What we collect, what we never collect, what we do with what we have, and how you control it.
Novachi Group LLC operates five products: LoopUps, Digital Defender, Afolktales, Novachi VR, and Tregox. This policy applies to all of them and to novachigroup.com.
We make four core commitments: we do not sell your data; we do not share children's data across products without explicit parental consent; we collect only what we need to deliver our services; and we delete data on request, fully, within 30 days.
When you create an account, we collect name, email address, phone number (optional), and organization affiliation (for schools and clinics). For child profiles, we collect first name, age or birth date, and any developmental details a parent or therapist chooses to record.
As you and your children use our services, we record which activities are completed, which episodes are watched, engagement duration, and progress toward goals. This data is used to deliver the service, progress reports, recommendations, and analytics visible to authorized adults.
Browser type, device type, operating system, and general geographic region. Used for diagnostics and service improvement. Not used to target advertising.
If you email us, submit a form, or chat with our assistant, we retain the communication to serve your request and improve our support.
We use data to deliver the service you signed up for, show you and authorized adults progress and engagement, communicate with you about your account, improve our products, and fulfill legal obligations.
We do not use children's data to train generative AI models without explicit, separate parental consent. We do not sell data to data brokers. We do not share data with advertising networks.
Every child account on a Novachi product sits under a verified parent or institutional guardian. Parents can review, export, or delete their child's data at any time via the parent dashboard. Children under 13 (US) or under 16 (EEA/UK) cannot create accounts independently. Schools can operate child accounts under a school-consent model where permitted by law.
Depending on where you live, you may have the right to access, correct, export, restrict, or delete your personal data. You also have the right to withdraw consent. To exercise any right, email privacy@novachigroup.com. We respond within 30 days.
We retain account data for as long as your account is active. On account deletion, we remove personal data within 30 days except where retention is required by law. Aggregated, de-identified analytics may be retained indefinitely.
We use industry-standard encryption in transit and at rest. We conduct regular security reviews. We do not store payment card information directly, all payment processing is handled by Stripe, a PCI-DSS Level 1 service provider.
Questions about this policy? Email privacy@novachigroup.com or write to Novachi Group LLC, 410 Peachtree Pkwy, Suite 4245, Cumming, GA 30041.