Privacy Policy.

This Policy explains how MALLELA BALA SHANMUKHA ANIRUDH ("we") handles personal information when you use no excuses.ai. It is written to satisfy the EU/UK General Data Protection Regulation (GDPR) and India's Digital Personal Data Protection Act, 2023.

0. Data controller & contact

The data controller is MALLELA BALA SHANMUKHA ANIRUDH, Plot No. 133, Medical and Health Colony, Vanasthalipuram, Hyderabad, Telangana 500070, India. We have not appointed a Data Protection Officer (we are below the statutory threshold); all privacy requests are handled directly by the controller at support@noexcusesai.in. We do not have an establishment in the EU; requests from EEA/UK residents are handled through the same address.

1. Data we collect

• Account data: name, email, college, branch, semester.
• Uploaded content: syllabi, notes, PYQs and other material you upload.
• Usage data: generated answers, planner data, activity logs.
• Payment data: UPI transaction reference / order screenshot. We do not store full card or bank credentials.

2. Purposes and legal bases (GDPR Art. 6)

• Providing the Service (accounts, uploads, AI answers, planner) — performance of a contract (Art. 6(1)(b)).
• Payments, invoices and tax records — contract and legal obligation (Art. 6(1)(b), (c)).
• Security, abuse prevention and rate limiting — legitimate interests in keeping the Service available and un-abused (Art. 6(1)(f)).
• Product analytics — consent only (Art. 6(1)(a)); you can accept or reject this in the cookie banner and change it any time from Profile → Data & Privacy.
• Service announcements and support replies — contract / legitimate interests. Marketing email, if ever sent, is consent-based with one-click unsubscribe.

We do not use your data for automated decision-making with legal effects, and we do not knowingly collect special-category data. Please do not upload sensitive personal data in your study material.

3. Sharing and processors

We never sell personal data and never share it for advertising. We use the following processors, each under a data processing agreement with appropriate safeguards:

• Supabase — database, authentication, file storage.
• Cloudflare — hosting, CDN, bot protection (Turnstile).
• AI model providers — inference on the prompts and study material you submit. Prompts are not used to train their models under our API terms.
• PayU — payment processing (they act as an independent controller for payment data).
• ZeptoMail — transactional email delivery.
• PostHog and Sentry — product analytics and error monitoring (analytics only with your consent).

4. International transfers

Our infrastructure and AI providers may process data outside your country, including in the United States and the European Union. Where data leaves the EEA/UK, transfers rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable) together with our providers' technical safeguards. A copy of the relevant safeguards is available on request.

5. Security

Data is encrypted in transit (TLS) and at rest, stored with row-level security (RLS) so users can only access their own records, and administrative actions are audit-logged. Access to production data is restricted to the controller. We will notify affected users and, where required, the competent supervisory authority within 72 hours of becoming aware of a personal data breach.

6. Retention

• Account, uploads, answers, planner data — for as long as your account is active; erased immediately when you delete your account.
• Backups — rolling backups are purged within 30 days of deletion.
• Payment and invoice records — retained in anonymised form for up to 8 years as required by Indian tax and accounting law.
• Security and abuse logs — up to 12 months.

7. Your rights

Subject to law, you have the right to access, rectify, erase, restrict and object to processing, the right to data portability, and the right to withdraw consent at any time without affecting prior processing.

• Access & portability: download a complete machine-readable copy of your data instantly from Profile → Data & Privacy → Download my data.
• Erasure: raise a deletion request from Profile → Data & Privacy → Request account deletion (or email support@noexcusesai.in). We verify the request, erase your account and all associated study data, and confirm by email — always within 30 days.
• Rectification: edit your profile in-app, or email us.
• Withdraw analytics consent: toggle it in Profile → Data & Privacy.

For anything else, email support@noexcusesai.in. We respond within 30 days, free of charge. If you are in the EEA/UK you may also lodge a complaint with your local supervisory authority; in India, with the Data Protection Board.

8. Cookies and similar technologies

We use strictly necessary cookies and local storage for authentication, session management, security and your preferences — these do not require consent. Analytics cookies (PostHog) are loaded only after you accept them in the cookie banner, and are removed from use as soon as you withdraw consent. We use no advertising or cross-site tracking cookies.

9. Children

The Service is not directed at children under 13 (or under 16 where local law requires parental consent for online services). If you believe a child has provided us personal data, contact us and we will erase it.

10. Changes

We will post updates to this page and update the "Last updated" date. Material changes will be notified by email or in-app notice.