Privacy Policy

This policy explains what we collect, why, who sees it, and what you can make us do about it. It is written under the Digital Personal Data Protection Act, 2023 ("DPDP Act").

1. Who is responsible for your data

KUERY TECHNOLOGIES PRIVATE LIMITED is the Data Fiduciary for AI League. You are the Data Principal. That means we decide why and how your personal data is processed, and we're accountable to you for it.

Contact: contact@aileague.co.in · Smartworks, Sr No 43, 43 Privet Drive, Commercial, Baner Gaon, Haveli, Pune – 411045, Maharashtra, India

2. What we collect

You give us:

Mobile number

Sign-up · It is your login. OTP authentication.

Date of birth

Sign-up · To confirm you're 18+.

Display handle

Auto-generated · Your public identity. Chosen randomly so it isn't your phone number.

Full name

Edit Profile · Prize dispatch and courier paperwork.

Email address

Optional · Prize and support correspondence.

Address, city, state, PIN code

Before joining a contest with prizes · To physically deliver a prize. Nothing else.

Avatar image

Optional · Shown on your profile and leaderboards.

Support messages and attachments

When you write to us · To answer you.

We generate as you play: contest joins, answers, per-question times, scores, streaks, ranks, prize records, follows and blocks, notification preferences.

We collect automatically: device model and OS version, app version, a push notification token, IP address, crash and diagnostic logs, and basic interaction logs. When you raise a support ticket we attach your device details automatically so we can debug — you'll see this on the form.

What we do NOT collect:

• No Aadhaar number. We don't ask for one and we don't store one.
• No bank details, no PAN, no card details. AI League takes no money from you, so we have no reason to hold financial data. If anyone claiming to be AI League asks for any of these, it's a scam — report it.
• No precise location. We use your state and city for delivery, from what you typed. We don't track where you are.
• No contacts, no photos beyond an avatar you pick, no microphone.

3. Why we process it, and on what basis

Under the DPDP Act we rely on your consent, given when you create your account and when you fill the dispatch details gate, and on legitimate uses the Act permits — for example, complying with a legal obligation, or acting on a court order.

Running your account

Login, profile, handle, deletion

Running contests

Serving questions, scoring, ranking, tie-breaks, results

Fair play

Detecting multiple accounts, automation, and mid-contest backgrounding

Delivering prizes

Address, name, courier handover

Support

Answering your tickets, debugging with device data

Notifications

Contest and result alerts you can turn off

Safety and legal

Enforcement, fraud prevention, responding to lawful requests

Improving the product

Aggregated, de-identified analysis of how contests are played

We do not sell your personal data. We do not sell or rent it to advertisers. We don't run behavioural ad profiling.

4. Who we share it with

Service providers who process data for us, under contract:

Supabase

Database, authentication, file storage · a secure data centre

Our live contest engine host

Live contest traffic and timing · a secure data centre

Google Firebase Cloud Messaging

Delivering Android push notifications · Google infrastructure

Expo

Relays push notifications to FCM; holds your push token · Expo infrastructure

Our SMS provider

Delivering your OTP · India

Titan (email)

contact@ and grievance@ correspondence

Netlify

aileague.co.in hosting

Courier partners

Name, address, phone — prize winners only · India

We work with third-party service providers who process data on our behalf to run AI League — including cloud hosting and database, SMS/OTP delivery, and push-notification services. These providers may only process your data under our instructions and for these purposes, are required to keep it secure, and are not permitted to use your data for their own purposes.

A courier gets your address only when you have actually won something and only what's needed to deliver it.

Others: we share with law enforcement, courts, or regulators where we're legally required to, and we may transfer data as part of a business sale or restructuring — in which case you'll be told.

Data location. We store personal data on computer resources located in India. Where a service provider processes data outside India, we do so only as permitted under applicable law and only to the extent needed to run the service.

5. How long we keep it

We keep your personal data only for as long as your account is active or as needed to run AI League, resolve disputes, prevent fraud, and meet legal obligations. When data is no longer required, we delete or anonymise it.

• Active account: as long as it's open.
• Deleted account: we remove your personal data, and your uploaded files, from our live systems promptly, except for limited records we are required to keep for legal or fraud-prevention reasons. Backups roll off on their own cycle and are not used for anything else in the meantime.
• Contest integrity records: anonymised contest and result records may be kept so leaderboards and past results stay coherent for other players. These will not identify you.
• Prize dispatch records: kept as long as the law requires for accounting and dispute purposes.
• Grievance records: kept as required under applicable rules.

6. Your rights

Under the DPDP Act you can:

• Know what personal data we hold about you and who we've shared it with.
• Correct anything inaccurate, and complete anything incomplete — most of this you can do yourself in Edit Profile.
• Erase your data. There's a delete button inside the app: Profile → My Info & Settings → Delete Account. You can also request it at contact@aileague.co.in or at aileague.co.in/delete-account.
• Nominate someone to exercise your rights if you die or become incapacitated.
• Grieve — raise a complaint with us, and escalate to the Data Protection Board of India if we don't resolve it.

You can withdraw consent at any time. Withdrawing consent for the data that makes the account work means the account has to close — there's no version of AI League that works without a login.

7. Children

AI League is for adults. We do not knowingly process the data of anyone under 18. If we learn we have, we delete it.

8. Security

Data in transit is encrypted. Access to production data is restricted to people who need it. We use row-level access controls in our database so one user cannot read another user's private fields.

Your profile is public by design — your handle, avatar and results are visible to other players, and you can make your account private in settings. Your phone number, email, date of birth and address are never shown to another user. Not on your profile, not on a leaderboard, not anywhere.

No system is perfectly secure. If a personal data breach occurs, we will notify affected users and the Data Protection Board as required.

9. Grievances

Data protection complaints go to our Grievance Officer — see the Grievance Redressal document. If you're not satisfied with our response, you can escalate to the Data Protection Board of India.

10. Changes

Material changes will be notified in-app before they take effect. The version and date at the top will change.