ohhsi.

Your privacy comes first.

Draft for testing. This notice will be reviewed before Ohhsi opens to the public.

Who we are

Ohhsi is run by Riccardo Gulino, Milan, Italy, the data controller. Write to info@ohhsi.com for anything about your data.

Adults only

Ohhsi is for people aged 18 or over. You confirm your age when you create your profile, and we refuse birth dates under 18. If we learn that someone under 18 has an account, we delete it.

What we collect

  • Account: email address and password (stored only as a secure hash by our auth provider).
  • Profile: name, birth date (others only see your age), gender, who you’d like to meet, relationship style, what you’re looking for, city and bio.
  • Photos: resized on your device, with location and other hidden data removed before upload. Each photo is checked automatically for nudity before anyone can see it.
  • Your area: a point rounded to about 300 m, from your device or a pin you place. Other people only ever see your city and a distance in whole kilometres.
  • Desires and boundaries: only if you give explicit consent. They are never shown on your profile; after a match you choose what to reveal, and only items you both enjoy appear.
  • Health information: optional, only with separate explicit consent, and shown to a match only if you decide to share it.
  • Matches, likes and messages, and reports or blocks you make.
  • Your toy: the connection type and, for Lovense, an identifier from their service. We never receive anything from your toy.

Why, and on what basis

  • To run the service you asked for (matching, chat, buzzes): performance of our contract with you.
  • To match you on desires and to share health information: your explicit consent (GDPR art. 9(2)(a)), which you can withdraw at any time. Withdrawing deletes that data.
  • To keep people safe (photo checks, reports, blocks, fraud prevention): our legitimate interest and legal obligations.
  • Product emails: only with your consent.

Who else processes it

  • Supabase — database, sign-in and photo storage, in the EU (Stockholm).
  • Sightengine — automatic nudity check of profile photos.
  • Lovense — only if you connect a Lovense toy through their app.
  • OpenStreetMap — maps and place search, loaded directly by your browser when you set your area.

How long we keep it

As long as your account exists. When you delete your account, your profile, photos, answers, matches and messages are deleted straight away; backups roll over within 30 days. When you edit or delete a message, the previous text is kept privately for 30 days so that reports can still be reviewed, then erased. Reports may be kept longer when needed for safety or legal reasons.

Your rights

You can see, correct, export or delete your data, withdraw consent, and object to processing. You can delete your account at any time from Profile → Delete account. You can also complain to your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Last updated: 5 November 2026 (draft)