Privacy Policy

Noeva is operated by The KBI Group Limited, a company registered in England & Wales (Company Number 14699823), with registered office at 7 Lynwood Court, Priestlands Place, Lymington, Hampshire, SO41 9GA. The KBI Group Limited is the data controller for all personal data processed through Noeva. Our VAT number is GB 483 5139 74.

This policy applies to anyone who visits noeva.live, joins our waitlist, or uses the Noeva learning companion as a parent or child account holder.

• Parent account details — name, email, and an encrypted PIN used for parent-only controls.
• Child profile details — first name, date of birth (used to set the age-appropriate programme), and learning preferences chosen by the parent.
• Learning activity — task completions, journal entries, assessment responses, and portfolio uploads created inside the app.
• Waitlist submissions — name, email, child age, and any optional message you send us.
• Technical data — basic device, browser, and usage information needed to keep the service reliable.

We process your data on the following legal bases:

• Performance of a contract — to deliver Noeva to you and your child once you start your trial or subscription.
• Legitimate interests — to operate Noeva, keep it secure, prevent fraud, and improve the service. Where children's data is involved, we have considered and balanced these interests against the child's rights and interests in line with the ICO Age Appropriate Design Code.
• Consent — for any optional communications you choose to receive (such as the Founding Families community email). You can withdraw consent at any time.

• We do not sell or share your data with advertisers.
• We do not run third-party advertising or tracking pixels in the child experience.
• We do not ask children for personal contact details, location, or payment information.

We use the information above only to:

• Deliver each child's daily tasks, journal, portfolio, and progress views.
• Personalise the programme to your child's age, pace, and chosen pillars.
• Let parents review activity, set goals, and manage account settings.
• Send essential service emails (account, security, and product updates you opt into).
• Improve Noeva — diagnose bugs, monitor reliability, and refine the learning experience.

Data is stored in our managed cloud database with encryption in transit and at rest. Access is strictly limited to the small Noeva team, and only when needed to support your account or operate the service.

We keep your data for as long as you have an active Noeva account, plus a reasonable period afterwards (up to 36 months) for legal, accounting, and operational purposes. Your child's journal entries and learning history are deleted within 90 days of account closure unless you ask us to retain them for longer (for example, if you plan to return). You can request deletion at any time.

Some of our infrastructure providers (including our database and hosting providers) process data outside the UK. Where they do, we ensure appropriate safeguards are in place under UK GDPR — including adequacy decisions or the International Data Transfer Agreement.

Noeva is designed for children using the learning companion under the supervision of a parent or guardian. We have built the learning companion in line with the ICO's Age Appropriate Design Code (the Children's Code), and have completed a Data Protection Impact Assessment (DPIA) covering how we process children's personal data.

In practice this means:

• A child cannot create an account themselves. The parent creates and owns the account, and the parent verifies their relationship to the child during sign-up.
• We collect the minimum data needed to personalise learning — first name, date of birth, and the parent's chosen pillars and settings.
• We do not show advertising to children, do not run third-party tracking pixels in the child experience, and never sell child data.
• Children's journal entries, assessment answers, and learning activity are visible only to their parent and to the small Noeva team supporting the learning companion.
• We never use children's data to train external AI models.
• Parents can review, export, or delete their child's data at any time from the Parent Dashboard, or by emailing privacy@noeva.live.
• A child aged 13 or above has the right to request their own data, to ask us to correct it, or to ask for it to be deleted. We will always discuss such requests with the parent first where it is appropriate to do so.

If you are unhappy with how we handle your data, please tell us first — email privacy@noeva.live and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113.

You can request a copy of your data, ask us to correct it, or ask us to delete your family account at any time by emailing privacy@noeva.live.

If we make material changes, we'll update the date at the top of this page and, where appropriate, notify account holders by email.

Questions about privacy? Email privacy@noeva.live.