1. Scope

This policy covers both apps and their support pages. It does not cover external services reached through links or separate apps — such as messaging apps used to share statements, or a page opened from an ad's "Learn more" — which have their own policies.

2. Roles and responsibilities

For account data, technical support and device reports, we determine the purposes and means of processing and are responsible for them under applicable law.

For the student, parent, lesson and payment data a tutor enters to run their work, the tutor decides why it is collected, how it is used and with whom it is shared, and remains responsible for its accuracy and the lawfulness of entering it. We store and process it on the tutor's behalf as a service operator, and use it for no other purpose.

3. Data we handle

3.1 What a tutor enters in Tutor Manager

• Tutor data: the name shown on statements, subjects taught, and language, theme, currency and notification settings.
• Student and parent data: the student's name and phone number, the parent's phone number if entered, stage, grade, lesson price and length, notes, groups and status.
• Family linking: when the same parent number appears for more than one student, siblings are linked for a combined statement.
• Lessons and attendance: date, time, length, subject, type, rescheduling, and attendance, absence and cancellation records.
• Financial data: amounts due and paid with their methods and dates, statements and reports.

This is stored in the tutor's account on Google Cloud Firestore in the Doha region (me-central1), encrypted in transit and at rest, with an encrypted working copy (SQLCipher) on the device. It is for administration and documentation only: the app does not confirm that a payment took place and holds no money in any balance or wallet.

3.2 What a tutor shares with My Tutors

When a tutor invites a student, a summary for that student alone is published from the tutor's device: the student's and tutor's names, lessons with their times and attendance, monthly statements and the balance. Whoever accepts the invitation in My Tutors can read it but not change it. It is deleted when the tutor ends the sharing or deletes their account.

3.3 What My Tutors stores

• Family profile: children's names as the account holder types them, and which tutor each is linked to.
• Notification settings, if enabled: the device push token, time zone, language and reminder lead time — to send lesson reminders and change or cancellation notices.
• Display preferences (language and theme) stay on the device only.

3.4 Account data (both apps)

When you sign in: your email address, account ID, sign-in method (email, Google or Apple), and your name if the provider supplies it. Technical data accompanies requests by nature: IP address, OS type and version, app version and device language.

3.5 Device report (both apps)

Each device signed in to your account has a small record: app version and build number, operating system (iOS or Android), a two-letter country code (e.g. QA) inferred from the device's time zone and then its Region setting, and the last day the app was opened. It is written at most once a day. We use it only as aggregated figures: how many users are active, from which countries, on which version. It holds no name, phone number, location or advertising identifier, and is deleted with the account.

3.6 Files created on your device

PDF and Excel statements and reports are created on the device and stay there until you share them; temporary files are deleted after twelve hours.

3.7 What we do not collect

• No third-party analytics or crash-reporting tools, and no record of what you do in the app beyond the device report above.
• No location: the country code comes from device settings, not GPS or IP address.
• No contacts, no photos, and no files beyond what you choose yourself.
• No advertising identifiers, and no tracking across apps or websites.

4. Ads

The apps may show ads placed by the Center itself: a full-screen image when the app opens and, in My Tutors, a card on the home screen. Images are downloaded from our servers and the ad is chosen on your device by its country (as in 3.5), without sending anything about you for that purpose. No ad networks, no profiles, no behaviour-based ads. Every ad is labelled "Ad" and can be skipped.

5. Why we process data

To operate the apps: storing and syncing work across your devices, delivering what a tutor shares to their student, sending notifications, authenticating you, understanding versions and activity to improve the apps, answering support requests, protecting the service from abuse, and meeting legal obligations.

6. Service providers

• Google LLC / Firebase: authentication, the database in the Doha region, hosting of this page and ad images, and notification delivery (Firebase Cloud Messaging) — under Google's data processing terms.
• Apple: notification delivery to iPhones (Apple Push Notification service), and Sign in with Apple if you choose it.
• Google: Sign in with Google if you choose it.

We share data with no one else, do not sell it, and do not use it for advertising.

7. Retention

Data remains while the account exists. When you delete the account inside the app it is deleted from our servers immediately, and may persist in Google's technical backups for a limited period before removal. Push tokens are deleted when you sign out. A tutor's device copy remains until they delete the app or clear its data.

8. Your rights

You may request access to, correction, deletion or export of your data; most of this is available inside the app. For anything else, write to info@nova-qa.net from the email linked to your account; we will ask for what is needed to verify identity and respond within the period set by applicable law.

A student or parent should first contact the tutor who entered their data, as the tutor decides about it; if technical intervention is needed, write to us at the same address.

9. Account deletion

• Tutor Manager: Settings → Account → Delete account. Deletes the account's cloud data, what it shared with students, and its device reports, then the account itself; the copy on the device stays with the tutor.
• My Tutors: Profile → Delete account. Deletes the family profile, its links to tutors, notification settings and device reports, then the account itself.

Or send a request to info@nova-qa.net from the email linked to the account.

10. Minors

Tutor Manager is directed at tutors, not children. My Tutors is used by students and their parents; anyone below the age of digital consent in their country should use it under a parent's supervision or from a parent's account. We collect from a student account only what is listed in 3.3, 3.4 and 3.5, and show it no personalised ads. What a tutor enters about minor students is the tutor's responsibility, including parental consent where required.

11. Notifications

Tutor Manager reminders are local to the tutor's device and pass through no server; the tutor can choose discreet notifications so student names never appear on the lock screen. My Tutors notifications are sent from our servers via Firebase and Apple, carry the lesson time and the tutor's name, and can be turned off in the app or device settings.

12. Security

Account-level access rules so no one reads another account's data, encryption in transit (TLS) and at rest with Google, an encrypted database on the tutor's device, and an optional fingerprint or face lock. No method is completely secure, but we review these measures regularly.

13. Changes to this policy

We may update this policy and will publish the updated version with a new date on this page. Material changes will be announced inside the apps.

14. Law and contact

This policy is governed by the laws of the State of Qatar, whose courts have jurisdiction over any dispute arising from it, without prejudice to rights granted to you by mandatory law in your country of residence.

App owner: Nova Educational Center — info@nova-qa.net — Support