Consider the following statements: 1. Aadhaar metadata cannot be stored for more than three months. 2. State cannot enter into any contract with private corporations for sharing of Aadhar data 3. Aadhaar is mandatory for obtaining insurance products. 4. Aadhaar is mandatory for getting benefits funded out of the Consolidated fund of India. Which of the statements give above is/are correct?

Statement 1 is incorrect: The Supreme Court read down Section 2(d) of the Aadhaar Act to refrain government authorities to store metadata of transactions. Accordingly, Aadhaar metadata cannot be stored for more than six months. The Aadhaar Act had a provision to store allowed storage of such data for a period of five years.
Statement 3 is incorrect: Aadhaar not mandatory to buy insurance policy but can be used for KYC if given voluntarily. This n the backdrop of a Supreme Court judgment of September, 2018, that held as unconstitutional making Aadhaar and PAN/Form 60 mandatory for availing financial services, including insurance.
https://www.thehindu.com/news/cities/Hyderabad/aadhaar-not-mandatory-to-buy-insurance-policy/article26123273.ece
Statement 4 is correct: The Supreme Court cleared mandatory Aadhaar enrolment of recipients of government welfare benefits. It, however, defined welfare schemes as only those funded directly from the “consolidated fund of India”, the main corpus of all revenues received by the government. https://www.hindustantimes.com/india-news/aadhaar-for-welfare-schemes-a-legitimate-exercise-says-supreme-court/story-rhb0kccKthpJRNnSvukzmO.html