Privacy Notice (DPDP)
This notice explains what personal data we process, why, and the rights you have under India’s DPDP Act, 2023.
Last updated: 12 July 2026
Who this applies to
This notice applies to Data Principals in India using Ocxit. If you’re in the EU or UK, see our GDPR notice instead.
What we collect
- Account data: phone or email, name, date of birth, city, gender identity, orientation.
- Profile data: photos, prompts, voice intros, verification results.
- Usage data: matches, messages, in-app actions, device and app version, coarse location (with permission).
- Payment data: processed by our payment partners; we don’t store card numbers.
Why we process it
- Providing the service (matching, messaging, safety review).
- Keeping the community safe (verification, abuse detection).
- Improving Ocxit (analytics — only with your consent).
- Complying with law (tax records, lawful requests).
Your rights as a Data Principal
- Access: a copy of the personal data we hold about you.
- Correction: fix anything that’s wrong or out of date.
- Erasure: delete your account and data (subject to retention required by law).
- Grievance redressal: raise a complaint with our Grievance Officer.
- Nomination: nominate someone to exercise these rights on your behalf if you’re unable to.
Use Settings → Privacy in the app, or email us — see “Contacting us” below.
Consent, and how to withdraw it
For non-essential processing (analytics, personalisation, marketing), we ask for your consent — clearly and with reject as easy as accept. You can withdraw consent anytime from Settings → Privacy or from the cookie preferences on this site. Withdrawing consent doesn’t affect processing that already happened.
Data retention & deletion
We keep account data while your account is active. If you delete your account, we erase personal data within 30 days, except where retention is required by law (for example, tax records or safety-related evidence in an ongoing investigation).
Sharing & transfers
We share data only with processors we contract to run Ocxit (hosting, payments, analytics, verification). Cross-border transfers follow the DPDP Act’s current “blacklist” approach — permitted unless the country is restricted by notification.
Children’s data
Ocxit is 18+. We do not knowingly process data of children. If you believe a child is using Ocxit, please report the account to safety@ocxit.app.
Security
Encryption in transit and at rest, access controls, and regular reviews. In the rare event of a personal data breach, we notify the Data Protection Board and affected Data Principals as required.
Contacting us
Grievance Officer (India): grievance@ocxit.app
Ocxit Technologies Pvt Ltd, Bengaluru, Karnataka, India.
This notice is guidance about our practices, not legal advice.