Privacy Policy

1. Who this applies to

The Service is used by individual learners, and by schools and organizations with teachers, students, and parents/guardians. Where a school or organization uses Noelia with its students, that school is the controller of its students’ personal data and Noelia acts as its service provider (and, in the United States, as a “school official” under FERPA). In that case the school’s own privacy notice and consents also apply.

2. Information we collect

• Account & profile: email, password (stored only as a secure hash by our authentication provider), display name, role (student, teacher, parent, admin), and optional contact or parent/guardian email.
• Learning preferences: target languages, level (CEFR), goals, time zone, and reminder settings.
• Learning activity: lessons and courses viewed and completed, quiz answers, spaced-repetition review ratings, mastery and retention records, pronunciation attempt scores, streaks and points, projects, and certificates earned.
• Submissions you provide: assignment and project submissions, notes, and—when you or your teacher use grading—uploaded files such as photos, scans, PDFs, or PowerPoint/Word documents of student work, and the text read from them.
• Messages & interactions: conversations with the AI coach and translation tools, discussion posts, and messages in a classroom.
• School/classroom data: organization and classroom membership, rosters, attendance, grades and gradebook entries, announcements, and guardian–student links.
• Payment data: if you subscribe or pay for tutoring, our payment processor collects and stores your payment details. We receive confirmation and limited billing metadata but do not store full card numbers.
• Live sessions: if you join a live class or tutoring session, connection data needed to deliver real-time audio/video.
• Technical & usage data: device and browser information, IP address, pages and features used, performance and error logs, and A/B-experiment assignments, collected to operate and improve the Service.

Personal notes you take in the app are stored only in your own browser and are not sent to our servers.

3. How we use information

• Provide and personalize the Service—scheduling reviews, tracking mastery, generating feedback and grades, and showing your progress.
• Where you join a classroom or link a guardian, share relevant learning data with your teachers, school, and linked parents/guardians.
• Process payments and manage subscriptions and tutoring sessions.
• Send service messages and, if enabled, learning reminders and notifications.
• Maintain security, prevent abuse, debug, and improve the Service.
• Comply with legal obligations.

We do not sell your personal information, and we do not use student data for advertising.

4. AI processing of your work

Features like the coach, instant feedback, paper/assignment grading, and translation send the relevant text—and, for paper grading, the uploaded image or document—to our AI provider to generate feedback, a grade, or a translation. This processing is done to deliver the feature you requested. AI-generated grades and feedback are assistive and may contain errors; a teacher should review them before they count. Our AI provider processes this content to return a result and under our agreement does not use it to train general models.

5. Children and students

Noelia can be used by children through a school or with parental involvement. Where a school directs use of the Service, the school provides the consent required under laws such as COPPA and FERPA and is responsible for the data of its students; Noelia uses student personal information only to provide the educational service to the school and not for advertising. Teachers can create student accounts for grading; a placeholder login is created that the student or school can later claim with a real email. If you believe a child has provided us personal information without the appropriate consent, contact us and we will delete it.

6. How we share information

We share personal information only as described here:

• With your school/teachers/guardians when you are in a classroom or have linked a guardian, limited to the learning data they are entitled to see.
• With service providers (sub-processors) who host and operate the Service on our behalf: cloud hosting and database/authentication/storage (Supabase), application hosting (Vercel), payments (Stripe), real-time audio/video (LiveKit), AI processing (Anthropic), transactional email, and push notifications. They may process data only on our instructions.
• For legal reasons—to comply with law, enforce our terms, or protect rights and safety.
• In a business transfer—if we are involved in a merger, acquisition, or sale of assets, subject to this Policy.

7. Your rights and choices

You can view and update your profile, and export your data or delete your account from Settings. Deletion permanently removes your profile and learning history. Depending on where you live, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing (GDPR), or to know about and delete personal information and to not be discriminated against for exercising these rights (CCPA/CPRA). We do not sell or “share” personal information for cross-context behavioral advertising. If your data is managed by your school, please direct requests to your school, which we will support. To exercise rights, contact us using the details below.

8. Data retention

We keep personal data for as long as your account is active or as needed to provide the Service, then delete or anonymize it, except where we must retain it to meet legal, accounting, or security obligations. School data is retained per our agreement with the school.

9. Security

We use encryption in transit, access controls, row-level security on our database, and reputable infrastructure providers to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to promptly address issues.

10. International transfers

We and our service providers may process data in countries other than yours, including the United States. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for these transfers.

11. Cookies and similar technologies

We use strictly necessary cookies and local storage to keep you signed in and remember preferences, and limited analytics to understand and improve usage. We do not use advertising cookies.

12. Changes to this Policy

We may update this Policy. We will update the “Last updated” date and, for material changes, provide a more prominent notice. Continued use after changes take effect means you accept the updated Policy.

13. Contact us

Questions or requests: privacy@learnnoelia.com. If your data is managed by your school, contact your school’s administrator, who can reach us on your behalf.