updated september 17, 2026
privacy.
what we collect, why, who else touches it, and how long we keep it. the short version: as little as we can, never sold, and your exact location is never stored at all.
the short version
we collect as little as we can get away with, we never sell any of it, and there are no ads. your exact location is never stored — not by us, not anywhere. you can delete everything in one step.
what we collect
- your school email, and the campus it belongs to
- your first name, graduation year, and date of birth (we use the birthday only to check you're 18 — it's never shown to anyone)
- the photos, status line, tags, and goals you choose to put on your profile
- a location tier — here now, on campus, nearby, or lake co. your device works out which tier you're in and sends us only that word. the coordinate itself is never saved and never logged.
- your hi's and your messages, so we can deliver them
- a device token for push notifications, and basic app events like "opened the grid" so we can tell whether the app works
what we don't collect
your contacts. your photo library. gps history or a location trail. anything from other apps. we don't track you across the web, we don't use advertising identifiers, and we don't buy data about you from anyone.
the sensitive stuff, if you add it
pronouns and orientation are optional and stay off your profile unless you turn them on. what's in "more about me" — who you're into, safer-sex details, kinks, hard nos — is private by default and only ever visible to someone you've deliberately shared it with, one person at a time. you can unshare it whenever you want.
none of it is used to sort or filter the grid, none of it goes into analytics, and none of it is shared with anyone outside ohhi. it's stored encrypted, separately from the rest of your account.
who else touches your data
- an identity verification company checks your student id and selfie, then deletes the images. we get back a yes or no. details on the what we do with your id page.
- hosting, database, and file storage providers hold the data so the app can run
- apple and google deliver push notifications; an email provider sends your verification code
- an analytics tool records app events. it never receives your messages, your photos, or anything from the sensitive list above.
that's the whole list. we don't sell your data, we don't rent it, and we don't hand it to advertisers. if law enforcement asks for something, we require valid legal process and we'll tell you unless we're legally barred from doing so.
how long we keep things
- your account and everything on it: until you delete it, then gone within 30 days
- messages: deleted with your account. the other person's copy of a conversation goes when they delete theirs
- your id and selfie images: never stored by us at all
- safety reports: kept after an account is gone, because a report about someone has to outlive their account to be worth anything
- if you're banned: we keep a reference to your verification so the same person can't sign up again
what you can do
pause yourself so you're off the grid but keep your chats. edit or remove anything on your profile. unshare an album or your private card at any time. delete your account from settings — one step, no guilt screen, no "are you sure you want to lose your matches." email us and we'll send you a copy of what we hold, or confirm a deletion.
ohhi is 18+
we check age at signup and again during id verification. we don't knowingly collect anything from anyone under 18, and an account that fails the age check is closed rather than held.
changes, and how to reach us
if we change something that matters, we'll tell you in the app before it takes effect — not by quietly updating a date at the top of a page. questions, requests, or complaints: safety@sayohhi.com.
ohhi is operated by spark n code llc, gurnee, illinois. this is the plain-language version written while we're pre-launch; a lawyer reviews it before the app opens, and we'll post the final version here.
