Privacy Policy
This policy explains what personal data SudhaPath collects, why it is collected, who it is shared with, how long it is kept, and the rights you have over it under Indian law — principally the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 together with the rules made under it.
- Last updated
- 10 August 2026
- Operated by
- Aadinath Technosoft LLP, India
1. Scope and who we are
SudhaPath is an exam-practice platform operated by Aadinath Technosoft LLP (“SudhaPath”, “we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 we act as the Data Fiduciary for the personal data described here, and you are the Data Principal. Under the Information Technology Act, 2000 we act as an intermediary and a body corporate handling sensitive personal data or information.
This policy covers the SudhaPath website, the SudhaPath mobile applications and any related support channels. It does not cover websites we merely link to — the recruitment boards' own portals, for instance — which have their own policies.
2. Personal data we collect
We try to collect the minimum that lets the product work. In practice that is:
- Your mobile number. This is the account identifier and the only thing registration requires. Verification is by one-time password.
- Profile details you choose to give us: display name, preferred language, the exams you enrol in, and a target exam date if you set one.
- Learning data: tests attempted, answers selected, time spent per question, scores, analytics derived from those attempts, streaks, coins and rewards.
- AI mentor conversations: the questions you ask the mentor and the answers generated in reply.
- Transaction data for paid plans: plan purchased, amount, tax, date, gateway order and payment references, invoice details, and the status of any refund. Card numbers, UPI credentials, CVVs and net-banking passwords never reach our servers.
- Technical and device data: IP address, device model, operating system, app or browser version, crash and error logs, and push-notification tokens if you enable notifications.
- Support correspondence: what you write to us and what we reply.
3. What we do not collect
For clarity, and because these are the things aspirants most often worry about:
- We do not store your card number, UPI PIN, CVV or bank credentials. Payments are captured entirely inside the payment gateway's own environment.
- We do not ask for Aadhaar, PAN, voter ID or any other government identity document to use the platform.
- We do not collect precise device location, and we do not track your browsing on other websites.
- We do not read your contacts, photos, SMS inbox or files. Where the mobile app asks for a permission it is for a named feature, and you may decline it.
4. Why we process your data
Each purpose below is a purpose for which your data is actually used. We do not process personal data for purposes you have not been told about.
- To create and secure your account and to sign you in with an OTP.
- To deliver the service: serve tests, save attempts, restore an interrupted attempt, produce your results and analytics.
- To operate the AI mentor within the syllabus of the exam you have enrolled in.
- To process payments, issue invoices, apply GST, handle cancellations and refunds, and keep the accounting records the law requires.
- To send service communications you have asked for — OTPs, receipts, test reminders and notifications you have enabled.
- To keep the platform safe and working: fraud and abuse prevention, exam-integrity checks, debugging, and aggregate product analytics that do not identify you individually.
5. Consent and legitimate uses
Under the Digital Personal Data Protection Act, 2023 we process your personal data on the basis of the consent you give when you create an account and when you enable a specific feature, and on the basis of the “certain legitimate uses” the Act allows — for example, processing that is necessary to comply with a legal obligation or to respond to a legal order.
Consent is asked for a stated purpose, it is specific, and it can be withdrawn. Withdrawing consent does not make past processing unlawful, and where the data was needed to keep the account working, withdrawal may mean the account can no longer be provided.
We do not sell personal data, and we do not share it with third parties for their own independent marketing.
7. AI processing
The AI mentor works by sending your question — together with the syllabus context of the exam you have enrolled in — to a third-party AI model provider, which returns an answer. That request travels outside our servers to the provider for the time it takes to answer.
We instruct providers not to use the content of these requests to train their general models, and we do not send your mobile number, your name or your payment data with a mentor request. Please still avoid typing anything sensitive or personally identifying into the mentor: it is a study tool, not a private diary.
Mentor conversations are stored against your account so that you can see your own history and so that credit usage can be shown to you honestly. You can ask us to delete them.
9. Advertising
Users on the free plan may see advertisements. Ads are served by third-party ad networks, which may set their own cookies or identifiers and may personalise what they show based on signals they collect. We do not pass your mobile number, your attempt data or your payment data to an ad network.
Users on a paid plan are not shown these ad slots.
10. How long we keep data
Account and learning data is kept while your account is active, because your analytics and progress depend on your own history. If you close your account we delete or irreversibly anonymise personal data within a reasonable period, except where we are required to keep it.
Transaction, invoice and tax records are retained for the period Indian tax and company law requires. Security, audit and abuse-prevention logs are kept for a limited period and then deleted.
11. Security
We maintain reasonable security practices and procedures of the kind contemplated by section 43A of the Information Technology Act, 2000 and the rules made under it: encryption of data in transit, access controls and role-based permissions for staff, audit logging of administrative actions, and separation of production data from development environments.
No system is perfectly secure, and we do not claim otherwise. If a personal data breach occurs we will notify the Data Protection Board of India and affected users as required by the Digital Personal Data Protection Act, 2023. You help by never sharing your OTP with anyone, including anyone claiming to be from SudhaPath.
12. Your rights
As a Data Principal under the Digital Personal Data Protection Act, 2023 you may:
- Ask for a summary of the personal data we hold about you and how it is being processed.
- Ask us to correct or complete data that is inaccurate or incomplete, and to update it.
- Ask us to erase your personal data where it is no longer needed for the purpose it was collected for.
- Withdraw a consent you gave, as easily as you gave it.
- Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
- Raise a grievance with us and, if you are not satisfied with how we handle it, complain to the Data Protection Board of India.
13. Children
SudhaPath is intended for candidates preparing for government recruitment examinations and is not designed for children. If you are under 18, you may use SudhaPath only with the consent and supervision of a parent or lawful guardian, given in the manner the Digital Personal Data Protection Act, 2023 requires.
We do not knowingly carry out tracking, behavioural monitoring or targeted advertising directed at a child. If you believe a child's data has been collected without valid parental consent, write to us and we will delete it.
14. Grievance redressal
Send a grievance to our support address with “Grievance” in the subject line, together with your registered mobile number and enough detail for us to identify the issue.
We will acknowledge your grievance and work to resolve it within the timelines prescribed by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023.
Grievance Officer: Ashwini Jain, Aadinath Technosoft LLP, registered office: Jaipur, Rajasthan, India. Email: ashwini@sudhapath.com. Grievances are acknowledged and resolved within the timelines prescribed by applicable Indian law.
15. Changes to this policy
We may update this policy as the product, our processors or the law change. The “last updated” date at the top always reflects the current version.
Where a change materially affects how your personal data is processed we will notify you in the app, by email or by SMS before it takes effect.
16. Governing law
This policy is governed by the laws of India.
Subject to your statutory rights, including your rights under consumer law and your right to complain to the Data Protection Board of India, the courts at Jaipur, Rajasthan, India shall have exclusive jurisdiction over disputes arising out of this policy.
How to reach us about this policy
Questions, corrections, data requests and grievances relating to this document go to our support address. Please put “Grievance” or “Data request” in the subject line so it is routed correctly.
