Privacy Policy
Last updated 10 November 2026
Lochy is a study memory: it remembers what you tell your AI about your studies so each new chat can pick up where you left off. This policy says what Lochy stores, why, who else handles it, and how you control it. Lochy is operated by Aneesh Kadam, India (“Lochy”, “we”).
Who can use Lochy
Lochy is for adults only. You must be 18 or older. We do not knowingly store data about anyone under 18; if you believe we have, write to us and we will delete it.
What we store
- Account: your email address and when you signed in.
- Conversations: the messages you send to an AI you have connected to Lochy, and that AI’s replies, as the AI passes them to Lochy.
- Memories: short facts about your studies (goals, deadlines, preferences, things you find hard), each taken from your own words.
- Things you add: notes, study plans, your study profile, review answers, and the names of the AI apps you connect.
- Usage counts: how many requests you make, to enforce limits. Server logs record requests but not what you wrote.
We do not use advertising or tracking cookies. The only cookies are the ones that keep you signed in and remember your theme and that you accepted this policy.
Why we store it
Only to provide Lochy to you: to store your memories, return the relevant ones to your AI, and show you your own history. We rely on your consent, which you give when you start and can withdraw at any time by deleting your account. We do not sell your data, show ads, or use your data to train AI models.
Who else handles your data
Lochy runs on services provided by other companies, which process data on our behalf:
- Supabase: database and sign-in.
- Render: the Lochy server. Vercel: the website.
- Upstash: request counters. Cloudflare: network and email routing. Resend: account emails.
- Google (Gemini API): your messages and memories are sent to Google to be converted into numerical form so Lochy can find related memories later. Lochy uses Google’s paid service, under which Google states it does not use this content to improve its products.
Some of these services store data on servers outside India. The AI apps you connect (such as Claude, ChatGPT or Gemini) are your own accounts with those companies; what you type there is also governed by their privacy policies.
How long we keep it
Until you delete it. Deleting your account erases your memories, conversations, plans, files and sign-in. Security logs, which do not contain what you wrote, are kept for up to 180 days as Indian law requires.
Your rights
- See and download everything Lochy holds about you: Profile → Your data → Download my data.
- Correct a memory, or tell Lochy to stop using it, on the Memory page.
- Delete everything: Profile → Your data → Delete my account.
- Disconnect an AI app at any time from that app’s connector settings.
- Complain to us (below) and, if unsatisfied, to the Data Protection Board of India.
Security
Data is encrypted in transit, each account’s data is isolated in the database, and access to Lochy’s systems is protected by two-factor authentication. No system is perfectly secure; if a breach affects your data we will tell you and the authorities as the law requires.
Grievance officer
Aneesh Kadam · privacy@lochy.co. We acknowledge complaints within 24 hours and resolve them within 15 days.
Changes
If this policy changes in a way that matters, Lochy will ask you to accept the new version before you continue.