Privacy Policy
Last updated: 1 July 2026. Aligned to UAE PDPL; KHDA/ADEK safeguarding-aware.
Our promise in one line
Children's data is minimised, encrypted, kept in the UAE, access-controlled, audited, never sold — and you can have it erased.
1. Data we handle
- Account: email, password (hashed), role, subscription status.
- Usage: the challenges you describe and the strategies generated (to provide the service and your progress records). Identifiers are automatically scrubbed before processing.
- Child records (web app only): pseudonymous profiles by default. For the school tier, a child's real name, date of birth, and uploaded evaluations (e.g. psychology reports) are stored encrypted for inspection-ready records.
2. How we protect it
- UAE data residency — data is hosted in the United Arab Emirates.
- Encryption — encrypted in transit (TLS) and at rest; real names and clinical documents are additionally field-level encrypted, with keys managed separately from the data.
- PII minimisation — identifiers are removed before content reaches the AI; the consumer (Telegram) channel never stores real names.
- Access control & audit — only authorised caregivers can access a child's record; every access is logged (who, when, what).
- No sale of data — we never sell personal data, and aggregate insights only ever use de-identified tokens.
3. Diagnoses and clinical documents
Where you provide a professional diagnosis or evaluation, it is used only as context to tailor educational strategies. Nooravi does not diagnose. Uploaded documents are encrypted, access-controlled, audited, and erasable.
4. Sharing
A child's record may be shared across their authorised caregivers (parent, teacher, tutor, SENCO) only with consent, so everyone works from one record. For schools we sign a Data Processing Agreement defining us as processor and the school as controller.
5. Your rights
You can access, correct, export, or delete your data (including a full account erasure that removes profiles, records, and encrypted identities). Contact [email protected].
6. Retention
We keep records for the period appropriate to your plan and then minimise/delete them; you can request earlier deletion at any time.