Privacy Policy

• Account: email address, password (stored only as a secure hash by our login provider), username and display name.
• Profile: bio, profile photo, the interests you choose to personalise your feed, your date of birth, country and phone number — all optional. Your date of birth, country and phone number are private: they are never shown on your profile or to other members.
• Content you post: images, titles, descriptions, prompts, written posts, product links, brand and price, tags and comments. Published content is public.
• Activity: likes, saves, collections, follows, prompt copies, reports you make and notifications, so the site can show counts and personalise your feed.
• Technical: login cookies that keep you signed in, your theme choice (saved only in your browser), and basic server logs such as IP address and browser type kept by our hosting providers for security.
• Approximate location: when you are signed in, we record the country and state or region your IP address points to, and when you last visited. We use it only for overall statistics (for example, how many members are in each country). It is never shown on your profile, and we do not store your IP address, city or precise location for this.

We do not track which product links you click and we do not collect payment details.

• To run your account and show your content to others.
• To personalise your feed based on your interests and activity.
• To keep the site safe: spam prevention, moderation and handling reports.
• To comply with the law and respond to lawful requests.

We rely on your consent when you sign up, and on legitimate uses permitted by law (such as security and legal compliance). You can withdraw consent by deleting your account.

We don't sell or rent personal data. We use a few service providers to run the site:

• Supabase — database and login.
• Cloudflare R2 — image storage and delivery.
• Vercel — website hosting.

These providers may store data on servers outside India. They process it only on our instructions. When you click a product link, you leave Capichino and the other site's privacy policy applies.

Legal requests: we will keep and share your information with courts, police or government agencies when the law requires it — for example to help verify identity, or to prevent, detect or investigate offences, as required by the IT Rules, 2021. We may also share it to enforce our Terms or to protect the rights and safety of Capichino, our users or the public.

Posts, comments, your profile, username and display name are public. Anyone on the internet can see, screenshot, copy or share them, and search engines may index them. Choosing what to make public is your decision. Once something is shared or copied by others, we cannot control or recall those copies, even after you delete it. Don't post personal information you don't want public.

We keep your data while your account is active. Unused image uploads are deleted automatically. When you delete content or your account, we remove it from the live site and delete it from our systems within a reasonable time, except where the law requires us to keep records (for example, information connected to a legal complaint may be kept for 180 days as required by the IT Rules).

• See and correct your profile at any time from Edit profile.
• Delete your posts and comments yourself.
• Delete your whole account at any time from Edit profile → Delete account. This removes your profile, posts, comments, likes, saves, collections and follows straight away; images are removed from storage within about a day.
• Ask for a summary of your data by emailing beelabs14@gmail.com.
• Nominate someone to exercise these rights if you die or become unable to.
• Complain to our Grievance Officer (see the Grievance page). If you are not satisfied, you can approach the Data Protection Board of India.

Capichino is for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will remove it.

We use reasonable security practices: access controls, encrypted connections (HTTPS) and database-level security rules so users can only change their own data. No system is perfectly secure and we cannot guarantee absolute security. Keep your password safe and don't share it. If a breach affects you, we will tell you and the authorities as the law requires.

We will post any changes here and update the effective date. Important changes will be announced on the site.

Bee Labs — beelabs14@gmail.com