Cadexa respects your privacy.
This Privacy Policy explains how Cadexa collects, uses, stores, protects and otherwise processes personal information when you:
- visit our website;
- download or use the Cadexa application;
- create an account;
- purchase Cadexa services;
- contact customer support; or
- otherwise interact with Cadexa.
Cadexa is committed to processing personal data in accordance with applicable Indian law, including applicable requirements under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when applicable to the relevant processing.
1. Who We Are
Data Fiduciary / Entity: Ribhalang S Chyne
Brand: Cadexa
Address: House No 55, Malki Khliehshnong, Shillong-793001, Meghalaya, India
Email: admin@cadexaindia.com
Support: support@cadexaindia.com
For privacy-related questions, contact:
2. Information We Collect
Depending on how you use Cadexa, we may collect the following categories of information.
A. Account Information
When you create an account, we may collect:
- name;
- email address;
- mobile number;
- password or authentication information;
- profile information;
- date/year of birth where required;
- NCC-related information voluntarily provided by you; and
- account preferences.
We will collect only information reasonably necessary for the relevant purpose.
B. Parent or Guardian Information
If you are under 18, we also collect from the parent or guardian who consents to your account:
- their name;
- their email address;
- their mobile number, where given; and
- their relationship to you.
This is kept as evidence of the consent given, together with the date it was given, the network address it came from and the version of these documents it was given against. Where a purchase is made for a cadet under 18, the same details are recorded again as evidence of the guardian's authorisation for that particular purchase.
3. Learning and Usage Information
When you use the application, we may collect information such as:
- courses accessed;
- tests attempted;
- questions answered;
- scores;
- progress;
- completion information;
- badges or achievements;
- learning activity;
- time spent using features; and
- application interaction information.
This information may be used to provide progress tracking and improve the learning experience.
4. Payment Information
If you purchase a Cadexa product in the Android application, payment is processed by Google Play. Where a purchase is made outside the application, payment is processed by Razorpay. Cadexa does not receive or store your card, UPI or bank details in either case.
Cadexa generally does not need to receive or store your complete payment-card information when the payment is processed by Google Play.
Google states that when Google Play Billing is used, payment information is securely associated with the user's Google Account and is not shared with the app developer.
Cadexa may receive transaction-related information necessary to:
- verify a purchase;
- provide purchased access;
- maintain the access you bought;
- process support requests;
- prevent fraud; and
- maintain accounting records.
5. Device and Technical Information
We may automatically receive certain technical information, depending on the permissions and technologies used by the application, including:
- device type;
- operating system;
- application version;
- IP address;
- approximate network information;
- crash information;
- diagnostic information;
- device identifiers where permitted and necessary; and
- application performance information.
We will not collect device information that is not reasonably necessary for the relevant purpose.
Google Play requires developers to disclose relevant data collection and use practices and handle user data securely.
6. Cookies and Website Technologies
As published today, the Cadexa website sets no cookies at all. It is a set of plain pages with no analytics, no advertising and no sign-in, so there is nothing optional to consent to.
If that changes, cookies or similar technologies may be used for:
- essential website functionality;
- security;
- analytics;
- remembering preferences;
- measuring website performance; and
- improving user experience.
Where required, appropriate consent mechanisms will be provided.
7. Why We Use Personal Data
Cadexa may process personal data for purposes including:
Account management
To create and maintain your account.
Providing Services
To provide courses, tests, progress tracking and other application functions.
Purchase Verification
To verify purchases and provide paid access.
Customer Support
To respond to questions, complaints and support requests.
Security
To detect fraud, abuse, unauthorized access and security threats.
Improvement
To understand application performance and improve Cadexa.
Leaderboards and the Doubts Forum
To show your progress to other cadets where you take part. The leaderboard shows the name on your profile and, if you have given them, your city and state. The doubts forum shows that name beside anything you post. A cadet under 18 is shown by an abbreviated name - "Arjun M." - and never their full name. Nothing else from your account is shown to other cadets.
Communications
To send essential service communications such as:
- account notifications;
- security notifications;
- purchase confirmations;
- subscription information;
- important service announcements.
Where legally required, promotional communications will be subject to applicable consent requirements.
8. Legal Basis / Consent
Where consent is required, Cadexa will request consent in a clear and understandable manner.
The DPDP Act requires consent to be free, specific, informed, unconditional and unambiguous, with a clear affirmative action. It also provides for withdrawal of consent.
Where processing is based on consent, you may withdraw consent subject to applicable law.
Withdrawal of consent may affect our ability to provide certain features or services where the relevant processing is necessary to provide those services.
9. Children and NCC Junior Cadets
Cadexa recognizes that NCC includes junior cadets who may be under 18.
Under the DPDP Act, a child is an individual who has not completed 18 years of age.
Where applicable law requires verifiable parental or guardian consent before processing a child's personal data, Cadexa will implement appropriate mechanisms required by applicable law.
Cadexa does not knowingly request unnecessary personal information from children.
We do not intentionally use children's personal data for:
- targeted advertising;
- behavioural advertising; or
- other purposes prohibited by applicable law.
Parents or lawful guardians may contact us regarding a child's personal data.
10. Information We Do Not Intentionally Collect
Unless specifically required for a disclosed feature, Cadexa does not intentionally collect:
- precise GPS location;
- contacts/address book;
- SMS messages;
- call logs;
- health information;
- financial account credentials;
- biometric information;
- photographs or videos; or
- microphone recordings.
If a future feature requires additional categories of personal data, the relevant disclosure and permission request will be presented before such processing where required.
11. Sharing Personal Data
Cadexa may share personal data with service providers where necessary to operate the Services.
Such providers may include:
- cloud hosting providers;
- authentication providers;
- database providers;
- analytics or crash-reporting providers, if one is ever used - none is today;
- payment providers;
- email/SMS providers;
- customer-support providers; and
- other technology service providers.
Service providers will receive information only as reasonably necessary for their functions and subject to applicable contractual, technical or legal safeguards.
12. Google Services
Cadexa uses these Google services:
- Google Play, which distributes the Android application and processes purchases made in it; and
- the Google Play Developer API, which Cadexa uses to verify a purchase with Google before granting access.
Cadexa does not use Firebase, Firebase Authentication, Firebase Analytics or Firebase Crashlytics. Sign-in is handled by Cadexa's own server, and no Google analytics or crash-reporting service is used.
The exact services used may change as the application evolves, and this Privacy Policy will be updated when they do.
Google may independently process information under its own privacy policies.
13. Analytics
Cadexa does not currently use any third-party analytics or crash-reporting tool, in the application or on the website.
What Cadexa does keep is the record of your own learning described in section 3 - the courses you open, the tests you attempt and your scores - which is what the progress and analysis screens show back to you.
If an analytics tool is introduced, this Privacy Policy will be updated before it starts collecting anything, and consent will be obtained where the law requires it.
14. Data Security
Cadexa will implement reasonable technical and organizational security measures appropriate to the nature of the personal data being processed.
These may include:
- encrypted communications;
- access controls;
- authentication mechanisms;
- secure cloud infrastructure;
- logging and monitoring;
- limited employee access; and
- security updates.
However, no internet-based system can be guaranteed to be completely secure.
15. Data Retention
We retain personal data only for as long as reasonably necessary for:
- providing Services;
- maintaining accounts;
- fulfilling contractual obligations;
- complying with legal requirements;
- resolving disputes;
- preventing fraud; and
- legitimate operational purposes.
When personal data is no longer required, we may delete, anonymize or otherwise dispose of it in accordance with applicable law.
16. Account Deletion
You can delete your account yourself, in the application: Profile → Delete Account, which asks for your password and then deletes the account straight away. If you can no longer sign in, email privacy@cadexaindia.com from the address on your account, or see www.cadexaindia.com/delete-account.
Deleting the account erases your profile, your test attempts and scores, your lesson progress, bookmarks and study history, your badges and points, your posts in the doubts forum, and your guardian's consent records.
One thing is kept. The record of any payment - the order number, the plan, the amount and the date - is retained for as long as tax and accounting law requires, and so that a refund or payment dispute raised afterwards can still be dealt with. Your name, contact details and the payment provider's own record of who paid are removed from it, so what remains is the transaction, not the person.
If you have paid for access, deleting the account ends that access, and unused time is not refunded.
17. Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent.
Requests may be sent to:
Withdrawal will not affect processing lawfully carried out before withdrawal.
The DPDP Act specifically provides for withdrawal of consent and requires processing to cease where continued processing is not otherwise authorized by law.
18. Your Privacy Rights
Subject to applicable law, you may have rights relating to your personal data, including rights to:
- access information about processing;
- correction;
- updating inaccurate information;
- deletion;
- withdrawal of consent where consent is the basis;
- grievance redressal; and
- other rights available under applicable law.
Requests should be sent to:
We may need to verify your identity before processing certain requests.
19. Grievance Redressal
If you have a privacy-related concern, complaint or request, contact:
Grievance Officer / Privacy Contact
Email: privacy@cadexaindia.com
Address: House No 55, Malki Khliehshnong, Shillong-793001, Meghalaya, India
We will review and respond to complaints within the time period required under applicable law.
20. International Data Processing
Some technology providers used by Cadexa may process information on infrastructure located outside India.
Where personal data is transferred outside India, Cadexa will comply with applicable Indian law and applicable restrictions concerning cross-border processing.
21. Third-Party Websites
The Cadexa website may contain links to third-party websites, including Google Play.
Cadexa is not responsible for the privacy practices of independent third parties.
You should review their respective privacy policies before providing personal information.
22. Data Breaches and Security Incidents
If Cadexa becomes aware of a personal-data breach requiring notification under applicable law, we will take appropriate steps to investigate, mitigate and notify relevant parties or authorities where required.
23. Advertising
Cadexa does not currently sell users' personal data or use personal data for third-party targeted advertising.
If advertising is introduced later, this Privacy Policy should be updated before the relevant processing begins.
24. Sale of Personal Data
Cadexa does not sell personal data to third parties.
Personal data may nevertheless be shared with technology or service providers where necessary to operate the Services and as permitted by applicable law.
25. Changes to This Privacy Policy
We may update this Privacy Policy when:
- the Services change;
- new features are introduced;
- legal requirements change;
- technology providers change; or
- our data practices change.
The updated policy will include a revised "Last Updated" date.
Where legally required, we will provide additional notice or obtain consent.
26. Contact Us
For privacy questions, requests or complaints:
Legal Entity: Ribhalang S Chyne
Address: House No 55, Malki Khliehshnong, Shillong-793001, Meghalaya, India
Privacy Email: privacy@cadexaindia.com
Support Email: support@cadexaindia.com
Website: www.cadexaindia.com
27. Important Disclaimer
Cadexa is an independent educational application.
Cadexa is not affiliated with, endorsed by, sponsored by or officially associated with the National Cadet Corps (NCC), Ministry of Defence, Government of India, or any NCC Directorate unless expressly stated otherwise.
Official NCC names, terminology, insignia or other references are used only where necessary for educational identification and informational purposes and should not be interpreted as an endorsement.