Privacy Policy
How we collect, use, and protect your information
1. Introduction
Nousable Ltd ("Nousable", "we", "us", or "our") operates the Nousable educational learning platform (the "Service"). This Privacy Policy explains how we collect, use, share, and protect information when you use our mobile application and related services.
Nousable is a business-to-business-to-consumer (B2B2C) platform. Organizations (schools, companies, and training providers) subscribe to our Service and provision accounts for their users (learners and teachers). If you are an end user, your organization is responsible for providing you with access and informing you about how your data is used within their programs.
The Service is intended for users aged 13 and older.
By using the Service, you acknowledge that you have read and understood this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
| Data | Purpose |
|---|---|
| Full name | Display name, personalization |
| Email address | Account identification, login, communications |
| Password | Authentication (stored as a secure hash, never in plain text) |
| Voice recordings | AI conversation input, speech-to-text processing, pronunciation analysis |
| Text responses | Generating personalized AI responses, learning assessment |
2.2 Information Generated Through Use
| Data | Purpose |
|---|---|
| Learning activity and progress | Tracking advancement through content |
| XP scores and achievements | Gamification and motivation |
| Quiz and interaction responses | Assessing understanding, adapting content |
| Skill levels and competency data | Building your learning profile |
| AI conversation history | Tracking learning progress through conversations |
| AI-generated feedback and assessments | Personalized learning recommendations |
| Speech analysis data (pronunciation, fluency) | Skill assessment and improvement tracking |
2.3 Information Collected Automatically
| Data | Purpose |
|---|---|
| Device type and operating system | Compatibility, troubleshooting |
| App version | Feature support, updates |
| Login timestamps | Security monitoring |
| IP address | Security, approximate location for compliance |
2.4 Information We Do Not Collect
We do not collect:
- Precise geolocation data
- Photos or camera data — our visual avatar feature does not use your camera
- Contacts or address book information
- Social media account information
- Financial or payment information (there are no in-app purchases)
- Health or other sensitive personal data
3. How We Use Your Information
We use the information we collect to:
- Provide the Service — deliver learning content, track your progress, and manage your account
- Personalize your experience — adapt difficulty levels and recommend content based on your performance
- Power gamification — calculate XP, achievements, streaks, and leaderboard rankings
- Report to your organization — provide teachers and administrators with aggregated and individual progress reports
- Power AI conversations — process your voice and text input to generate personalized AI tutor responses
- Improve the Service — analyze usage patterns to fix bugs and improve content effectiveness
- Ensure security — detect unauthorized access and protect accounts
We do not use your information for:
- Advertising or marketing to you
- Selling to third parties
- Building profiles for non-educational purposes
- Tracking you across other apps or websites
4. AI Providers and Data Processing
Our Service uses several third-party AI providers to deliver the learning experience. Below is a summary of each provider, what they do, and what data they receive:
| Provider | Purpose | Data Received |
|---|---|---|
| Google (Vertex AI / Gemini) | Processes conversation text, generates AI tutor responses, and produces text-to-speech audio | Conversation text (your messages and learner context) |
| AssemblyAI | Processes voice recordings for speech-to-text transcription | Voice audio stream |
| Microsoft Azure | Processes voice recordings for pronunciation analysis | Voice audio stream |
| Simli | Renders a visual avatar using the audio stream (your camera is NOT used) | Audio stream (for lip-sync rendering) |
All AI providers are bound by data processing agreements and process data only on our instructions. Data is shared with these providers solely for the purpose of delivering the Service. We do not sell your data to any third party.
5. Data Retention
| Data Type | Retention |
|---|---|
| Conversation transcripts | Retained for learning analytics while your account is active; deleted with your account |
| Voice audio | Processed in real-time by AI providers and not permanently stored |
| Learning progress and activity data | Retained while your account is active |
| Account information (name, email) | Retained while your account is active |
| Anonymized aggregate data | May be retained indefinitely for service improvement |
6. Data Sharing
6.1 With Your Organization
Your subscribing organization (and its authorized administrators and teachers) can view your learning progress, performance data, skill levels, and activity within the Service. This is a core part of the educational experience.
6.2 With AI Providers
Data is shared only with the AI providers listed in Section 4 above, strictly for the purpose of processing. We do not sell, rent, or trade your personal information to any third party.
6.3 Infrastructure Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase Inc. | Authentication and database hosting | All user data (account info, learning data) |
6.4 Legal Requirements
We may disclose your information if required to do so by law, court order, or government request.
6.5 Business Transfers
If Nousable is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify your organization before any such transfer.
7. Data Storage and Security
We implement industry-standard security measures to protect your data:
- Encryption at rest — data stored using AES-256 encryption
- Encryption in transit — all connections secured with TLS/HTTPS
- Password security — passwords are hashed using bcrypt and never stored in plain text
- Access controls — role-based access restricts who can view data
- Row-level security — database policies ensure users can only access their own data
While we take reasonable measures to protect your information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Regardless of where you are located, you have the right to:
- Access your personal data
- Correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
If you are in the European Economic Area, United Kingdom, or Switzerland, you additionally have the right to restrict processing, object to processing, and lodge a complaint with your local data protection authority.
To exercise any of these rights, contact us at support@nousable.com or contact your organization's administrator.
9. Account Deletion
You can request deletion of your account through the app or by emailing support@nousable.com.
There is a 30-day grace period after your request before permanent deletion occurs. During this period you may contact us to cancel the request.
When your account is permanently deleted:
- All personal data (name, email) is permanently removed
- Your learning progress, XP, and interaction data are deleted
- Your conversation history, voice transcripts, and speech analysis data are deleted
- Anonymized aggregate data (e.g. average scores) may be retained
- Data required for legal compliance may be retained for the legally mandated period
Account deletion is permanent and cannot be undone. Your organization's administrator may also delete your account on your behalf.
10. Children's Privacy
The Nousable Service is designed for users aged 13 and older. We operate a B2B model where organizations purchase access and pre-create learner accounts. We do not directly collect personal information from children under 13.
If you believe a child under 13 has been given access to the Service, please contact us at support@nousable.com and we will promptly investigate and take appropriate action.
Users aged 13–17 may use the Service as part of their organization's educational program. Organizations are responsible for informing parents or guardians and obtaining any consent required by applicable law.
11. Cookies and Tracking Technologies
The Nousable mobile app does not use cookies or third-party tracking technologies. We do not use any advertising SDKs or third-party analytics services.
If you access Nousable through a web browser, we may use essential cookies strictly necessary for authentication and session management.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Notify your organization's administrator by email
- Display a notice within the app on your next login
Continued use of the Service after changes become effective constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us:
- Email: support@nousable.com
If you are an end user and have questions about how your organization uses your data within Nousable, please contact your organization's administrator directly.