Privacy Policy

1 Strictly Necessary Data Collected

EduNova enforces the principle of data minimization. We collect only what is strictly indispensable for pedagogical monitoring:

• Parent Account: Mobile phone number (for secure SMS OTP authentication and Mobile Money transaction receipts) or email, display name, and a 4-digit parental PIN (hashed with the industry-standard bcrypt algorithm).
• Student Profiles: First name (or family-chosen nickname), visual avatar, current grade level (e.g. Form 3, Lower Sixth Sciences), and an optional PIN code securing the profile.
• Academic History: Scores achieved on exercises, completed lessons, and error review records (error notebook).

2 Local-First Architecture (IndexedDB)

Unlike conventional cloud platforms that transfer every keystroke across remote servers, EduNova operates on a Local-First foundation.

Exercise answers, draft calculations, and daily study records are stored directly on your personal device (smartphone, tablet, or PC) within the browser's secure storage engine (IndexedDB). Server synchronizations are brief, encrypted, and limited to the essential progress metrics necessary for parental tracking.

3 Interactions with the Virtual AI Tutor

When a student requests a pedagogical hint or conceptual clarification, the question and exercise context are transmitted in a strictly anonymized format to our AI model pipeline (OpenRouter / Llama). No identifying personal information (family name, phone number, physical geolocation) is ever sent to AI models.

4 Financial Transaction Security

Subscription payments are processed through the certified Cameroonian payment gateway CamerPay. EduNova does not store any Mobile Money PINs or banking credentials. Transactions are authenticated with two-factor validation directly on the carrier network (MTN or Orange).

5 Rights to Access, Rectification, and Permanent Deletion

Parents and legal guardians retain complete control over their children's data:

• Autonomous Updates: At any time, parents can modify grade level, nickname, or avatar directly from the parent portal.
• Permanent Erasure (Right to be Forgotten): Parents can delete a child's profile or close their family account in 1 click. All associated records are immediately and irreversibly purged from our systems.