Skip to content
LokSense
Sign in

Privacy notice

Last updated: 21 October 2026

This notice explains what personal data LokSense ("we") collects, why, and your rights under India's Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025. LokSense is run by Rajat Garg.

What we collect, and why

  • Email address (yours, or the one your Google account shares): to sign you in and allow one vote per person. Never shown publicly.
  • Mobile number, asked when you set up your profile: to help prevent fake accounts and, once mobile verification starts, to verify your account. It is not verified until then. Never shown publicly.
  • Profile: username, display name, identity badge (self-declared), state/city or country. Used to show your posts and to split results. Your location is shown only at city or state level.
  • What you post and how you vote: shown publicly, except your individual votes, which are private and only counted in totals.
  • Optional details (urban/rural, age group, gender, occupation): only with your separate consent, used only in totals of 30 or more people, and withdrawable at any time.
  • Security logs (IP address, device information, actions): to protect the service and meet legal duties. Kept for 180 days in India as required by CERT-In directions.
  • Consent records: when you agreed to which notice version.

Signing in with Google

If you choose "Continue with Google", we ask Google only for basic sign-in access (the openid, email and profile scopes). Google then shares:

  • Your email address: used to create your account, sign you in and allow one vote per person.
  • Your Google account ID: used to recognise you the next time you sign in.
  • Your name and profile picture link: saved with your sign-in record by our sign-in provider, but not shown on the site or used for anything. Your public name is the username you choose.

We do not ask for access to your Gmail, contacts, Drive, calendar or any other Google data, and we cannot post anything as you. Google data is stored with our database provider (Supabase, Mumbai, India) and sent only over encrypted (HTTPS) connections. We do not sell it, share it with anyone else, use it for advertising or use it to train AI models. It is never sent to our AI moderation provider. When you delete your account, your Google data is deleted with it. You can also remove LokSense's access at any time from your Google Account, under Third-party apps and services.

LokSense's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use only the cookies the site needs: one to keep you signed in, and others to remember your language and colour theme. Cloudflare Turnstile may set its own cookie to tell people from bots. We do not use advertising or tracking cookies, or analytics.

Who processes it

  • Our hosting and database providers (Supabase; region: Mumbai, India) and our website host.
  • Cloudflare, for security and bot protection (Turnstile).
  • Anthropic (Claude), when AI moderation is enabled: the text of a post is sent to check it against our rules. Your phone number and identity are not sent.
  • Our email provider, to deliver sign-up and password-reset codes.
  • Wikimedia Commons, for the photos of places in Know India: your browser loads them from Wikimedia's servers, which see your IP address as any website would. We send Wikimedia nothing about you.

We do not sell personal data, and we do not use it for advertising.

Your rights

  • Access: download all your data from your profile.
  • Correction: edit your profile at any time.
  • Erasure: delete your account from your profile. Your votes and personal data are deleted. Your posts are deleted or kept as "Deleted user", as you choose.
  • Withdraw consent for optional details at any time.
  • Grievance: contact us via the Grievances page. If you are not satisfied, you may complain to the Data Protection Board of India.
  • Nominate someone to exercise your rights in case of death or incapacity (contact us).

Children

This service is only for people aged 18 and over.

Data breaches

If a personal data breach occurs, we will inform affected users and the Data Protection Board as the law requires.

Retention

We keep your data while your account is active. Removed content and related logs are kept for up to 180 days for lawful investigations, then deleted. Long-inactive accounts will be deleted after notice.

Contact

For questions about this notice or your data, write to us through the Grievances page.