Privacy Policy

Last updated August 17, 2026

This policy is for Novana Labs, not the main Novana product. Novana Labs is our set of free, no-login tools for schools at labs.novana.io. The Novana platform at novana.io is a separate product with its own privacy policy. If you use that platform, its policy applies there, not this one.

Not advice. Nothing in the Services, and nothing they generate, is legal, compliance, or professional advice. You use the tools, and everything they produce, on your own responsibility.

This Privacy Policy for 不落教育科技株式会社 (Uni Education Technology Co. Ltd, operator of Novana) ("we," "us," "our") explains how we collect, use, and share ("process") your personal information when you use Novana Labs (the "Services").

There are no accounts, no logins, and no payments. Most of the Services work without you giving us any personal information. The exception is when a tool asks for your email address so it can send a result to you.

If you do not agree with this policy, please do not use the Services. Questions go to privacy@novana.io.

The short version

  • Your email is used to send you the result you asked for, and to tell you about Novana. If we contact you about Novana, you can opt out anytime. We do not sell your email.
  • What you type into a tool (your answers and descriptions) is processed to generate the output you requested. That output is built in your browser.
  • Analytics are cookieless and anonymous by default. We use PostHog. Cookie-based analytics run only if you accept them in the cookie banner, and you can change that choice anytime from Cookie preferences in the footer.
  • Some tools send text to Google to draft content. Anything AI generates is a draft for human review, not legal, compliance, or professional advice.
  • We do not sell your personal information, serve ads, record your sessions, or knowingly collect data from children.

1. What information we collect

Information you provide

Email address. Some tools ask for your email so they can send you a generated result. We use it to deliver that result and to tell you about Novana and its paid platform, and we record it in our analytics tool, PostHog, so we can do so. To opt out, or to have your email deleted, email us. We do not run a mailing list, and we do not sell your email.

What you enter. To produce your output, a tool processes what you type into it, such as your answers and descriptions. This is used only to generate that output.

We do not ask for sensitive personal information, student records, or school evidence, and the Services are not built to collect them. Please do not enter that kind of information.

Information collected automatically

When you use the Services, we may collect limited technical information: your IP address, browser and device details, operating system, language settings, referring URLs, approximate location derived from your IP, and how you interact with the Services. We use it to keep the Services secure and running, and for analytics. See "Cookies and analytics" below.

2. How and why we process your information

We process your information to:

  • Deliver what you asked for. A tool builds your output in your browser and, where you asked, emails it to you.
  • Tell you about Novana, including in the email that delivers your result. You can opt out of these messages at any time.
  • Answer you when you get in touch for support.
  • Keep the Services secure and improve them, including analytics and abuse prevention.
  • Meet our legal obligations and protect the rights, safety, and property of you, us, and others.

We only process your information when we have a valid legal reason to.

3. Legal bases for processing

If you are in the EU or UK, the GDPR and UK GDPR require us to name the legal bases we rely on:

  • Consent, for cookie-based analytics, which run only after you accept them. You can withdraw consent at any time.
  • Steps taken at your request, to generate and deliver the output you asked for.
  • Legitimate interests, to run, secure, and improve the Services, and to tell you about Novana where you have given us your email, weighed against your rights. You can opt out of these messages at any time.
  • Legal obligations, where the law requires the processing.

If you are in Canada, we rely on your express or implied consent, which you can withdraw at any time. In rare cases the law may permit processing without consent, for example to detect fraud or to comply with a court order.

4. Who we share your information with

We do not sell your personal information. We share it only with the providers that run the Services, and only as far as they need it:

  • PostHog handles product analytics and stores the email address you provide. See the PostHog Privacy Policy.
  • Google is the AI provider that drafts content from the text you enter for that purpose.
  • Cloudflare hosts the Services and delivers your result by email.

We may also disclose information where the law requires it, to enforce our terms, to protect people's rights and safety, or as part of a merger, acquisition, or sale of assets. In that last case, we will require the recipient to honor this policy.

5. Cookies and analytics

We use PostHog for product analytics. It collects usage data such as page views, interactions, and device information so we can understand and improve the Services.

By default this runs cookieless and anonymous. We set analytics cookies only after you accept them in the cookie banner. You can change or withdraw that choice at any time from Cookie preferences in the footer, or by emailing privacy@novana.io.

The exception to that anonymity is the email you enter to receive a result: we record it in PostHog so we can deliver what you asked for and contact you about Novana.

We do not use advertising or targeting cookies, we do not sell or share your information for targeted advertising, and we do not record your sessions. For more on the provider, see the PostHog Privacy Policy.

6. Artificial intelligence

Some tools use AI to draft content, through a third-party provider, Google. What you enter for that purpose is sent to Google so it can produce your output.

Anything the AI generates is a draft, and a starting point for human review. It is not legal, compliance, safeguarding, or other professional advice, and it has not been checked against your jurisdiction or your circumstances. Review it, edit it, and bring in the right people, such as your safeguarding lead, data protection lead, and governing board, before you rely on it or adopt it.

7. International transfers

The Services run on Cloudflare's global network, and our providers operate in several countries. Your information may be transferred to and processed in Japan, the United States, and elsewhere, where data protection laws may differ from those where you live.

When we move personal data out of the EEA or UK, we rely on appropriate safeguards such as the EU Standard Contractual Clauses and the UK International Data Transfer Addendum. For transfers from Japan, we follow the Act on the Protection of Personal Information (APPI).

8. How long we keep your information

We keep personal information only as long as we need it for the purposes in this policy, unless the law requires or allows longer.

  • What you enter to generate output is processed to build it. That output is generated in your browser, and we do not keep this information on our servers afterward.
  • Your email address, if you give us one, is stored in PostHog and used to deliver your result and to contact you about Novana. You can ask us to delete it at any time.
  • Analytics data is kept in aggregate for as long as we need it to understand and improve the Services.

Once we no longer need your information, we delete or anonymize it.

9. How we keep your information safe

We use appropriate technical and organizational measures to protect the information we process. No method of sending data over the internet or storing it electronically is completely secure, though, so we cannot guarantee absolute security. You use the Services at your own risk.

10. Children and minors

The Services are for adults, such as school staff and administrators. They are not directed at children, and we do not knowingly collect children's personal information. Please do not use them to enter information about students or other children; they are not built to receive student records. If you think a child has given us personal information, email team@novana.io and we will act on it.

11. Your privacy rights

Depending on where you live, you may have rights over your personal information: to access it, correct it, delete it, get a copy, restrict or object to processing, and withdraw consent.

Withdrawing consent. Where we rely on consent, you can withdraw it anytime, for example from Cookie preferences in the footer, or by contacting us. Withdrawal does not affect processing we already carried out.

Opting out of contact. To stop hearing from us about Novana, or to have your email deleted, email privacy@novana.io.

EEA/UK. If you think we are processing your information unlawfully, you can complain to your Member State data protection authority or the UK data protection authority. In Switzerland, contact the Federal Data Protection and Information Commissioner.

Canada, Australia, New Zealand, and elsewhere. You may have the right to access or correct your information and to complain to your local regulator.

United States. If you live in a US state with a comprehensive privacy law (California, Colorado, Connecticut, Texas, Virginia, and others), you may have the right to confirm whether we process your data, access and correct it, delete it, get a copy, and opt out of targeted advertising, sale, or profiling. The Services do none of those last three, so there is nothing to opt out of. Contact us to exercise your rights. We will verify who you are before we act, and we will not treat you differently for asking.

To exercise any of these rights, email privacy@novana.io.

12. Do-Not-Track

Most browsers have a Do-Not-Track ("DNT") setting. There is no agreed standard for honoring DNT signals, so we do not respond to them. Either way, our analytics are cookieless and anonymous by default.

13. Updates to this policy

We may update this policy from time to time. When we do, we change the "Last updated" date at the top, and for material changes we may post a more visible notice.

14. Contact us

For questions about this policy or to exercise your rights, email privacy@novana.io for privacy matters or team@novana.io for anything else, or write to us at:

不落教育科技株式会社 (Uni Education Technology Co. Ltd)

Japan, 〒812-0013 Fukuoka, Hakata Ward, Hakataekihigashi, 1-chōme−14−34 博多ＩＣビル, 2F-C

Fukuoka, Fukuoka 812-0013, Japan