Policies
Privacy Policy
How Noia Homeyear handles parent, learner, education, media, and AI-related information.
Effective July 13, 2026
•
Last updated July 17, 2026
The short version
This Privacy Policy explains how Noia Homeyear collects, uses, discloses, stores, and protects information provided by adult account holders, including information about learners.
Noia Homeyear is intended only for people who are 18 years of age or older.
The adult account holder controls learner profiles and decides what learner information to provide.
We use family and learner information to provide planning, records, reading, reporting, media, and AI-assisted features.
We do not sell personal information or share it for cross-context behavioral advertising. Vercel Web Analytics processes privacy-focused, aggregated page-view data without cookies or persistent cross-site identifiers.
Active account holders may ask to review, correct, obtain a copy of, or delete their information and the learner information they are authorized to manage.
On this page
1. Scope and who controls the information
2. Information we collect
3. Information the current app does not intentionally collect
4. Sources of information
5. How we use information
6. Legal bases where applicable
7. AI and automated processing
8. When we disclose information
9. No sale or targeted advertising
10. Learner information
11. Retention
12. Security
13. Device permissions, cookies, and local storage
14. International processing
15. Your privacy choices and rights
16. Changes to this policy
17. Contact us
1. Scope and who controls the information
This policy applies to Noia Homeyear websites, mobile applications, support communications, exports, and related services. It does not apply to independent third-party websites or services that have their own privacy policies.
For the consumer Service, ToysEngage LLC is the business responsible for personal information. Noia Homeyear is intended only for people who are 18 years of age or older. The adult account holder controls the family workspace and decides what learner information to provide. Active account holders can submit privacy and data requests from Profile while signed in.
2. Information we collect
We collect information you provide, information generated as you use the Service, limited technical information needed to operate it, and information returned by service providers or content sources. Depending on the features you use, this may include:
Account and identity: email address, password authentication records, account-holder display name, profile photo, user ID, session and account status.
Learner profiles: learner name, grade, profile photo, learning styles, interests, goals, subject goals, notes, and account-holder-selected preferences.
Education and activity records: topic and skill progress, calendar events, categories, attendance, instructional time, grades, transcripts, work samples, notes, completion status, and record history.
Media and materials: selected photos, camera captures, image metadata, manual notes, device-generated speech transcripts, attachments, filenames, and technical upload data.
Reading information: books, authors, ISBNs, cover references, status, dates, reactions, searches, selected learners, recommendations, rationale, and affiliate-link interactions initiated by you.
Reporting information: school-year, state, and reporting-route choices; details you provide; checklist state; draft inputs; supporting materials; generated reports; previews; and exports.
Assistant and AI information: chat messages, prompts, attachments, generated replies, suggested topics, summary requests, job status, error information, and relevant family or learner context used to answer a request.
Support and communications: name, reply email, selected topic, subject, message, and related correspondence.
Technical, security, notification, and website analytics information: device and app type, operating system, app-scoped push token and installation identifier when remote notifications are enabled, IP address and request metadata available to our infrastructure, timestamps, identifiers, authentication events, error and security logs, settings stored on your device, and redacted page URLs, referrers, coarse location, browser, device, and operating-system dimensions used for aggregated website traffic statistics.
3. Information the current app does not intentionally collect
The current app does not include advertising SDKs, custom product-analytics events, payment processing, address-book access, or precise-location features. If you enable planner reminders, Noia Homeyear asks your operating system to schedule local notifications on your device from calendar event titles and start times. If you allow remote notifications, the signed-in app registers an app-scoped push token and a random installation identifier so our notification providers can address that installation; the registration is deactivated when you sign out. We do not intentionally collect government identifiers, financial account credentials, health records, or biometric templates used to identify a person.
Vercel Web Analytics is limited to page-view events used for aggregated traffic statistics. Before an analytics event is sent, we remove query strings, URL fragments, and dynamic learner, report, book, and recommendation identifiers. We do not intentionally include account, learner, message, media, or other family-workspace content in analytics events.
Photos, notes, messages, or other content could nevertheless contain sensitive information if you choose to include it. Please use the minimum information needed and avoid uploading highly sensitive information that the Service does not require.
4. Sources of information
You, when you create an account, learner profile, event, record, message, report, or support request.
Your device, browser, camera, selected photo library items, microphone, or speech-recognition service when you grant permission and use the related feature.
Our systems, which generate identifiers, progress calculations, recommendations, summaries, reports, logs, and derived organization of the information you provide.
Service providers and content sources, such as authentication, cloud hosting, AI, email delivery, speech, storage, and book metadata or search providers.
5. How we use information
Create and secure accounts, authenticate sessions, and maintain account-holder access.
Provide learner profiles, planning, attendance, activity logs, progress, grades, transcripts, reading, reporting, exports, and support.
Process photos, notes, speech transcripts, and attachments you choose to add.
Generate AI-assisted replies, summaries, recommendations, classifications, draft events, reports, and other requested output.
Personalize the family workspace using the learners, preferences, history, and context selected for a feature.
Register an opted-in app installation and deliver service notifications you have allowed through your device settings.
Respond to requests, troubleshoot, prevent abuse, protect safety, detect security incidents, and enforce our terms.
Maintain, debug, evaluate, understand website traffic, and improve reliability and usability, using aggregated or de-identified information where reasonably possible.
Comply with law, exercise or defend legal claims, and protect users, learners, the public, and the Service.
6. Legal bases where applicable
Where data-protection law requires a legal basis, we process information as needed to provide the Service and perform our contract with you; based on your consent for optional device permissions or other consent-based features; to comply with legal obligations; and for legitimate interests such as security, support, fraud prevention, and service improvement, balanced against the rights of the people affected. You may withdraw consent for future processing where consent is the basis, but this does not affect earlier lawful processing.
7. AI and automated processing
When you use AI-assisted features, we may send your prompt, attachment, and the limited account or learner context needed for the request to model and infrastructure providers. The Service may automatically organize, summarize, rank, recommend, classify, or draft content. These features can infer interests, likely next steps, or record categories from the information in the workspace.
AI processing is required to provide core Noia Homeyear summaries, recommendations, assistant responses, and draft-generation features. The Service does not currently offer an AI-disabled mode.
No solely automated high-impact decisions
Noia Homeyear is designed to support adult decisions, not to make legally or similarly significant decisions about a learner without meaningful adult review. Generated output should be reviewed and corrected before use.
Do not include information in a prompt or attachment that is unnecessary for the request. Service-provider handling, retention, and training restrictions depend on our applicable provider configuration and agreements and may change; we will update this policy if a material practice changes.
8. When we disclose information
We disclose information only as reasonably necessary for the purposes described in this policy, including to:
Cloud, database, authentication, storage, secure-upload, hosting, and realtime service providers, including infrastructure supporting Supabase and our Edge Functions.
Vercel, which hosts the website and processes redacted page-view events and technical dimensions for aggregated Web Analytics reporting.
AI and model service providers that process requests, attachments, context, and generated output on our behalf.
Email and support-delivery providers used to send authentication messages or deliver Contact us requests.
Device-platform and speech-recognition providers when you use device speech features; their handling is also governed by your device settings and their terms.
Expo and the Apple or Google device-notification services when you allow remote notifications; they process app-scoped delivery tokens and notification payloads needed to deliver the message.
Book metadata, search, cover-image, recommendation, and similar content providers when needed to identify or display books.
Professional advisers, auditors, insurers, authorities, or parties to legal proceedings where reasonably necessary and lawful.
A successor or participant in a merger, financing, acquisition, reorganization, bankruptcy, or transfer of all or part of the Service, subject to appropriate confidentiality and legal requirements.
Other people or services at your direction, such as when you export, share, download, open an external link, or submit a report outside the Service.
9. No sale or targeted advertising
We do not sell personal information for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising. We do not use learner information for targeted advertising or commercial profiling unrelated to providing the Service. If these practices change, we will provide required notice and choices before the change applies.
Some recommendations contain affiliate links. If you choose to open one, the destination merchant or site will receive the ordinary request information associated with your visit and may know that the referral came from us. Their privacy policy applies after you leave the Service.
10. Learner information
Noia Homeyear is an adult-only homeschool planning and records service. Learners do not create accounts or use the Service independently. An adult account holder may create learner profiles and provide learner information only when authorized to do so.
We receive learner information from the adult account holder, not through accounts or independent use by learners.
We use learner information to provide the educational and family features the account holder requests, secure the Service, and comply with law—not for targeted advertising.
An active account holder may review, correct, request a copy of, or delete learner information they are authorized to manage.
We retain learner information only as long as reasonably necessary for the purpose for which it was provided, subject to limited legal, safety, security, and backup needs.
If you believe learner information was added without appropriate authority, contact us so we can investigate and take appropriate action.
11. Retention
We retain information for the shortest period reasonably necessary for the purpose collected, taking into account the feature you use, your account and deletion choices, legal and recordkeeping duties, dispute and fraud prevention, safety, security, and backup cycles. We do not retain learner information indefinitely.
Account and core family records are generally kept while the account or relevant learner profile remains active and for a limited period afterward when needed for recovery, security, legal obligations, or disputes.
Temporary uploads and draft-processing files are kept only as long as reasonably necessary to finish, retry, secure, or troubleshoot the requested workflow.
Support communications and security logs are kept for the period reasonably necessary to respond, prevent abuse, document resolution, and comply with law.
Device caches and locally persisted preferences may remain until you sign out, clear app data, uninstall the app, or the cache expires.
Backups may retain deleted information for a limited rolling period before secure overwrite, with access restricted to recovery and legal needs.
12. Security
We use administrative, technical, and organizational measures designed to protect information in light of its sensitivity, including authenticated access, row-level or service-side authorization boundaries, signed media access, transport protections, limited client access to private backend data, and security monitoring. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
Use a strong unique password, protect devices with account access, keep software current, and contact us promptly if you suspect unauthorized access. Do not send credentials or highly sensitive information through support messages.
13. Device permissions, cookies, and local storage
The app requests camera, selected-photo-library, microphone, or speech-recognition access only when you use a related feature. You can revoke permissions in device settings, but the feature may stop working. Selecting a photo or recording a voice note does not authorize unrelated use of your library or microphone.
We use browser or app storage, and technologies used by our authentication provider, to keep you signed in, preserve settings, restore recent assistant or reading state, remember limited dismissals, and improve reliability. The current Service does not use advertising cookies, and Vercel Web Analytics does not use cookies to count page views. Development-only preview settings are not part of production data collection.
14. International processing
We and our service providers may process information in countries other than where you live. Those countries may have different data-protection laws. Where required, we use an approved transfer mechanism or other appropriate safeguards and provide additional information on request.
15. Your privacy choices and rights
Depending on where you live, you may have the right to know or access information; obtain a copy; correct it; delete it; restrict or object to processing; withdraw consent; request portability; appeal a decision; or complain to a privacy regulator. California residents may also have rights to know, delete, correct, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service when exercising privacy rights.
We do not currently sell personal information or share it for cross-context behavioral advertising, so there is no sale or advertising-sharing practice to opt out of.
You can edit certain account, learner, event, reading, and record information directly in the Service; device permissions can be changed in system settings.
While your account is active, submit requests for access, a copy, correction, or deletion from Profile while signed in. This is a request process, not a self-service data archive.
We may verify identity, account ownership, and authority over learner information before responding.
Some requests are subject to legal exceptions, such as information needed for security, legal compliance, transaction records, or the rights of another person.
We will not discriminate against you for exercising a privacy right. If we deny a request, we will explain the reason and any available appeal right when required.
16. Changes to this policy
We may update this policy as the Service, providers, or law changes. We will post the revised policy and update the date above. If a change materially expands how we use learner information or other sensitive information, we will provide additional notice and obtain consent where required before the new practice applies.
17. Contact us
Active account holders can submit privacy questions, rights requests, security concerns, or complaints from Profile while signed in. Deleting a Noia Homeyear profile removes the information associated with that profile from Noia Homeyear. You may also contact the privacy or consumer-protection authority where you live.