers
• security / fraud providers
• analytics providers
• customer support providers
• professional advisers
• regulators or law enforcement where legally required

International transfers

Because Ouchy may use international technology infrastructure, information may be processed outside India. Where required, appropriate contractual, organisational and technical safeguards are implemented.

Data retention

We retain information only for as long as reasonably necessary for:

• providing the service
• maintaining account functionality
• legal compliance
• fraud prevention
• dispute resolution
• security
• accounting and payment records

Different categories of information may have different retention periods.

Account deletion

You may request account deletion from Profile → Privacy & data, or by contacting privacy@lola.app. Deletion may be subject to legally required retention of certain records.

Your privacy rights

Depending on your location and applicable law you may have rights including:

• access
• correction
• deletion
• withdrawal of consent
• restriction / objection
• data portability where applicable
• grievance and redressal rights

For users in India this policy is aligned with the Digital Personal Data Protection framework, which requires informed, specific and affirmative consent and treats persons under 18 as children.

Children

Ouchy is not intended for anyone under 18 and we do not knowingly permit children to use Ouchy. If we discover an account belonging to a person under 18 we may immediately suspend the account and delete associated personal data subject to legal requirements.

Security

We use reasonable technical and organisational safeguards including, where appropriate:

• encryption in transit
• encryption at rest
• access and authentication controls
• secrets management
• logging and monitoring
• backups
• security testing
• least-privilege access

No internet service can guarantee absolute security.

Changes

We may update this Privacy Policy. Material changes will be communicated through appropriate channels.

Contact

THB INFOTECH PRIVATE LIMITED

Privacy: privacy@lola.app