This Privacy Policy describes how Lokesh Kumar, owning and operating Nexa AI (“Nexa AI,” “we,” “our,” or “us”), collects, uses, stores, shares and protects personal data when individuals use the Nexa AI mobile application, website, support services and associated products collectively referred to as the “Services.”
Nexa AI provides users with access to more than 50 artificial-intelligence models and related AI features. Depending on availability, users may purchase or receive AI tokens, including promotional tokens earned by completing eligible rewarded-advertising activities.
By using Nexa AI, you acknowledge the practices described in this Privacy Policy. Where applicable law requires consent, we will request consent through an appropriate notice or consent interface. Merely referring to this Privacy Policy does not replace consent where express consent is legally required.
The person responsible for determining how and why personal data is processed is:
Lokesh Kumar, owner and operator of Nexa AI
Masjid Road, Palika Area (Pilibanga)
District Hanumangarh, Rajasthan 335504, India
Privacy and support email: support@nexaai.world
General email: NexaAI@nexaai.world
Where Indian data-protection law applies, Nexa AI acts as the Data Fiduciary for personal data whose processing purposes and means it determines.
This Privacy Policy applies to:
Independent websites, AI providers, app stores, advertisers and payment processors may process data under their own privacy policies.
The information collected depends on the features you use, permissions you grant, devices you use and AI models you select.
We may collect: name; email address; username and profile information; account or user ID; authentication and login information; country, language and account preferences; age or age-confirmation information; third-party sign-in information received from Apple, Google or another login provider; and subscription and account status. Passwords should be cryptographically hashed and not stored in readable form.
When you use AI features, we may process prompts, instructions and messages; conversation history and contextual information; uploaded text, images, documents, audio, video or code; AI-generated output; selected AI model and feature settings; feedback, ratings or reports about output; and technical request and response identifiers.
Do not submit passwords, financial credentials, private keys, government identification numbers, confidential business information, medical records or other highly sensitive data unless the relevant feature expressly requests that information and explains how it is protected. You must have the legal right to submit any personal data or third-party material included in your prompts and uploads.
We and authorized service providers may collect IP address; device model and manufacturer; operating system and application version; browser type and language; device, installation and application-instance identifiers; advertising identifier where permitted; mobile carrier and general network information; country and approximate location inferred from IP address; date, time and duration of sessions; crash reports, diagnostics and performance logs; and security and authentication events.
Nexa AI should not access precise GPS location, contacts, camera, microphone, photos or local files unless a user selects a feature requiring that access and grants the corresponding system permission.
We may collect features and AI models used; token usage and balances; prompt and output processing events; clicks, page views and session duration; subscription and purchase events; rewarded-ad impressions and completion events; failed requests and technical errors; user preferences; abuse reports and safety events; and other interactions with the Services.
Payments may be processed by Google Play, Apple App Store or another authorized payment provider. Nexa AI generally does not receive complete payment-card information. We may receive transaction or order ID; product or subscription purchased; purchase date and price; country and currency; subscription, renewal or cancellation status; receipt or purchase-verification information; and refund and chargeback status.
When you watch an advertisement to earn tokens, Nexa AI and its advertising partners may process advertising identifiers; IP address and approximate location; device and application information; ad impressions, clicks and completion events; reward eligibility and verification; consent and privacy-preference signals; frequency-capping information; and fraud, bot, emulator, VPN, repeated-installation or invalid-traffic indicators.
When you contact us, we may collect your name and email address; account and transaction information; the contents of your request; attachments or screenshots; records of our response; and information reasonably required to verify and resolve the request.
We may receive information from app stores and payment providers; authentication providers; AI model providers; advertising and attribution providers; analytics and crash-reporting services; cloud hosting and security services; fraud-prevention providers; and referral or business partners.
We may use personal data to: register, authenticate and manage accounts; provide access to selected AI models; process prompts, uploads and relevant conversation context; generate, store and display AI output; synchronize conversation history where enabled; maintain token balances and transaction records; verify, award or reverse advertising rewards; process subscriptions, purchases, cancellations and refunds; restore purchases; provide customer support; diagnose errors and improve reliability; measure product performance and feature usage; personalize legitimate product settings and recommendations; detect fraud, abuse, invalid traffic and unauthorized access; enforce our Terms and safety rules; protect Nexa AI, its users, providers and the public; send security, billing and administrative notices; send marketing communications where consent or another lawful basis permits; comply with legal, accounting and regulatory obligations; establish, exercise or defend legal claims; and improve Nexa AI where consistent with this Policy and users’ choices.
Nexa AI makes multiple AI models available through a unified interface. Different models may be operated by different independent providers. When you select a model, Nexa AI may transmit your prompt; uploaded content; relevant conversation context; technical or system instructions; model and feature settings; safety classifications; and request identifiers or limited technical metadata. The provider processes this information to generate and return the requested output.
AI providers may have different policies concerning data retention; human review; model improvement or training; abuse monitoring; data-processing locations; commercial use of output; and available zero-retention or no-training configurations. Nexa AI must maintain an up-to-date provider disclosure page at https://nexaai.world/ai-providers, identifying each material provider, its purpose, its privacy policy, processing location where known, and whether API-submitted content may be retained or used for training.
Nexa AI will not use private prompts, uploads or outputs to train or fine-tune a generative AI model without a disclosed legal basis and, where required, the user’s express consent. However, a third-party AI provider may process content according to its own terms and configured API settings. Nexa AI will use no-training or restricted-retention API settings where they are contractually available and commercially appropriate. Before this statement is published, Nexa AI must verify every integrated provider’s actual configuration; if any provider uses user content for training by default, that fact must be clearly disclosed before the affected model is used.
Depending on the user’s location and the processing activity, we may rely on:
| Legal basis | Examples |
|---|---|
| Performance of a contract | Creating accounts, processing prompts, delivering output, maintaining tokens and subscriptions |
| Consent | Personalized advertising, optional marketing, certain permissions or optional AI-training participation |
| Legitimate interests | Security, fraud prevention, service improvement and operational analytics, subject to balancing users’ rights |
| Legal obligation | Tax, accounting, consumer-protection, regulatory and lawful-request compliance |
| Establishment or defence of claims | Investigating disputes and enforcing legal rights |
| Other recognized legitimate use | Processing permitted without consent under applicable Indian law |
Where processing depends on consent, users may withdraw consent. Withdrawal does not invalidate processing lawfully completed before withdrawal.
We may disclose data only as reasonably necessary for the purposes described below.
Prompts, uploads, relevant context and request metadata may be disclosed to the provider operating the selected AI model.
Hosting, databases, storage, cybersecurity, content delivery, logging and communication providers may process data on our behalf.
Advertising, attribution, consent-management, analytics and fraud-prevention providers may process device information, advertising identifiers, IP addresses, consent signals and usage events. Under certain privacy laws, personalized-advertising disclosures may be considered a “sale,” “sharing” or use for targeted advertising even when no money is paid for the data. Nexa AI will provide required consent or opt-out controls where those laws apply.
Transaction information may be shared with or received from Apple, Google or another payment provider to process, verify, restore or refund a purchase.
Lawyers, accountants, auditors, insurers and consultants may receive information when reasonably necessary and subject to confidentiality obligations.
We may disclose information when reasonably necessary to comply with applicable law or valid legal process; respond to a lawful government request; investigate fraud, abuse or security incidents; protect a person from serious harm; enforce our agreements; or establish, exercise or defend legal claims. We will evaluate government and legal requests and disclose only information we reasonably believe is legally required, unless prohibited from doing so.
Information may be transferred in connection with a merger, acquisition, financing, restructuring, insolvency or sale of all or part of the business. Where required, users will receive notice before their data becomes subject to materially different practices.
We may disclose information when a user requests or authorizes an export, publication, integration or sharing function.
Where required, Nexa AI will obtain consent before accessing an advertising identifier or using personal data for personalized advertising. Users may be able to choose personalized or non-personalized advertisements; withdraw advertising consent through privacy settings; disable ad personalization in device settings; reset or delete the device’s advertising identifier; and exercise applicable opt-out rights for targeted advertising. Users who decline personalized advertising may still receive contextual or non-personalized advertisements. If Nexa AI tracks users across independently operated applications or websites on Apple devices, it will request permission through Apple’s AppTrackingTransparency framework before beginning that tracking.
Watching or interacting with an advertisement does not automatically guarantee a token reward. A reward may be withheld or reversed if the advertisement was not completed; the advertising provider did not verify completion; the same event was credited more than once; a technical error awarded an incorrect amount; automated tools or manipulation were used; invalid advertising traffic was detected; or the user violated the applicable promotion rules. Fraud-prevention decisions should not be based solely on an unreliable automated signal where the decision materially affects the user. Users may contact support to dispute a token adjustment.
We retain personal data only for as long as reasonably necessary to provide the Services, comply with legal obligations, prevent fraud, resolve disputes and enforce agreements. Nexa AI must adopt and implement a formal retention schedule.
| Data category | Intended retention standard |
|---|---|
| Account information | While the account is active and for a limited period after deletion |
| Conversation history | Until deleted by the user or after the disclosed automatic-retention period |
| Deleted content | Removed from active systems within a defined period; backup copies expire on the backup cycle |
| Transaction and tax records | For the period required under applicable financial and tax law |
| Token ledger | As needed for billing, fraud prevention and dispute resolution |
| Advertising-reward records | For the configured advertising-provider and fraud-review period |
| Security logs | For a limited period proportionate to security needs |
| Support communications | For a defined support and dispute-resolution period |
| Consent records | For as long as necessary to demonstrate valid consent and compliance |
We may retain de-identified or aggregated information that no longer reasonably identifies a person. Information subject to litigation, legal holds, security investigations or mandatory recordkeeping may be retained longer.
Nexa AI uses reasonable technical, administrative and organizational measures designed to protect personal data. Depending on the system involved, these may include encryption in transit; encryption of appropriate data at rest; hashed passwords; role-based access controls; multi-factor authentication for administrative access; logging and security monitoring; vendor due diligence; secure software-development practices; backups and recovery controls; and incident-response procedures. No online system is completely secure. Nexa AI cannot guarantee absolute security. Users should maintain secure credentials and notify us promptly if they suspect unauthorized access.
Nexa AI and its service providers may process data in India, the United States, the European Economic Area or other countries in which the relevant providers operate. Where applicable law requires transfer safeguards, Nexa AI will use an appropriate mechanism, which may include adequacy decisions; contractual data-protection terms; Standard Contractual Clauses; transfer impact assessments; or another legally recognized safeguard.
Depending on applicable law, users may have the right to receive information about personal-data processing; access personal data; correct inaccurate or incomplete information; delete personal data; withdraw consent; object to or restrict certain processing; obtain a portable copy of eligible data; opt out of targeted advertising or qualifying data sales/sharing; appeal the denial of a privacy request; nominate another person as permitted by Indian law; seek grievance redressal; complain to an appropriate regulator; and exercise rights without unlawful discrimination.
Requests may be sent to support@nexaai.world with the subject “Privacy Request”. We may ask for information reasonably necessary to verify identity and protect the account, and will respond within the period required by applicable law.
Users may request account deletion through the in-app account-deletion feature; through https://nexaai.world/account-deletion; or by emailing support@nexaai.world. Deleting the application from a device does not delete the user’s Nexa AI account. Following a verified deletion request, Nexa AI will delete or de-identify eligible account data unless retention is required for legal compliance, transaction records, fraud prevention, safety, unresolved disputes or the establishment or defence of legal claims.
Nexa AI is intended for users who are at least 18 years old. Individuals under 18 may not create an account or use the Services. We do not knowingly collect personal data from children. If we discover that a child has provided personal data contrary to this Policy, we will take reasonable steps to restrict the account and delete the information, subject to legal retention requirements. A parent or guardian may report suspected child data to support@nexaai.world. Nexa AI must not be marketed as child-directed or configured with child-directed advertising unless a dedicated child-safety, age-assurance and parental-consent program has been implemented.
AI models use automated processing to generate output. Generated output may be inaccurate, incomplete, biased, offensive or inappropriate. Nexa AI does not intend to use AI output as the sole basis for decisions that produce legal or similarly significant effects concerning a person. If such features are introduced, Nexa AI will provide any notice, legal basis, human review and safeguards required by law.
Where applicable, users may exercise rights available under the Digital Personal Data Protection Act, 2023, its rules as in force, the Information Technology Act, 2000 and other applicable Indian laws. Users should provide authentic information when exercising their rights and should not impersonate another person, suppress material information or submit fraudulent grievances.
Where the GDPR or UK GDPR applies, users may exercise applicable rights of access, rectification, erasure, restriction, objection and portability. Users may also submit a complaint to their local data-protection supervisory authority. Nexa AI will appoint an EU or UK representative if its operations legally require one.
Residents of applicable U.S. states may have additional rights concerning access, correction, deletion, portability, targeted advertising, qualifying sales or sharing and certain profiling. Whether advertising activity constitutes a sale or sharing must be assessed against the actual advertising and analytics SDK configurations. Nexa AI will provide legally required opt-out mechanisms where an applicable threshold is met.
Nexa AI may include links to or integrations with independent third-party services. Those third parties control their own privacy practices. Users should review their privacy policies before providing information. Nexa AI is not responsible for an independent third party’s privacy practices, except where applicable law assigns responsibility to Nexa AI.
We may update this Privacy Policy to reflect changes in law, technology, providers or business practices. The updated Policy will display a revised “Last updated” date. We will provide additional notice or request renewed consent where a material change legally requires it.
Pending formal appointment of another authorized person, privacy questions and grievances should be directed to:
Lokesh Kumar
Owner and Interim Privacy/Grievance Contact, Nexa AI
Masjid Road, Palika Area (Pilibanga)
District Hanumangarh, Rajasthan 335504, India
Email: support@nexaai.world
General inquiries: NexaAI@nexaai.world
Nexa AI will acknowledge and resolve grievances within the timeframe required by applicable law.