Novara Direct is a school management platform. A school subscribes to the service and uses it to support its students, teachers and staff. We operate the Novara Direct mobile application and a companion web administration portal.
Legal entity: Novara Direct
Registered address: L 38/105-1, Rayachoty, Annamaya District, Andhra Pradesh 516269, India
Contact: support@novaradirect.in
The app is operated by adults: a parent or guardian, a teacher, or a school administrator. A student is the subject of the records a parent or guardian views — for example their child's timetable, attendance, assignments and results — but the person signing in and using the app is an adult acting on that child's behalf. We do not direct this app at children and we do not serve advertising to children.
We act in two capacities.
| Data | Our role |
|---|---|
| Account, subscription, plan, seat-count, invoicing and payment records; the name, business email, business phone and address of a school's principal or administrator; aggregated usage figures such as number of schools, enrolled students per school, and login activity counts | Controller. We hold this to operate, bill and support the service. |
| Student and teacher educational records — attendance, marks, exams and results, assignments and submissions, fees and fee payment history, timetable, messages, school documents, photographs, audio and video recordings, and bus trip location | Processor. The school is the controller. We process this only on the school's instructions to provide the service to that school. |
Our headquarters console is limited to the controller category. Access is restricted to authorised Novara staff and exposes only aggregated and commercial information — the number of schools, each school's plan, price, seat usage and billing status, and the business contact details of school administrators. It does not expose student or teacher educational records.
If you use the in-app AI assistant, your question is sent to our AI provider together with relevant information about the account in use — for example a name, class, section and roll number, and attendance, homework, fees, results, notices, timetable and recent lesson summaries — in order to generate an answer. See section 7.
We do not sell personal information. We do not use it for advertising. We do not build advertising or cross-app tracking profiles, and we do not embed third-party advertising or analytics SDKs.
We share information only with: the school that controls it, which is the normal intended recipient; service providers who process data on our behalf (section 7); professional advisers and authorities where required by law, or to protect the rights, safety and property of Novara Direct, our users or the public. We do not share personal information for cross-context behavioural advertising.
| Provider | Purpose | Data involved |
|---|---|---|
| Google (Gemini) | In-app assistant answers | Your question, a name/class/section/roll number, and attendance, homework, fees, results, notices, timetable and recent lesson summaries |
| Groq | Assistant answers and speech-to-text | The same, plus raw microphone audio for speech-to-text, which we do not store afterwards |
| Cloudinary | Storage and delivery of uploaded media | Photographs, documents, audio and video uploaded to the service |
| Razorpay | Processing fee payments | Order amount, receipt and payment reference. Card or UPI credentials are entered on Razorpay's own page and are not received by us |
| LiveKit Cloud | Live classes, calls, screen sharing | Real name, role and school identifier in the session token, plus the audio/video stream during a session |
| OpenStreetMap Foundation | Map tiles, place search and routing | Your device coordinates and pick-up place text, sent directly to OpenStreetMap-operated services |
| Expo / Google Firebase Cloud Messaging | Push notifications | Notification title, message text, record identifiers, and your device push token |
| Brevo | Transactional email (one-time passcodes, password reset links) | Your email address or mobile number and the message content |
| Novara headquarters systems | Subscription, plan and seat synchronisation | School identifier, plan and seat counts only. Student and teacher personal records are not sent |
Transfers may take place outside your country, including to the United States and the European Economic Area, under those providers' own data processing terms.
Depending on where you live, you may have rights to access, correct, delete, restrict or port your personal information, and to object to certain processing. In practice, because a school is the controller of student and teacher educational records:
We aim to respond within 30 days. Please note that deleting a student profile does not automatically erase that student's historical attendance, marks, submissions, fee transactions or messages retained in the school's records; those remain under the school's control.
We use HTTPS for all data in transit. Passwords are stored as salted bcrypt hashes and are never stored or transmitted in plain text. Access tokens are short-lived; refresh tokens are stored only as SHA-256 hashes and are single-use. Administrative actions are restricted by role, and student credentials are never included in routine API responses. Database storage is encrypted at rest by our database provider. No system is completely secure; if a breach affects your personal information we will notify you and the relevant authority as required by law.
Some service providers are located outside India. Where personal information is transferred we rely on appropriate safeguards such as standard contractual clauses.
We may update this policy. When we make a material change we will update the date at the top and, where appropriate, notify you through the app or by email.
If you are not satisfied with how we handle your information, contact us at support@novaradirect.in. You may also complain to your local data protection authority.