Cadexa respects your privacy.
This Privacy Policy explains how Cadexa collects, uses, stores, protects and otherwise processes personal information when you:
- visit our website;
- download or use the Cadexa application;
- create an account;
- purchase Cadexa services;
- contact customer support; or
- otherwise interact with Cadexa.
Cadexa is committed to processing personal data in accordance with applicable Indian law, including applicable requirements under the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, as and when applicable to the relevant processing.
1. Who We Are
Data Fiduciary / Entity: Ribhalang S Chyne
Brand: Cadexa
Address: House No 55, Malki Khliehshnong, Shillong-793001, Meghalaya, India
Email: admin@cadexaindia.com
Support: support@cadexaindia.com
For privacy-related questions, contact:
2. Information We Collect
Depending on how you use Cadexa, we may collect the following categories of information.
A. Account Information
When you create an account, we may collect:
- name;
- email address;
- mobile number;
- password or authentication information;
- profile information;
- date/year of birth where required;
- NCC-related information voluntarily provided by you; and
- account preferences.
We will collect only information reasonably necessary for the relevant purpose.
3. Learning and Usage Information
When you use the application, we may collect information such as:
- courses accessed;
- tests attempted;
- questions answered;
- scores;
- progress;
- completion information;
- badges or achievements;
- learning activity;
- time spent using features; and
- application interaction information.
This information may be used to provide progress tracking and improve the learning experience.
4. Payment Information
If you purchase a Cadexa product, payment may be processed through Google Play or another authorized payment provider.
Cadexa generally does not need to receive or store your complete payment-card information when the payment is processed by Google Play.
Google states that when Google Play Billing is used, payment information is securely associated with the user's Google Account and is not shared with the app developer.
Cadexa may receive transaction-related information necessary to:
- verify a purchase;
- provide purchased access;
- maintain subscription status;
- process support requests;
- prevent fraud; and
- maintain accounting records.
5. Device and Technical Information
We may automatically receive certain technical information, depending on the permissions and technologies used by the application, including:
- device type;
- operating system;
- application version;
- IP address;
- approximate network information;
- crash information;
- diagnostic information;
- device identifiers where permitted and necessary; and
- application performance information.
We will not collect device information that is not reasonably necessary for the relevant purpose.
Google Play requires developers to disclose relevant data collection and use practices and handle user data securely.
6. Cookies and Website Technologies
The Cadexa website may use cookies or similar technologies for:
- essential website functionality;
- security;
- analytics;
- remembering preferences;
- measuring website performance; and
- improving user experience.
Where required, appropriate consent mechanisms will be provided.
7. Why We Use Personal Data
Cadexa may process personal data for purposes including:
Account management
To create and maintain your account.
Providing Services
To provide courses, tests, progress tracking and other application functions.
Purchase Verification
To verify purchases and provide paid access.
Customer Support
To respond to questions, complaints and support requests.
Security
To detect fraud, abuse, unauthorized access and security threats.
Improvement
To understand application performance and improve Cadexa.
Communications
To send essential service communications such as:
- account notifications;
- security notifications;
- purchase confirmations;
- subscription information;
- important service announcements.
Where legally required, promotional communications will be subject to applicable consent requirements.
8. Legal Basis / Consent
Where consent is required, Cadexa will request consent in a clear and understandable manner.
The DPDP Act requires consent to be free, specific, informed, unconditional and unambiguous, with a clear affirmative action. It also provides for withdrawal of consent.
Where processing is based on consent, you may withdraw consent subject to applicable law.
Withdrawal of consent may affect our ability to provide certain features or services where the relevant processing is necessary to provide those services.
9. Children and NCC Junior Cadets
Cadexa recognizes that NCC includes junior cadets who may be under 18.
Under the DPDP Act, a child is an individual who has not completed 18 years of age.
Where applicable law requires verifiable parental or guardian consent before processing a child's personal data, Cadexa will implement appropriate mechanisms required by applicable law.
Cadexa does not knowingly request unnecessary personal information from children.
We do not intentionally use children's personal data for:
- targeted advertising;
- behavioural advertising; or
- other purposes prohibited by applicable law.
Parents or lawful guardians may contact us regarding a child's personal data.
10. Information We Do Not Intentionally Collect
Unless specifically required for a disclosed feature, Cadexa does not intentionally collect:
- precise GPS location;
- contacts/address book;
- SMS messages;
- call logs;
- health information;
- financial account credentials;
- biometric information;
- photographs or videos; or
- microphone recordings.
If a future feature requires additional categories of personal data, the relevant disclosure and permission request will be presented before such processing where required.
11. Sharing Personal Data
Cadexa may share personal data with service providers where necessary to operate the Services.
Such providers may include:
- cloud hosting providers;
- authentication providers;
- database providers;
- analytics providers;
- crash-reporting providers;
- payment providers;
- email/SMS providers;
- customer-support providers; and
- other technology service providers.
Service providers will receive information only as reasonably necessary for their functions and subject to applicable contractual, technical or legal safeguards.
12. Google Services
Cadexa may use Google services including, where applicable:
- Google Play;
- Firebase;
- Firebase Authentication;
- Firebase Analytics;
- Firebase Crashlytics;
- Google Cloud services; or
- other Google services.
The exact services used may change as the application evolves.
Google may independently process information under its own privacy policies.
13. Analytics
We may use analytics tools to understand:
- application usage;
- feature performance;
- crashes;
- technical problems;
- general engagement; and
- application performance.
Analytics information is used to improve the Services and does not necessarily identify an individual directly.
14. Data Security
Cadexa will implement reasonable technical and organizational security measures appropriate to the nature of the personal data being processed.
These may include:
- encrypted communications;
- access controls;
- authentication mechanisms;
- secure cloud infrastructure;
- logging and monitoring;
- limited employee access; and
- security updates.
However, no internet-based system can be guaranteed to be completely secure.
15. Data Retention
We retain personal data only for as long as reasonably necessary for:
- providing Services;
- maintaining accounts;
- fulfilling contractual obligations;
- complying with legal requirements;
- resolving disputes;
- preventing fraud; and
- legitimate operational purposes.
When personal data is no longer required, we may delete, anonymize or otherwise dispose of it in accordance with applicable law.
16. Account Deletion
Users may request deletion of their Cadexa account and associated personal data through the mechanism provided in the application or by contacting:
Google Play requires apps that offer account creation to provide users with a clear and accessible method to request account deletion.
Certain information may need to be retained where required by law or reasonably necessary for legitimate legal, accounting, security or fraud-prevention purposes.
17. Withdrawal of Consent
Where processing is based on consent, you may withdraw your consent.
Requests may be sent to:
Withdrawal will not affect processing lawfully carried out before withdrawal.
The DPDP Act specifically provides for withdrawal of consent and requires processing to cease where continued processing is not otherwise authorized by law.
18. Your Privacy Rights
Subject to applicable law, you may have rights relating to your personal data, including rights to:
- access information about processing;
- correction;
- updating inaccurate information;
- deletion;
- withdrawal of consent where consent is the basis;
- grievance redressal; and
- other rights available under applicable law.
Requests should be sent to:
We may need to verify your identity before processing certain requests.
19. Grievance Redressal
If you have a privacy-related concern, complaint or request, contact:
Grievance Officer / Privacy Contact
Email: privacy@cadexaindia.com
Address: House No 55, Malki Khliehshnong, Shillong-793001, Meghalaya, India
We will review and respond to complaints within the time period required under applicable law.
20. International Data Processing
Some technology providers used by Cadexa may process information on infrastructure located outside India.
Where personal data is transferred outside India, Cadexa will comply with applicable Indian law and applicable restrictions concerning cross-border processing.
21. Third-Party Websites
The Cadexa website may contain links to third-party websites, including Google Play.
Cadexa is not responsible for the privacy practices of independent third parties.
You should review their respective privacy policies before providing personal information.
22. Data Breaches and Security Incidents
If Cadexa becomes aware of a personal-data breach requiring notification under applicable law, we will take appropriate steps to investigate, mitigate and notify relevant parties or authorities where required.
23. Advertising
Cadexa does not currently sell users' personal data or use personal data for third-party targeted advertising.
If advertising is introduced later, this Privacy Policy should be updated before the relevant processing begins.
24. Sale of Personal Data
Cadexa does not sell personal data to third parties.
Personal data may nevertheless be shared with technology or service providers where necessary to operate the Services and as permitted by applicable law.
25. Changes to This Privacy Policy
We may update this Privacy Policy when:
- the Services change;
- new features are introduced;
- legal requirements change;
- technology providers change; or
- our data practices change.
The updated policy will include a revised "Last Updated" date.
Where legally required, we will provide additional notice or obtain consent.
26. Contact Us
For privacy questions, requests or complaints:
Legal Entity: Ribhalang S Chyne
Address: House No 55, Malki Khliehshnong, Shillong-793001, Meghalaya, India
Privacy Email: privacy@cadexaindia.com
Support Email: support@cadexaindia.com
Website: www.cadexaindia.com
27. Important Disclaimer
Cadexa is an independent educational application.
Cadexa is not affiliated with, endorsed by, sponsored by or officially associated with the National Cadet Corps (NCC), Ministry of Defence, Government of India, or any NCC Directorate unless expressly stated otherwise.
Official NCC names, terminology, insignia or other references are used only where necessary for educational identification and informational purposes and should not be interpreted as an endorsement.