Last updated: 3 May 2026 · Effective from: 3 May 2026
Padhai is an adaptive STEM learning platform operated by RSustain (Resilient Sustainance Private Limited) (the "Data Fiduciary" under the Digital Personal Data Protection Act, 2023).
| Registered Entity | Resilient Sustainance Private Limited |
|---|---|
| Platform | Padhai (padhai.rsustain.com) |
| Data Protection Officer | [DPO Name] — privacy@padhai.rsustain.com |
| Registered Address | [Registered Office Address] |
| Category | Data Elements |
|---|---|
| Identity Data | Full name, email address, phone number (optional) |
| Education Profile | Class/grade level, education board (CBSE/ICSE/State), school name (if provided) |
| Account Data | Hashed password, user role (student/parent/teacher), account creation date |
| Learning Data | Question attempts, answers submitted, time taken per question, mastery scores, chapter progress, diagnostic test results |
| Adaptive Engine Data | Knowledge state per concept, IRT ability estimates, spaced repetition card states, streak counts |
| Subscription Data | Subscription tier, payment transaction IDs (via Razorpay), subscription dates |
| Parental Consent Data | Parent/guardian name, parent email/phone, consent method, consent timestamp, IP address at consent |
| Device & Usage Data | IP address, browser type, device type, pages visited, session duration |
| Leaderboard Data | XP earned, cohort rank, promotion/relegation status (anonymised display name used) |
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account creation and authentication | Identity Data, Account Data | Consent / Contract |
| Delivering adaptive learning content | Education Profile, Learning Data, Adaptive Engine Data | Contract |
| Tracking academic progress | Learning Data, Adaptive Engine Data | Contract |
| Personalising question difficulty and spaced repetition | Adaptive Engine Data | Legitimate Interest |
| Processing payments and managing subscriptions | Subscription Data | Contract |
| Parental consent verification (DPDP Act compliance) | Parental Consent Data | Legal Obligation |
| Leaderboard and gamification | Leaderboard Data | Consent |
| Platform security, fraud prevention, and abuse detection | Device & Usage Data | Legitimate Interest |
| Improving platform quality and fixing bugs | Aggregated/anonymised usage analytics | Legitimate Interest |
Padhai primarily serves students in classes 8-12 (typically ages 13-18). We treat all users under 18 years of age as children under the Digital Personal Data Protection Act, 2023 (DPDP Act).
Before any personal data of a child is processed, we obtain verifiable consent from the child's parent or lawful guardian through one of the following methods:
Consent records include the parent's name, contact details, method of verification, timestamp, IP address, and the specific purposes consented to.
We do NOT, and will never:
A parent or guardian may withdraw consent at any time by contacting us at privacy@padhai.rsustain.com. Upon withdrawal, we will cease processing the child's data (except as required by law) and delete the data within 30 days.
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of active account + 90 days after deletion request |
| Learning & Progress Data | Duration of active account (deleted with account) |
| Adaptive Engine Data | Duration of active account (deleted with account) |
| Payment/Subscription Data | 7 years from transaction date (as required by Indian tax/accounting law) |
| Parental Consent Records | Duration of the child's account + 3 years (for regulatory compliance) |
| Server Logs & Usage Data | 90 days (rolling) |
Under the DPDP Act, 2023, you (or the parent/guardian of a child user) have the right to:
To exercise any of these rights, email us at privacy@padhai.rsustain.com. We will respond within 30 days of receiving a verifiable request.
Your personal data is primarily stored on servers located in India. In the course of providing our services, data may be transferred to or accessed from servers in other jurisdictions (for example, cloud infrastructure providers).
Any cross-border transfer of personal data will comply with the provisions of the DPDP Act, 2023, and will only be made to jurisdictions not restricted by the Central Government of India. We ensure appropriate safeguards are in place for all such transfers.
Padhai uses the following types of cookies and local storage:
| Type | Purpose | Duration |
|---|---|---|
| Authentication Token | Maintaining your logged-in session | Session / 24 hours |
| Local Storage | Caching your progress data for offline access and faster loading | Until cleared |
| Error Tracking (Sentry) | Detecting and diagnosing application errors to improve reliability | Session |
We do not use third-party advertising cookies, social media tracking pixels, or any form of cross-site behavioural tracking.
We implement the following technical and organisational measures to protect your data:
We use the following third-party services in the operation of Padhai:
| Service | Purpose | Data Shared |
|---|---|---|
| Razorpay | Payment processing | Transaction amount, order ID, payment status. Razorpay processes card/UPI details directly; we never store payment instrument data. |
| Hosting Provider | Server infrastructure | All platform data is stored on the hosting provider's servers. Subject to their data processing agreement. |
| Sentry | Error monitoring | Error logs, stack traces, request metadata (IP addresses are anonymised) |
Each third-party service acts as a Data Processor and is bound by contractual obligations to process data only for the specified purposes.
If you have any concerns, complaints, or grievances regarding the processing of your personal data, you may contact our Data Protection Officer:
| DPO Name | [DPO Name] |
|---|---|
| privacy@padhai.rsustain.com | |
| Response Timeline | Within 30 days of receiving the grievance |
If you are not satisfied with our response, you may file a complaint with the Data Protection Board of India established under the DPDP Act, 2023.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email (sent to the email address associated with your account) and by posting a prominent notice on the platform at least 15 days before the changes take effect. Your continued use of Padhai after the effective date constitutes acceptance of the updated policy.
For any privacy-related queries or requests: