Privacy Notice

Coach Nova ยท version draft-2026-10-13

Draft for legal review. This notice describes what the app actually does today, written from its code. It has not yet been reviewed by a lawyer. Highlighted items like this need to be filled in or confirmed before the pilot starts.

Who runs Coach Nova

Coach Nova is a private study coach run by Junofy LLC. Questions about this notice or your family's information: hello@novasaki.ai.

Coach Nova is used by school students, some of them under 13, with a parent's account and permission. A parent sets up the account, sees summaries of how their child is doing, and controls the settings. Children can't sign up by themselves.

What we collect

About the parentEmail address and password (stored only as a one-way hash). The settings you choose, and any private notes you write for the coach.
About the childFirst name or nickname, school grade, birth year, and their login code (stored only as a one-way hash).
What the child does in the appEverything they type to Nova, and what they say when voice input is on (as text; no audio is kept). Photos, screenshots and PDFs they attach. Scratchpad drawings they send. The pictures, diagrams, graphs and maps Nova makes for them. Flashcards, practice tests and their answers.
What the app works outSummaries of each study session, progress on each topic, weekly and monthly reports for the parent, and suggestions for what to do next.
TechnicalThe time of each request and how much it cost to run. Counts of which features are used, such as opening the map of ideas or bringing in an earlier conversation, without anything that was written. Login IP addresses, briefly and in memory only, to block repeated wrong passwords. Our hosting provider keeps standard server logs for 7 days.

We don't use advertising, we don't use third-party analytics or tracking, and we don't sell or rent anyone's information.

How we use it

We don't use children's information to train AI models, and we don't use it for anything other than running Coach Nova for that family.

Who else handles it

Coach Nova uses these service providers to run. Each receives only what it needs for its job:

Anthropic (Claude)The conversation, including attached photos and PDFs, to write Nova's replies, session summaries and reports, check pictures, and draw exact diagrams. When web search is turned on by the parent, Anthropic searches a fixed list of educational sites on the child's behalf.
OpenAIA short text description of a picture to draw, written by Nova. Not the conversation itself.
Google (Gemini)The same picture description, as a backup when OpenAI is unavailable. Our Google project is on Google's paid tier, under which Google doesn't use these requests to improve its products.
ResendThe parent's email address, to send password-reset emails.
Render (and Cloudflare)Hosts the app and stores its database and backups.
The child's web browserWhen the parent turns on voice input, the browser turns speech into text. Most browsers do this with their maker's service (Google for Chrome, Apple for Safari), so the audio goes to that company. Coach Nova never receives or keeps the audio.

None of these providers trains AI models on this information. Anthropic's Commercial Terms of Service, which cover our use of its API, don't allow it to train models on our content. OpenAI doesn't use API data for training, and we have turned off every option to share data with it; it keeps request logs for up to 30 days to detect abuse. Our Google project is on Google's paid tier (see above). (Checked October 14, 2026: Anthropic Commercial Terms of Service, effective June 17, 2025; OpenAI Services Agreement, updated December 1, 2025.)

Children under 13

We collect information from a child only after their parent has created the account and agreed to this notice. A parent can at any time:

We don't require a child to give more information than the app needs to coach them.

How long we keep it

We keep a family's information while they use Coach Nova, so the coach can remember their progress. When a parent deletes their data, it is removed from the app immediately. Copies in our hosting provider's daily backups are deleted within 7 days.

How we protect it

Passwords and login codes are stored only as one-way hashes. The app runs over HTTPS. Every family's information is kept separate, and the app checks on every request that a family can only reach its own.

Changes to this notice

If this notice changes, we'll ask the parent to read and agree to the new version before their child uses the app again.