Privacy Policy

Last updated: 21 July 2026

This is a working draft written to plainly describe what Noēs actually does with data today. It has not been reviewed by a lawyer. Before relying on this as your binding, published policy — especially given Noēs collects information about children — have it reviewed against the specific requirements of every jurisdiction you operate in (for example, India's Digital Personal Data Protection Act, and if you serve users under 13 in the US, COPPA).

What we collect

When a parent, tutor, or adult learner creates a Noēs account, we collect:

The account holder's email address, used for signing in.
A password, stored only as a one-way cryptographic hash — we never store or can retrieve your actual password.
A child's name, age, preferred language, and, if provided, what they find difficult and what they enjoy — entered by the parent or tutor during setup, to help Aby teach well.
The content of tutoring sessions: what the child types or says to Aby, and Aby's responses, so that mastery can be tracked and moments of genuine understanding (the "Book of Understanding") can be preserved in the child's own words.
Basic usage data: session length, number of questions asked, and which mathematical concepts were explored.

Who can see it

A child's session content, progress, and Book of Understanding are visible to the parent or tutor account that created their profile. We do not sell, rent, or share this data with advertisers. It is not used to train any third-party AI model.

How session content is processed

To generate Aby's responses, the text of a session is sent to our AI inference provider (Cerebras) for processing and is not retained by that provider beyond generating the response. Account and session data is stored in our database, hosted by Supabase. Our application infrastructure runs on Cloudflare. Each of these providers processes data only as needed to operate Noēs, under their own data processing terms.

Children's data

Noēs is designed to be set up and supervised by a parent, tutor, or other responsible adult — a child does not create their own account or provide their own consent. By creating a child's profile, the adult account holder confirms they are that child's parent, legal guardian, or authorized tutor, and consents on the child's behalf to the collection described in this policy for the purpose of providing the tutoring service.

We do not knowingly collect information directly from a child through any means other than their responses within a tutoring session set up by their parent or tutor.

How long we keep data

We retain account and session data for as long as an account remains active, so that a child's mastery record and Book of Understanding continue to build over time. If you close your account, contact us using the details below and we will delete your account's personal data, except where we are required to retain records for legal or accounting purposes.

Your rights

You can request a copy of the data associated with your account, ask us to correct inaccurate information, or ask us to delete your account and its associated data, by writing to the email below.

Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS) for all traffic and one-way hashing for passwords. No system is perfectly secure, and we continue to review and improve these protections.

Changes to this policy

If this policy changes in a way that materially affects how we handle your data, we will update the date at the top of this page and, where appropriate, notify account holders directly.

Contact

Questions about this policy or your data can be sent to contact@vyronyxgroup.com.