What I do with your information.

1. Who is responsible for your data

HustleWorld is run by one person — Chetan — from India. Under the DPDP Act I am the Data Fiduciary for any personal data you send through this site, which means I'm the one accountable for how it's handled. There's no company and no team behind this — just me, plus the two bits of plumbing named in section 7.

Contact for any data question, request, or complaint:
hello@hustleworld.app

2. What I collect

Only what you choose to type. Specifically:

You can submit a problem completely anonymously. If you want to be told when I build something that helps, that's the only reason to leave an email.

The Contact page doesn't have a form — it just gives you my email address, hello@hustleworld.app. If you write to me directly, that email travels through your own mail provider, not through anything on this site, so this notice's data practices don't govern it the way a form submission would. Ordinary email etiquette applies: I'll use your address to reply to you, and for nothing else.

I do not ask for your phone number, address, age, gender, payment details, identity documents, or anything else. If you volunteer sensitive personal information inside a message, please don't — I have no need for it.

3. Why I collect it, and nothing beyond that

• Your name and email — so I can reply to you, and only to reply to you.
• Your message or problem — so I can understand what's frustrating people and decide what's worth building.

That's the whole purpose. The DPDP Act calls this purpose limitation: I'm not allowed to quietly reuse your data for something you didn't agree to, and I don't want to.

4. Your consent, and taking it back

Before you submit the form you have to tick a box confirming you're okay with me holding what you've written. It isn't pre-ticked and it isn't bundled with anything else — under the DPDP Act consent has to be a free, informed, specific, unambiguous action, and a pre-ticked box is none of those things.

You can withdraw it whenever you like. Email me and say so — that's it, no form to fill in, no reason needed. Withdrawing is meant to be as easy as giving it in the first place. I'll delete what I hold and confirm when it's done. Anything I already did while your consent was valid stays lawful, but it stops there.

5. Your rights under the DPDP Act

These are yours by law. To use any of them, email me — one line is enough, and there's no charge.

• Right to know — ask me what data of yours I hold and what I've done with it, and I'll send you a summary.
• Right to correction and completion — tell me something's wrong, outdated, or incomplete and I'll fix or update it.
• Right to erasure — ask me to delete it and I will, unless a law specifically requires me to keep it (nothing currently does).
• Right to grievance redressal — complain to me directly, and get a real answer. See section 8.
• Right to nominate — you can name someone to exercise these rights on your behalf if you die or become unable to act for yourself. Just tell me who.

The Act also asks me to remind you of your duties as a Data Principal: please don't impersonate someone else, don't file knowingly false or frivolous complaints, and give accurate details when you ask me to correct something.

6. How long I keep it

Only as long as the purpose in section 3 needs it, which in practice means:

• Contact messages — kept while we're in conversation and for a reasonable period after, then deleted.
• Problem submissions — the description of the problem may be kept while it's still useful for deciding what to build. If you left your name or email, I delete those as soon as they've served their purpose.
• Anything at all — deleted immediately if you ask, or if you withdraw consent.

The DPDP Act requires erasure once the purpose is served. If I ever build something that needs a longer retention period, this notice will say so before it happens.

7. Who else sees it

No one I've chosen to give it to. I don't sell it, rent it, trade it, or hand it to anyone for marketing. There are no advertising networks, data brokers, or CRMs involved.

Two pieces of plumbing do touch it, though, and you should know about both:

• Web3Forms carries the "Share a problem" form to my inbox. When you press send, what you wrote passes through their servers on the way to me. They forward it and don't keep a copy — I chose them for exactly that reason, so your message ends up in one place (my inbox) rather than sitting in someone else's database. Nothing else on this site touches them.
• My hosting provider handles the traffic that delivers this site to you and may keep standard server logs, which can include your IP address. That's infrastructure, not something I read or analyse.

The typefaces are served from this site itself rather than from Google Fonts, so loading a page here doesn't quietly hand your IP address to a third party. No page on this site contacts any outside server unless you submit the form or click a link that obviously leads elsewhere.

There are no cookies on this site, no analytics scripts, no tracking pixels, no session recording, and nothing stored in your browser. Nothing follows you after you leave.

8. Complaints

If you're unhappy with how I've handled your data, tell me first — email hello@hustleworld.app with "Privacy" in the subject line. I'll acknowledge it quickly and give you a substantive answer, not a template.

If I don't respond, or you're not satisfied with what I say, the DPDP Act gives you the right to escalate to the Data Protection Board of India. You don't need my permission to do that and you don't need to go through me first.

9. Children

This site is meant for adults and I don't direct any of it at children. I don't knowingly collect personal data from anyone under 18, and I don't track, profile, or advertise to children — the DPDP Act prohibits it, and there'd be no reason to anyway.

If you're a parent or guardian and you think your child has sent me something, email me and I'll delete it. No proof or process required.

10. Keeping it safe

I take reasonable steps to protect what you send: the site is served over HTTPS, access to messages is limited to me on my own accounts, and I collect as little as possible in the first place — the data I never hold is the data that can never leak.

I'd rather be straight with you than impressive: this is a one-person project, not a company with a security team. That's exactly why the forms ask for so little. If a breach ever affects your data, the DPDP Act requires me to notify both you and the Data Protection Board, and I will.

11. Other languages

The DPDP Act gives you the right to receive this notice in English or in any language listed in the Eighth Schedule to the Constitution of India. If you'd like it in another language, email me and I'll arrange it.

12. Changes to this notice

If what I collect or why ever changes, I'll update this page and change the date at the top before the change takes effect — not after. I won't quietly broaden the purpose of data you've already given me; if that ever needs to happen, I'll ask you again.