Privacy Policy

This policy explains what Novara collects, why, and your rights. The app is built for families: a parent or guardian holds the account and creates profiles for their children. We run no advertising, no third-party tracking or analytics, and we do not sell or share personal information.

1. Who is responsible

Mark Berger, Naukler Straße 18, 71065 Sindelfingen, Germany.
Email: Bergermark@myyahoo.com · Phone: +49 151 58600975

2. What we collect

Parent account: email address; password (stored only as a hash); a display name; country; account type; a consent record; an optional parental PIN (stored only as a hash); and the account creation time.
Sign-in with Apple or Google (optional): the identifier, and the name/email as passed by that provider. If you use Sign in with Apple's Private Relay, we receive only a relay email address.
Authentication technical data (Firebase Auth): a user ID, sign-in timestamps and IP address, provider IDs, and email-verification status.
Child profiles created by the parent: a first name or nickname, an emoji/color, an optional birth year, an optional profile PIN (hash only), and learning data (quiz scores, streaks, goals, budget entries and notes). Children do not enter an email address or any contact details of their own.
On your device only: the last email used, a cached profile, your language/country, the current mode, a local copy of learning progress, and a yes/no unlock flag. We use no advertising or tracking cookies.

3. Why we use it

Only to provide the account and the learning features, and to sign you in securely. Nothing else — no profiling, no advertising.

4. Children's Privacy (COPPA)

Operator & contact: Mark Berger, at the address, email and phone above, is the operator for the purposes of the Children's Online Privacy Protection Act (COPPA).
What we collect from a child, and to whom it is disclosed: only the information a parent enters into a child's profile (first name/nickname, optional birth year) and the child's own learning data. None of it is disclosed to any third party, sold, or used for advertising.
Parental rights: at any time you may review the information in your child's profile, delete it, and refuse to allow any further collection — using the in-app delete function (Settings) or by emailing us. Deleting the account removes the child data.
No conditioning: we do not require a child to disclose more information than is reasonably necessary to use the app.
How you consented: by creating and controlling the account, confirming you are the parent/guardian and 18 or older, you provide verifiable parental consent to our processing of your child's information as described here. You may withdraw it at any time by deleting the account.

5. No sale, no sharing, no tracking

We do not sell or share personal information, and have not done so in the past 12 months. There are no third-party advertising or analytics SDKs in the app, and no cross-app or cross-site tracking.

6. Service providers & where data is processed

We use Google Firebase (a Google service) to authenticate accounts and store learning data, under Google's data-processing terms. The learning database (Realtime Database) is hosted in the European Union (europe-west1). Firebase Authentication is not pinned to one region and may process sign-in data on Google infrastructure globally, including in the United States. Apple processes in-app purchases (see §8). These providers act on our instructions and are not permitted to use the data for their own purposes.

7. In-app purchase

The app offers a single optional one-time purchase through Apple's App Store. Apple is the seller and handles payment; we never receive your card or payment details. On your device we store only a yes/no flag recording that chapters are unlocked.

8. Retention & deletion

We keep account and learning data only while the account exists. You can delete everything at any time from within the app (Settings → delete), or by emailing us: this immediately removes your data and your child profiles from our database, deletes the authentication user, and clears local data on the device. We do not keep the data indefinitely and we maintain a written retention policy.

9. Security

We use reasonable safeguards: encrypted transport (TLS), hashing of passwords and PINs, and access rules that limit each account to its own data. We maintain a written information-security program appropriate to the sensitivity of the data.

10. Your California / US state rights

We are likely below the thresholds of the California Consumer Privacy Act (CCPA/CPRA). Regardless, we do not sell or share personal information, and you may access, delete or correct your information using the in-app tool or by emailing us. We will not discriminate against you for exercising these rights. Residents of other US states with privacy laws have equivalent rights, which we honor on request.

11. Contact & complaints

For any privacy or parental request, email Bergermark@myyahoo.com. You may also contact the FTC (reportfraud.ftc.gov) or your state attorney general.