Plain language, because that's how we'd want to read it. This notice explains what we collect, why, who else touches it, and how to reach a human about it.
What we collect
When you sign up: your name, email address and phone number. As you use Kodanda: the exams and papers you choose, the tests you take, your answers and scores, and your bookmarks. Automatically: basic usage and device information through our analytics tool, and technical logs (including your IP address) needed to run the service securely.
Why we collect it
To create and secure your account, run your tests and track progress, adapt which questions you see, send you account email such as verification and password resets, and understand which parts of the product work so we can improve them. We do not sell your data, and we do not use it for advertising.
Who else processes it
We use a small number of service providers who process data on our behalf: Supabase (database hosting), Fly.io (application hosting, Mumbai), Vercel (website hosting), Upstash (rate limiting), Resend (transactional email), PostHog (product analytics) and Sentry (error monitoring). They act on our instructions. Some of them process data outside India.
Cookies and analytics
A session cookie keeps you signed in. We also use PostHog, a third-party product-analytics tool, which sets its own cookies to understand how the product is used — for example which pages get visited and where people get stuck. We do not run advertising cookies and we do not share your data with ad networks.
Your rights
Under India's Digital Personal Data Protection Act you can ask us for a copy of your personal data, ask us to correct or complete it, ask us to erase it, withdraw consent you have given, and raise a grievance. You can delete your account and its data yourself from your profile at any time. To exercise any other right, email our Grievance Officer below.
How long we keep it
We keep your account data for as long as your account exists. When you delete your account, your personal data and test history are deleted. Some records may persist briefly in encrypted backups, which are kept for 30 days and then overwritten. Error and security logs reference an internal user ID, never your name or email.
Grievance Officer
As required by the Digital Personal Data Protection Act, you can reach our Grievance Officer, Saumya Srivastava, at grievance@kodanda.co.in. We aim to acknowledge within 48 hours and resolve within 30 days. For anything else, including account help, email support@kodanda.co.in.
Changes to this notice
If we change this notice materially — what we collect, how we use it, or who we share it with — we will publish the updated version with a new version number and tell you before it takes effect. Kodanda is not intended for children under 18 without a parent or guardian's consent.