Privacy Policy

Welcome to RewirePath ("we", "us", "our", or "Platform"). RewirePath is a personalized career discovery and intelligence platform available via our official website (rewirepath.com) and our native mobile applications for Android and iOS.

The platform is founded, developed, and maintained by Sandeep DK, operating from Bengaluru, Karnataka, India. We are deeply committed to maintaining the confidentiality, integrity, and security of your personal data.

We collect only the minimum personal data strictly necessary to deliver personalized career roadmaps, synchronize your credit balance, and provide account functionality. The categories of information include:

• •
  Account & Authentication Information: When you register or sign in through Google OAuth, Apple Sign-In, or email credentials, we receive your name, primary email address, profile picture URL (if provided by the OAuth provider), and a unique cryptographic user ID generated by our authentication system.
• •
  Career Preferences & Milestone Progress: Information about the career paths you view, bookmark, or unlock using credits (e.g., AI Engineer, Full-Stack Developer, UI/UX Designer), milestone checklist progress, learning notes, and custom goal dates.
• •
  Credit Balances & Entitlement Status: Records of your account tier (Free, Basic, Standard, Premium, or Pro), monthly credit allocations, available credit balance, and the timestamped history of career pathways permanently unlocked under your account.
• •
  Device, Diagnostic & Telemetry Data: When accessing our mobile apps or website, our systems log device type, operating system version (e.g. Android 14, iOS 18), application build number, IP address, approximate geographical region (city/country level), crash logs, and network connection status.
• •
  Customer Support Inquiries: Communications sent via our Contact Support form (name, email address, inquiry subject, and message content), retained strictly to address and resolve your support requests.

We gather data through three primary channels:

• •
  Directly from You: When you register an account, input search queries in the Career Explorer, unlock a career path, join our early access waitlist, or submit support inquiries.
• •
  Automated Mobile & Web Technologies: As you navigate through our apps, our client applications synchronize your state with our backend API (api.rewirepath.com) using secure tokens stored in local device storage.
• •
  Third-Party Authentication Partners: If you elect to authenticate using Google Sign-In or Apple Sign-In, those platforms transmit your verified email address and basic profile token in accordance with your privacy choices on those platforms.

Under applicable data protection frameworks (including the Digital Personal Data Protection Act 2023 of India and the EU General Data Protection Regulation), we process your data under clear lawful bases:

RewirePath provides credit packages and optional monthly subscription tiers (Free, Basic, Standard, Premium, and Pro). To protect your financial security:

• •
  Zero Financial Data Stored: RewirePath does not collect, process, or store your credit card numbers, debit card details, UPI PINs, CVVs, or bank account credentials on our servers.
• •
  Certified App Store Gateways: In-app purchases are fulfilled and processed exclusively by Google Play In-App Billing (on Android devices) and Apple App Store In-App Purchases (on iOS devices). These merchant gateways are certified under the highest PCI-DSS Level 1 compliance standards.
• •
  Transaction Metadata: Our servers receive only an anonymized transaction receipt token, order ID, product identifier (e.g. standard_10_credits), and credit amount to credit your account immediately upon purchase confirmation.

We partner with trusted enterprise infrastructure providers who assist in operating our platform. Each provider is bound by strict confidentiality and data protection agreements:

External Resource Links: Our career roadmaps include curated links to external learning materials such as YouTube video series, official open-source documentation, and public textbooks. When you click an external link, you navigate to a third-party website governed by their respective privacy terms.

We retain your personal data for as long as your account remains active to preserve your lifetime unlocked career roadmaps and credit balance.

Your Right to be Forgotten (Account Deletion): You have the unconditional right to delete your account and all associated personal data at any time:

• •
  Via In-App Settings: Navigate to your Account Profile within the Android or iOS mobile application and select "Delete Account".
• •
  Via Direct Request: Email us from your registered account email at [email protected] with the subject line "Account Deletion Request".

Upon receiving your request, your personal identifiers, authentication records, and career progress will be permanently purged from our active databases within 30 days, except where minimal transaction logs must be retained to satisfy statutory tax or legal requirements.

We enforce multi-layered administrative, technical, and physical safeguards to defend your data against unauthorized access, destruction, alteration, or disclosure:

• •
  Transport Layer Security (TLS): All communications between your mobile device or web browser and our servers are encrypted in transit using industry-standard TLS 1.3 with modern cipher suites.
• •
  Encryption at Rest: Database records and cached storage are encrypted using AES-256 standards.
• •
  Least Privilege Access: Access to backend servers and customer support databases is strictly restricted to authorized platform engineers via hardware-authenticated two-factor security keys.

Depending on your jurisdiction, you possess specific statutory rights regarding your personal information:

• •
  Right to Access & Confirmation: The right to obtain confirmation as to whether your personal data is being processed, and to receive a summary copy of your stored records.
• •
  Right to Correction & Updating: The right to correct inaccurate or incomplete personal data held by us.
• •
  Right to Erasure (Deletion): The right to request the deletion of personal data when it is no longer necessary for the purposes for which it was collected.
• •
  Right to Withdraw Consent: Where processing is grounded in consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
• •
  Right to Grievance Redressal: The right to seek resolution of privacy grievances from our designated Grievance Officer, as provided under the Indian DPDPA 2023.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days without charge.

RewirePath is designed for career exploration and professional skill development, aimed at high school students, college undergraduates, graduates, and working professionals.

We do not knowingly solicit, collect, or process personal data from children under the age of 13 years (or under 16 years in certain jurisdictions). If you are a parent or legal guardian and believe your child has registered an account or provided personal details without consent, please contact us immediately at [email protected], and we will promptly delete the data from our servers.

Our website uses minimal, strictly essential browser storage to deliver platform functionality:

• •
  Theme Preference Token: We store a simple data-theme string in your browser's local storage (light or dark) so the website remembers your preferred visual contrast mode across visits.
• •
  Session & Authentication Tokens: Secure cryptographic tokens required to keep you signed in on the app or web client.
• •
  Offline Career Cache: Downloaded roadmap cards and popular career summaries are cached locally on your device to enable instant loading and offline review.

We do not deploy third-party advertising cookies, cross-site trackers, or behavioral profiling cookies.

RewirePath is managed and operated from India, with cloud server infrastructure deployed across secure global data centers. If you access our services from outside India (e.g. European Union, United Kingdom, United States, or Singapore), your data may be transferred to and processed in regions where our hosting providers operate.

In all cases, cross-border transfers are conducted pursuant to recognized international data transfer safeguards, including Standard Contractual Clauses (SCCs) and strict data processing agreements.

We may update this Privacy Policy from time to time to reflect enhancements in our mobile applications, new platform features, or evolving statutory requirements.

When material revisions occur, we will update the "Last Updated" date at the top of this document, and provide prominent notice via our website or an in-app update notification. We encourage you to review this page periodically to stay informed about how we protect your information.

If you have any questions, concerns, feedback, or requests regarding this Privacy Policy or our data handling practices, please contact our designated Grievance Officer: