ONIQ is a lifestyle super app. This policy explains what we collect, why, and the controls you have. It is aligned with India's Digital Personal Data Protection Act, 2023 (DPDP).
1. What we collect
- Account info — email, username, display name, avatar (if provided).
- Messages and calls — chat content and media stored to deliver them. Data is encrypted at rest by our infrastructure provider and in transit via TLS. Voice and video call audio/video streams are peer-to-peer where possible and are not recorded by us.
- Uploads — clips, moments, avatars, wallpapers you upload.
- Basic telemetry — error and performance logs to keep the service running. No third-party ad trackers.
- Location, only when you ask for it — if you tap to use your current location for a ride, delivery or nearby lookup, we read your precise coordinates at that moment to resolve the place. We do not track you in the background and we do not store your coordinates. Separately, we read a country-level signal from the network edge to show country-correct content; it is used and discarded, never stored.
- Contacts, only when you ask for it — if you choose to find friends already on ONIQ, we read phone numbers from your address book to match them against existing accounts. We do not upload your address book wholesale or keep a copy of your contact graph.
- What you type into our AI features — see section 4.
2. Why we use it
- Provide messaging, calls, clips, and other in-app features you request.
- Keep the service safe: detect abuse, respond to reports, honour lawful takedown orders.
- Comply with applicable law.
We do not sell your personal data. We do not show third-party ads.
3. Health & Wellness Data
ONIQ's Vitals hub is optional. If you choose to use it, we store:
- Menstrual cycle logs — period start/end dates, symptoms you tag, and any notes you add.
- Daily wellness check-ins — sleep hours, mood, energy, whether you exercised, and water intake.
This data is stored securely in our database and protected by row-level security, so it is accessible only to the account that created it. Health data is never used for advertising, never shared with or sold to third parties, and is not used for analytics or user profiling.
You can delete individual cycle logs and check-ins from inside the Vitals hub at any time, use "Delete all my health data" to wipe every health record in one action, or delete your entire ONIQ account — which permanently removes all health data along with the rest of your profile. For any health-data request, contact grievance@oniqhub.com.
4. AI features and the provider behind them
Three parts of ONIQ generate text: Ting, the Study Buddy tutor and paper generator, and the CV builder. They do not run on our own servers.
When you use them, what you type is sent to Anthropic, which operates the model that produces the response. For the CV builder that includes the facts you enter about yourself — your qualifications, employers and dates — because those are what the CV is written from.
- Your input is used to produce your answer, and for nothing else. It is not used to train a model, not used for advertising, and not sold.
- Health data may be processed by ONIQ's AI-assisted health features when you choose to use them and provide the required consent. AI-assisted features are subject to ONIQ's privacy, security, consent, audit, and safety controls. When you use them, the records you ask about, and any report you ask them to read (its text, or the photo or PDF itself), are sent to Google Cloud Vertex AI (Gemini), operated by Google, to produce the answer, and are not used to train Google's models.
- Generated output is labelled as AI-generated, and you can report a bad answer from inside the app.
- If you would rather nothing was sent, do not use these three features — the rest of ONIQ works without them.
5. Your rights
- Access & correction — view and edit your profile fields from Profile.
- Erasure — delete your account from Profile → Delete account. This removes your profile, messages you sent, and uploads.
- Grievance redressal — contact our Grievance Officer (below) for privacy complaints.
6. Children
ONIQ is intended for users 18 years and above. We do not knowingly collect personal data from children.
7. Breach notification
If we become aware of a personal-data breach that is likely to result in risk to your rights, we will notify affected users and the Data Protection Board of India within the timelines required by DPDP.
8. Data retention and deletion
We keep personal data only for as long as it is needed for the purpose it was collected for, and no longer. Each category has its own period:
- Account data (email, user name, display name, avatar) — kept for as long as your account is open. It is erased when you delete the account.
- Messages, calls and uploads (chat content, clips, moments, avatars, wallpapers) — kept while your account is open, or until you delete the individual item, whichever comes first. Voice and video call streams are peer-to-peer where possible and are never recorded or stored by us.
- Status updates — deleted automatically 24 hours after posting.
- One-time passcodes — expire and are discarded 10 minutes after they are issued.
- Parental-consent requests — expire 7 days after they are raised.
- Health and wellness data (Vitals hub) — kept only while you use the hub. You can delete individual cycle logs and check-ins at any time, and deleting your account removes all of it.
- Location — read only at the moment you ask for it and discarded immediately. We do not track you in the background and we do not store coordinates.
- Contacts — phone numbers are matched against existing accounts and discarded. We do not upload your address book or keep a copy of your contact graph.
- Diagnostic and performance logs — kept for up to 90 days, then deleted.
- Safety, abuse and copyright records — kept for up to 180 days after the report is actioned, so that repeat abuse can be identified and appeals can be answered, then deleted.
- Records we are legally required to keep (tax and payment records, data under a legal hold or a lawful order) — kept for the period the law requires, and deleted once it ends. A legal hold is released as soon as the matter closes.
When you delete your account, it enters a 30-day grace period during which you can change your mind by signing back in. If you do not, the account is permanently purged: your stored media is removed from our storage buckets and every related record is deleted from our database. Nothing personal survives the purge except the legally required records listed above.
Backups are kept for disaster recovery and roll off on their own cycle; deleted data is not restored from a backup into a live account.
9. Contact
Grievance Officer
Pooja Biswas
This document is a template maintained by a small intermediary and is not legal advice.
See also our Terms of Service, Delete your account, and Child Safety Standards.