Privacy policy
Last updated 2026-10-30
This explains what Omnikhoj collects when you use OmniKhoj, why we collect it, and the choices you have. We have tried to keep it short and plain.
Who we are
Omnikhoj, Godawari-11, Lalitpur, Nepal. Email: [email protected].
OmniKhoj is a portal with one sign-in and one search across several separate products (for example MedFinder and OmniKhoj Space). This policy covers the portal and the OmniKhoj sign-in service. Each product also keeps its own data under its own policy.
What we collect
- Your account: your email address, your name if you give one, and your password. We never store the password itself, only a one-way hash that cannot be turned back into it.
- Your sign-in sessions: a random session token (stored only as a hash), when the session was created and last used, and the IP address and browser details (user agent) it was created from. We use these to keep you signed in and to spot misuse.
- A profile copy in the portal: if you open the admin dashboard, we keep your email, name, roles and when you last visited.
- Searches: the words you search for are sent to the products being searched so they can answer. The portal does not save your searches. When you are signed out, no account information is sent with them.
- Server logs and abuse limits: our servers and our network provider may log requests (such as IP address, page and time) and count recent attempts to sign in or search, to keep the service secure and available.
- Administrator activity: changes made in the admin dashboard are recorded in an audit log with who made them and when.
We do not run advertising or analytics trackers, and we do not sell your information.
Why we use it
- To create your account, sign you in once for every product and keep you signed in.
- To answer your searches and send you to the right product.
- To protect accounts and the service, for example by limiting repeated sign-in attempts.
- To run, fix and improve OmniKhoj, and to meet legal duties.
Who sees it
- The products you use. When you sign in to a product, it asks the sign-in service who you are and receives your account id, email and name. It does not receive your password.
- Service providers that run our infrastructure, such as our network and DNS provider (Cloudflare). They process traffic for us and may do so outside Nepal.
- Authorities, when the law requires it.
Cookies
We use only the cookies that sign-in and security need. We do not use cookies for advertising or tracking. Details are on the cookies page.
How long we keep it
- Sessions end after 7 days without use, and at most 30 days after sign-in. Signing out ends them immediately.
- Your account and profile are kept until you ask us to delete them.
- Audit and security logs are kept for as long as needed for security and accountability.
Your choices
You can ask us to show you the information we hold about you, correct it, or delete your account. Write to us using the contact details above and we will reply as soon as we can. Products you use may hold their own data about you; contact them for that.
Security
Passwords are hashed, sessions are random and stored hashed, connections use HTTPS, and sign-in forms are protected against forged requests and repeated guessing. No online service is perfectly secure, so please use a strong, unique password.
Children
OmniKhoj is not meant for children, and we do not knowingly collect their information.
Changes
If this policy changes in a meaningful way we will update the date above and, where we can, tell you.