Legal
Privacy Policy
Last updated:
Your privacy is important to us. This policy explains what data we collect, why we collect it, and how we protect it.
1. Who We Are
NovoLearn ("we", "us", "our") is an online tuition platform operated from Thrissur, Kerala, India. Contact: contact.novalearn@gmail.com, +91 9746-426-444.
2. What Data We Collect
We collect: (a) Account data — full name, email address, and role (student, teacher, parent, admin); (b) Usage data — pages visited, session times, feature interactions; (c) Learning data — assignments submitted, quiz scores, attendance records, gradebook entries; (d) Communication data — messages sent within the platform; (e) Payment data — fee status and transaction references (card details are processed exclusively by Stripe and are never stored on our servers); (f) Device/technical data — IP address, browser type, device type for security and analytics.
3. How We Use Your Data
We use your data to: (a) Provide and operate the Platform; (b) Enable teachers, students, and parents to communicate and track progress; (c) Process fee payments via Stripe; (d) Send important notifications (new assignments, quiz results, fee reminders); (e) Improve the Platform through anonymized analytics; (f) Comply with legal obligations; (g) Detect and prevent fraud or abuse.
4. Legal Basis for Processing
We process your data on the following bases: (a) Contractual necessity — to provide the services you signed up for; (b) Legitimate interests — to operate, maintain, and improve the Platform; (c) Consent — for optional communications such as newsletters; (d) Legal obligation — where required by law.
5. Data Sharing
We do not sell your data. We share data only with: (a) Supabase — our database and authentication provider (data stored on secure servers); (b) Stripe — for payment processing; (c) Vercel — for hosting and serving the application; (d) Law enforcement — where legally required. All third-party processors are bound by data processing agreements.
6. Student Data & COPPA / DPDPA
NovoLearn takes the privacy of minors seriously. For students under 18, we require parent or guardian consent at enrollment. We collect only the minimum data necessary for educational purposes. Student data is never sold or used for advertising. We comply with the Indian Digital Personal Data Protection Act (DPDPA) 2023 and relevant international standards.
7. Data Retention
We retain your data for as long as your account is active or as needed to provide services. After account deletion, we retain anonymized analytics data for up to 2 years. You may request deletion of your personal data at any time (see Section 10).
8. Security
We implement industry-standard security measures including: HTTPS/TLS encryption in transit; Row-level security on all database tables; Signed URLs for file access; Two-factor authentication options; Regular security reviews. No system is 100% secure — please use a strong, unique password.
9. Cookies & Tracking
We use essential cookies for authentication (Supabase session tokens). We do not use advertising cookies or cross-site tracking. Analytics cookies are anonymized and session-scoped.
10. Your Rights
You have the right to: (a) Access your personal data; (b) Correct inaccurate data; (c) Request deletion of your data ("right to be forgotten"); (d) Object to or restrict certain processing; (e) Data portability — request a copy of your data in a machine-readable format; (f) Withdraw consent at any time. To exercise these rights, email contact.novalearn@gmail.com with the subject "Data Rights Request".
11. Changes to This Policy
We may update this Privacy Policy. We will notify you of significant changes via email or in-app notice at least 14 days before the changes take effect. Continued use of the Platform constitutes acceptance.
12. Contact
For privacy questions or data requests: Email: contact.novalearn@gmail.com · Phone: +91 9746-426-444 · Address: NovoLearn, Thrissur, Kerala, India.