Privacy Policy

Last updated: 8/15/2026

1. Data controller

Neuranova acts as a processor for schools and practitioners. The school or organisation is the data controller for student data.

2. What data do we process?

• First name, age/grade, class and school of the student
• Learning data: progress, answers, wellbeing check-ins
• Account and login data of teachers/parents
• Technical logs (session, errors) — pseudonymous

We do not ask for students' surnames and deliberately avoid unnecessary identifying data.

3. Legal basis

Data processing agreement (GDPR art. 28) with the school, legitimate interest for pedagogical follow-up, and explicit parental consent where legally required.

4. Retention period

Student data is kept for as long as the school agreement runs and for a maximum of 12 months after termination, unless otherwise legally required.

5. Location & transfer

All data is stored within the EU. No data is transferred to third countries without appropriate safeguards (SCCs).

6. Rights

You have the right to access, rectify, erase, restrict, port and object to processing. Requests via your school or tine.e.victoria@protonmail.com.

7. Security

Encryption in transit (TLS 1.2+) and at rest, RLS per organisation, MFA for administrators, periodic audits.

8. Complaints

You can file a complaint with the Data Protection Authority (GBA).