aptitudeOS

Privacy policy

Last updated: 25 October 2026

aptitudeOS (aptitudeos.in) helps parents and their children understand which skills to master, which to build together with AI, and which to hand over to it. This policy explains what we collect, why, and the choices you have. We are based in India and follow the Digital Personal Data Protection Act, 2023.

What we collect

  • Account details. Your name, and your email address if you give it or if your sign-in provider shares a confirmed one.
  • Sign-in links. If you sign in with Google or Facebook, we keep only which provider you used and the account number it gives us. We never store your Google or Facebook password or access tokens.
  • Invitations. During the private preview, a record of the personal invite link we sent you: who it was for, when it expires and when it was last used. We store a scrambled form of the link, never the link itself.
  • Your family. The families you belong to and how each member is related (parent, child, sibling, grandparent or relative).
  • Children's profiles. A child's first name and date of birth, entered by a parent.
  • Questionnaires about a child. Adult family members (such as a parent, brother, sister or spouse) answer a questionnaire about a child's behaviour, interests and needs. We store each person's answers, who gave them and how they are related to the child.
  • Reports. The scores and suggestions we work out from those answers, shown on the child's dashboard.
  • Payments. When you unlock a child's results, Razorpay processes your card, UPI or bank details; we never see or store them. We store only the Razorpay order and payment numbers, the amount, the date, the status, and which child and family the payment was for.
  • Technical data. Cookies that keep you signed in and protect forms from forgery; they are marked HttpOnly and expire after one hour. Our web server also records your IP address, browser type and the pages requested, for security.

We do not use analytics tools, advertising trackers or third-party cookies.

Why we use it

  • To produce your family's report and prepare for a consultation with our career guide.
  • To let the members of your family see the same report.
  • To keep the service secure and working.

Children

Parents create and manage their children's profiles. A parent may add a child's email address so the child can sign in; a signed-in child sees only their own dashboard and cannot answer or read the questionnaires. We ask for verifiable consent from a parent before a child's assessment begins. We never show targeted advertising to children, never track children's behaviour, and never sell anyone's data.

Who can see your information

  • Your family. Members of a family can see that family's members and reports. A report combines everyone's answers; no one can see another relative's individual answers.
  • Our career guide. The person who runs your consultation.
  • Hosting. Our data is stored on a cloud server we rent and manage ourselves.
  • Razorpay. Only when you pay. Its payment window is loaded from Razorpay and is covered by Razorpay's own privacy policy and cookies.
  • Google or Facebook. Only if you choose to sign in with them, and only to confirm who you are.

We do not sell or rent personal data, and we do not share it with advertisers.

How long we keep it

We keep your information until you ask us to delete it, or for two years after your family's last activity, whichever comes first.

Your rights

You can ask us to:

  • show you the personal data we hold about you or your child;
  • correct or complete it;
  • delete it (see how to delete your data);
  • record a person to exercise these rights for you if you cannot;
  • resolve a complaint.

If we do not resolve your complaint, you may approach the Data Protection Board of India.

Grievance officer

Write to privacy@aptitudeos.in. We reply within 7 days and resolve requests within 30 days.

Security

All traffic uses HTTPS. Sign-in cookies cannot be read by scripts, forms are protected against forgery, and access to the server is restricted to us.

Changes to this policy

If we change this policy, we will update the date above. If a change affects how we use your existing data, we will tell you before it applies.