Skip to main content
SudhaPath
Sign up free

Privacy Policy

This policy explains what personal data SudhaPath collects, why it is collected, who it is shared with, how long it is kept, and the rights you have over it under Indian law — principally the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 together with the rules made under it.

Last updated
10 August 2026
Operated by
Aadinath Technosoft LLP, India

1. Scope and who we are

SudhaPath is an exam-practice platform operated by Aadinath Technosoft LLP (“SudhaPath”, “we”, “us”). For the purposes of the Digital Personal Data Protection Act, 2023 we act as the Data Fiduciary for the personal data described here, and you are the Data Principal. Under the Information Technology Act, 2000 we act as an intermediary and a body corporate handling sensitive personal data or information.

This policy covers the SudhaPath website, the SudhaPath mobile applications and any related support channels. It does not cover websites we merely link to — the recruitment boards' own portals, for instance — which have their own policies.

2. Personal data we collect

We try to collect the minimum that lets the product work. In practice that is:

  • Your mobile number. This is the account identifier and the only thing registration requires. Verification is by one-time password.
  • Profile details you choose to give us: display name, preferred language, the exams you enrol in, and a target exam date if you set one.
  • Learning data: tests attempted, answers selected, time spent per question, scores, analytics derived from those attempts, streaks, coins and rewards.
  • AI mentor conversations: the questions you ask the mentor and the answers generated in reply.
  • Transaction data for paid plans: plan purchased, amount, tax, date, gateway order and payment references, invoice details, and the status of any refund. Card numbers, UPI credentials, CVVs and net-banking passwords never reach our servers.
  • Technical and device data: IP address, device model, operating system, app or browser version, crash and error logs, and push-notification tokens if you enable notifications.
  • Support correspondence: what you write to us and what we reply.

3. What we do not collect

For clarity, and because these are the things aspirants most often worry about:

  • We do not store your card number, UPI PIN, CVV or bank credentials. Payments are captured entirely inside the payment gateway's own environment.
  • We do not ask for Aadhaar, PAN, voter ID or any other government identity document to use the platform.
  • We do not collect precise device location, and we do not track your browsing on other websites.
  • We do not read your contacts, photos, SMS inbox or files. Where the mobile app asks for a permission it is for a named feature, and you may decline it.

4. Why we process your data

Each purpose below is a purpose for which your data is actually used. We do not process personal data for purposes you have not been told about.

  • To create and secure your account and to sign you in with an OTP.
  • To deliver the service: serve tests, save attempts, restore an interrupted attempt, produce your results and analytics.
  • To operate the AI mentor within the syllabus of the exam you have enrolled in.
  • To process payments, issue invoices, apply GST, handle cancellations and refunds, and keep the accounting records the law requires.
  • To send service communications you have asked for — OTPs, receipts, test reminders and notifications you have enabled.
  • To keep the platform safe and working: fraud and abuse prevention, exam-integrity checks, debugging, and aggregate product analytics that do not identify you individually.

5. Consent and legitimate uses

Under the Digital Personal Data Protection Act, 2023 we process your personal data on the basis of the consent you give when you create an account and when you enable a specific feature, and on the basis of the “certain legitimate uses” the Act allows — for example, processing that is necessary to comply with a legal obligation or to respond to a legal order.

Consent is asked for a stated purpose, it is specific, and it can be withdrawn. Withdrawing consent does not make past processing unlawful, and where the data was needed to keep the account working, withdrawal may mean the account can no longer be provided.

We do not sell personal data, and we do not share it with third parties for their own independent marketing.

6. Who your data is shared with

We use a small set of specialist processors to run the platform. They are contractually bound to process personal data only on our instructions, only for the purpose we engaged them for, and to protect it.

Those categories are:

  • Cloud hosting and storage providers, for the servers and media the platform runs on.
  • An SMS gateway, to deliver one-time passwords and any transactional message you have opted into.
  • A payment gateway, to collect payments, raise refunds and share settlement and tax records with us. Your payment instrument details stay with the gateway.
  • Email and push-notification providers, for receipts, alerts and notifications you have enabled.
  • AI model providers, for the AI mentor and for machine-assisted content generation. See the next section.
  • Advertising and analytics partners, for the ad slots shown to users on the free plan and for aggregate product analytics.
  • Professional advisers, and government or judicial authorities where disclosure is required by law or by a valid order.

7. AI processing

The AI mentor works by sending your question — together with the syllabus context of the exam you have enrolled in — to a third-party AI model provider, which returns an answer. That request travels outside our servers to the provider for the time it takes to answer.

We instruct providers not to use the content of these requests to train their general models, and we do not send your mobile number, your name or your payment data with a mentor request. Please still avoid typing anything sensitive or personally identifying into the mentor: it is a study tool, not a private diary.

Mentor conversations are stored against your account so that you can see your own history and so that credit usage can be shown to you honestly. You can ask us to delete them.

8. Cookies and local storage

We use cookies and equivalent device storage sparingly, for these purposes:

  • A session cookie or token that keeps you signed in.
  • A language cookie that remembers whether you chose Hindi or English.
  • Local storage on your device that holds an in-progress exam attempt so that a dropped connection does not cost you the attempt.
  • Cookies set by our advertising and analytics partners on the free plan, subject to the choices those partners offer.

9. Advertising

Users on the free plan may see advertisements. Ads are served by third-party ad networks, which may set their own cookies or identifiers and may personalise what they show based on signals they collect. We do not pass your mobile number, your attempt data or your payment data to an ad network.

Users on a paid plan are not shown these ad slots.

10. How long we keep data

Account and learning data is kept while your account is active, because your analytics and progress depend on your own history. If you close your account we delete or irreversibly anonymise personal data within a reasonable period, except where we are required to keep it.

Transaction, invoice and tax records are retained for the period Indian tax and company law requires. Security, audit and abuse-prevention logs are kept for a limited period and then deleted.

11. Security

We maintain reasonable security practices and procedures of the kind contemplated by section 43A of the Information Technology Act, 2000 and the rules made under it: encryption of data in transit, access controls and role-based permissions for staff, audit logging of administrative actions, and separation of production data from development environments.

No system is perfectly secure, and we do not claim otherwise. If a personal data breach occurs we will notify the Data Protection Board of India and affected users as required by the Digital Personal Data Protection Act, 2023. You help by never sharing your OTP with anyone, including anyone claiming to be from SudhaPath.

12. Your rights

As a Data Principal under the Digital Personal Data Protection Act, 2023 you may:

  • Ask for a summary of the personal data we hold about you and how it is being processed.
  • Ask us to correct or complete data that is inaccurate or incomplete, and to update it.
  • Ask us to erase your personal data where it is no longer needed for the purpose it was collected for.
  • Withdraw a consent you gave, as easily as you gave it.
  • Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
  • Raise a grievance with us and, if you are not satisfied with how we handle it, complain to the Data Protection Board of India.

13. Children

SudhaPath is intended for candidates preparing for government recruitment examinations and is not designed for children. If you are under 18, you may use SudhaPath only with the consent and supervision of a parent or lawful guardian, given in the manner the Digital Personal Data Protection Act, 2023 requires.

We do not knowingly carry out tracking, behavioural monitoring or targeted advertising directed at a child. If you believe a child's data has been collected without valid parental consent, write to us and we will delete it.

14. Grievance redressal

Send a grievance to our support address with “Grievance” in the subject line, together with your registered mobile number and enough detail for us to identify the issue.

We will acknowledge your grievance and work to resolve it within the timelines prescribed by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the Digital Personal Data Protection Act, 2023.

Grievance Officer: Ashwini Jain, Aadinath Technosoft LLP, registered office: Jaipur, Rajasthan, India. Email: ashwini@sudhapath.com. Grievances are acknowledged and resolved within the timelines prescribed by applicable Indian law.

15. Changes to this policy

We may update this policy as the product, our processors or the law change. The “last updated” date at the top always reflects the current version.

Where a change materially affects how your personal data is processed we will notify you in the app, by email or by SMS before it takes effect.

16. Governing law

This policy is governed by the laws of India.

Subject to your statutory rights, including your rights under consumer law and your right to complain to the Data Protection Board of India, the courts at Jaipur, Rajasthan, India shall have exclusive jurisdiction over disputes arising out of this policy.

Questions, corrections, data requests and grievances relating to this document go to our support address. Please put “Grievance” or “Data request” in the subject line so it is routed correctly.

support@sudhapath.comContact page

Privacy Policy · SudhaPath