Privacy Policy

1. Who we are

NovaMath (novamathkids.com) is provided and operated by Novastra Group Inc. (“we”, “us”), which is responsible for your personal information in the Service. This policy explains what we collect, how we use it, who we share it with, and your rights.

2. Information we collect

• Account information: email address, password, member number, language preference, and trial and membership expiry dates. Passwords are stored only as a one-way hash, so we cannot see your password. Access codes are likewise stored as a hash for sign-in, plus an encrypted copy so you can recover your code with your payment email and order number.
• Learning data: for each exercise and day, the number of questions, correct answers and time spent; personal bests; and the grade chosen, results and recommended exercises from the placement assessment. We use this to build the parent dashboard.
• Sign-in and device information: sign-in times, last activity time, IP address, browser information (user agent) and device type. We use these to enforce the two-device limit, keep accounts secure, and, when handling refunds and chargebacks, show that the service was delivered and used.
• Order information: order number, plan, amount, currency, payment email, billing country (or, if none, the country of the IP address used to order) and Stripe transaction IDs. Card details are collected directly by Stripe; we never see them.
• Emails you send us: whatever you include when you contact support.

3. Children’s information

The Service is for children to practice, but accounts are opened and managed by parents or guardians. We do not ask for, or knowingly collect, information that directly identifies a child, such as a name, photo or contact details. The only child-related information is practice data and the grade chosen by the parent, stored under the parent’s account; parents can ask to see or delete it at any time. If you believe we have collected a child’s personal information by mistake, contact us and we will delete it promptly.

4. Cookies and browser storage

We only use cookies and browser storage that the Service needs to work: your sign-in token, language preference, which sections you collapsed on the home page, personal bests on practice pages, the tab you were on in the dashboard, and similar. We do not use advertising cookies, and we do not use third-party analytics or ad tracking.

5. How we use information

• To provide and maintain the Service: sign-in, practice, records and the parent dashboard;
• To process payments, renewals, subscriptions, refunds and chargebacks;
• To keep accounts secure and prevent account sharing, fraud and abuse;
• To answer your questions and send service emails such as password resets;
• To meet tax and other legal obligations, such as reporting sales by country.

We do not sell your personal information, use it for advertising, or send marketing emails.

6. Who we share information with

We share information only as needed to provide the Service, with these providers:

• Stripe processes payments. Some orders are sold by Link, a Stripe company, as a reseller; Link sends receipts and handles related support and refunds. Stripe and Link handle your payment information under their own privacy policies.
• Cloudflare provides network delivery and security; requests to our website, including your IP address, pass through Cloudflare.
• Alibaba Cloud hosts our servers and database in its Singapore data center.

We may also disclose or transfer information where required by law, to protect our or others’ legal rights, or as part of a merger, acquisition or similar transaction.

7. International transfers

Your information is stored on servers in Singapore, and the providers above may process some of it in other countries (for example, the United States). We require these providers to protect your information to a standard no lower than this policy.

8. How long we keep information

• Account and learning data are kept while your account exists. When you ask us to delete your account, we delete or anonymize it within 30 days.
• Order and payment records are kept as tax law requires (generally 6 years in Canada).
• Information related to an open refund, chargeback or dispute is kept until it is resolved.

9. Your rights

You can ask to access, correct, export or delete your personal information, or withdraw your consent. Email [email protected] from your account email or payment email; we may need to verify your identity first, and we will reply within 30 days. You also have the right to complain to your local privacy or data protection authority, such as the Office of the Privacy Commissioner of Canada.

10. Security

The whole website uses HTTPS; passwords and access codes are stored only in hashed or encrypted form; and only authorized administrators can access our admin tools. No system is perfectly secure, and if a security incident affects you, we will notify you as required by law.

11. Changes to this policy

We may update this policy. The updated version will be posted on this page with a new effective date, and significant changes will be highlighted on the website.

12. Contact us

Novastra Group Inc. · Email [email protected]