Privacy Policy

Version 1.1 (revised 25 September 2026), effective from the date this version is published.

We collect only what we need to run BeyondAllPages, and we never sell your data or use your notes for advertising. You can download a copy of your data or delete your account at any time. We keep payment records for 8 years, and a few records for 1 year to meet Indian law (see “How long we keep data”).

1. Who is responsible. Anirudh Muhnot, a sole proprietor trading as BeyondAllPages, Udaipur, India, is the “Data Fiduciary” (the person responsible for your data; the “controller” under the GDPR) for beyondallpages.com, its subdomains, our newsletter and, when they are available, our apps. Privacy contact and Grievance Officer: Anirudh Muhnot, anirudhmuhnot@icloud.com.
2. What we collect and why. We use each item below only for the purpose shown.

Payment details. Card, UPI and bank details are collected directly by Razorpay (and, when our apps are available, by Apple or Google). We never receive or store full card numbers.

Health information. Your notes may include health or other personal details if you choose to write them. When you are signed in, notes are saved in your account in our database. Database rules stop other users from seeing them, and our database provider (Supabase) encrypts all stored data on disk, as it does for the rest of your account data. We do not add separate encryption for notes. When you use the app signed out, notes stay in your browser’s local storage on your device and are not encrypted by us. We can technically access the database, but we look at notes only when you ask for help, to handle a request you make about your data, or when the law requires it. We never use notes for analytics, marketing or AI training. Please don’t include information you do not want stored.

3. Signed-out use (local storage). If you use the app without signing in, your data stays in your browser’s local storage and is not sent to our database. When you sign in, it is copied to your account, and you can choose to discard it instead: the message that confirms the copy has an Undo. See our Cookies & Local Storage notice.
4. Who we share data with. We share data only with service providers that help us run the Service, under contracts that require them to protect it. We may also disclose data where Indian law requires it, such as a valid court or government order, or to report an offence the law requires us to report. We never sell your data.
   • Supabase (database, sign-in, file storage and server functions), servers in Tokyo, Japan
   • Resend (Plus Five Five, Inc.), USA: sends our emails (sign-in codes, receipts, plan reminders, notices about our rules, and replies to reports and complaints)
   • Framer (website hosting and built-in visitor analytics), global cloud servers
   • Google (sign-in with Google, if you choose it; your Google profile photo then loads from Google’s servers)
   • YouTube (Google), only if a mental model includes a video: its preview image loads from YouTube’s servers when you open that model, and the video loads from youtube-nocookie.com when you press play. YouTube receives your IP address when either loads, and may store data in your browser once the video loads.
   • Razorpay Software Private Limited (website payments), India
   • Apple (iCloud Mail), which hosts our email inbox, where your emails to us and our alerts about reports and complaints arrive
   • Apple App Store and Google Play (in-app purchases, when our apps are available)
5. Transfers outside India. Some providers store data outside India: our database is in Tokyo, Japan, our emails are sent through Resend in the USA, and Framer and Google use servers around the world. Indian law allows this except to countries the Government restricts. We choose reputable providers with strong security. For people in the EU, EEA or UK, see “If you are in the EU, EEA or UK” below.
6. How long we keep data.
   • Your account and what you keep in it (habits, plans, notes, shared stacks, posts, replies, reactions, upvotes and attached files): until you delete them or your account. My account → Delete my account removes them from our database straight away, apart from the records below. We keep no separate backup copies of the database.
   • The sign-up record of a closed account (user ID, email, phone if any, name, sign-in method, dates, and the consents you gave): 1 year after the account closes. This meets Rule 3(1)(h) of the IT Rules (at least 180 days) and the DPDP Rules (one year, from 13 May 2027). We use it only to answer lawful requests, then delete it.
   • Unfinished sign-ups (an email address that was never confirmed and never used to sign in): removed after 2 days; a minimal record (email, name and when) is kept for 1 year.
   • Reports, and posts, replies and stacks that were reported, hidden or removed: when one is deleted (by us, by its author or with an account), we keep a copy for 1 year, longer if a court or government agency requires it. This meets Rule 3(1)(g) of the IT Rules (at least 180 days) and the DPDP Rules (one year, from 13 May 2027). Files attached to posts we hide or remove are moved out of public view and kept for the same time.
   • Security logs (sign-ins, sign-ups, account deletions, payment events, reports and moderation actions, with IP address and browser type where available): 1 year, even after you delete your account. This meets the CERT-In Directions (at least 180 days) and the DPDP Rules (one year, from 13 May 2027).
   • Payment records (plan, amount, dates, receipt number, Razorpay order, payment and refund IDs, and the email used): 8 years, for tax, accounting and refund purposes. If you delete your account, we keep them without any link to it. Checkouts that were never paid: 30 days.
   • Newsletter: until you unsubscribe.
   • Contact messages and complaints: 2 years, or until you delete your account.
   • Signed-out data: only in your browser, until you sign in (it then moves to your account), clear it, or use “Delete what’s saved on this device”.
7. Security. We protect your data with HTTPS in transit; encryption at rest by our database provider, which encrypts all stored data on disk; database rules so each account can reach only its own private data; passwords stored only as one-way hashes; admin access limited to the owner; and security logs kept for 1 year.
8. Your rights. You can access a summary of your data and download a copy (My account → Export my data). The download covers your account, habits and if-then plans, stacks you shared, upvotes, wall posts and replies, Helpful marks, your plan and payments, the consents you gave, and reports you made. For messages you sent through the contact form, or the stacks you marked as used, email us and we will send them within 30 days. You can see your payments and receipts (My account → Payments), correct or update your data (My account → Change name, or email us to correct anything else), and delete your account and data (My account → Delete my account), apart from the records we must keep (see “How long we keep data”). You can withdraw consent at any time, for example by unsubscribing from the newsletter, choosing “Reject” in Cookie settings, or deleting your account; this does not affect processing already done. You can also nominate someone to exercise your rights if you die or become unable to, and complain to us. Email anirudhmuhnot@icloud.com and we will verify your identity and reply as soon as possible, at the latest within the time the law allows (currently 30 days under the SPDI Rules, and at most 90 days under the DPDP Rules).
9. Children. BeyondAllPages is only for people aged 18 or over. We do not knowingly collect children’s data. If you believe a child has an account, tell us and we will delete it, apart from the records the law requires us to keep.
10. Data breaches. If a breach affects your personal data, we will tell you without delay, by email: what happened, when and how much data was involved, the likely consequences, what we are doing to limit the harm, what you can do to protect yourself, and how to reach us. We report cyber-security incidents to CERT-In within 6 hours of noticing them, and personal-data breaches to the Data Protection Board of India as and when the law requires.
11. Complaints. Contact our Grievance Officer first, by email or with our complaint form; we acknowledge within 24 hours and reply within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India through its online portal, once its complaint procedures apply. You may also approach the consumer forums. In the EU, EEA or UK you can also complain to your data protection authority (see below).
12. If you are in the EU, EEA or UK. If you are in the European Union, the European Economic Area or the United Kingdom, the EU or UK General Data Protection Regulation (GDPR) may also apply to how we handle your data, and this section then applies as well.
    • Controller: Anirudh Muhnot, sole proprietor, trading as BeyondAllPages, Udaipur, India. Email anirudhmuhnot@icloud.com.
    • Legal bases: we run your account, habits, community features and any plan you buy because this is needed to provide the Service you asked for (contract). Optional analytics (the stack-use count and any Google Analytics) and the newsletter rely on your consent, which you can withdraw at any time without affecting what was done before. Health details you choose to write in your notes are stored on the basis of your explicit consent, which you can withdraw by deleting them. Security logs, preventing fraud and misuse, moderating shared content and Framer’s cookie-free page count rely on our legitimate interests in keeping the Service and its users safe and in knowing which pages are used. Payment records, the records the IT Rules make us keep, and answers to lawful orders rely on the legal obligations that apply to us (or, where the GDPR does not treat an Indian legal duty as one, on our legitimate interest in complying with it).
    • Your rights: you can ask for access to your data, correction, erasure, restriction of processing and a portable copy, and you can object to processing based on our legitimate interests. Where we rely on consent, you can withdraw it at any time. We don’t make decisions about you based solely on automated processing that have legal or similarly significant effects: content can be hidden automatically while a serious report is checked, but a person makes the final decision.
    • How to use them: use My account (Export my data, Change name, Delete my account) or email anirudhmuhnot@icloud.com. We may ask you to confirm your identity, and we reply within one month (we will tell you if a complex request needs up to two more months).
    • Transfers: we are in India, and our providers process data in Japan, the USA, India and elsewhere (see “Who we share data with”). Where the GDPR applies, we rely on our providers’ data processing terms, including the European Commission’s Standard Contractual Clauses (with the UK Addendum) where a provider offers them, or on the EU–US Data Privacy Framework (and its UK Extension) where a provider is certified under it. Sending your data to us, and to Razorpay, in India is needed to provide the service you asked for. Email us for details of these safeguards.
    • Complaints: you can complain to the data protection supervisory authority of the EU or EEA country where you live or work, or where you think the problem happened, or in the UK to the Information Commissioner’s Office (ico.org.uk). We would like the chance to put things right first, but you don’t have to contact us before you complain.
13. Changes. We will notify you of material changes by email and in-app notice, update the version and date, and ask you to agree to the new version in the app. Where we need fresh consent, we will ask. What changed in version 1.1: you now tick boxes to agree when you sign up; every report and complaint gets a ticket number; we email receipts and a reminder 7 days before a 1-year plan ends; we keep security logs, removed content and the sign-up record of closed accounts for 1 year, which meets what the law requires; payment records are kept for 8 years even if you delete your account; and there is a new section for visitors from the EU and UK.

This page is also available in any language listed in the Eighth Schedule to the Constitution of India. Email anirudhmuhnot@icloud.com naming the language, and we will send you a translation within 7 days.