1. Scope

This policy covers the Tutor Manager app and its related support services. It does not cover external services you reach through links or separate apps — such as the messaging apps you may choose to share statements through — which are governed by their own privacy policies.

2. Roles and responsibilities

For tutor account data and technical support, we determine the purposes and means of processing and are responsible for them under applicable law.

For the student, parent, lesson and payment data a tutor enters to run their work, the tutor decides why it is collected and how it is used, and remains responsible for its accuracy, the lawfulness of entering it, and who may see it. We store and process it on the tutor's behalf as a service operator, and use it for no other purpose.

3. Data we handle

3.1 Data the tutor enters, stored in their account

• Tutor data inside the app: the name shown on statements, the subjects taught, and language, theme, currency, notification and other preferences.
• Student and parent data: the student's name and required phone number, the parent's phone number if entered (optional), stage, grade, lesson price and usual length, notes, groups, and the student's status (active, paused or archived).
• Family linking: when the same parent number appears for more than one student, the app links the siblings to produce a combined, itemised statement with a single total.
• Lessons and attendance: date, time, length, subject and type of each lesson, whether it was rescheduled, and the record of attendance, absence, cancellation and notes.
• Financial data: amounts due and paid with their methods and dates, individual and combined statements, and reports.

This data is stored in the tutor's account on Google Cloud Firestore, in the Doha region (me-central1), encrypted by Google in transit and at rest. An encrypted working copy (SQLCipher) remains on the device so the app works offline. These records are for administration and documentation only; the app does not confirm that a payment actually took place, and holds no student or tutor money in any balance or wallet.

3.2 Account data

When you sign in: your email address, account ID, sign-in method (email, Google or Apple), and your name if the provider supplies it. Technical data accompanies these requests by nature: IP address, operating system type and version, app and library versions, and device language.

3.3 Files created on your device

Statements and reports in PDF and Excel are produced on your device and stay there until you share or save them; temporary files are deleted automatically after twelve hours.

3.4 What we do not collect

• We use no analytics or crash-reporting tools, and record no in-app usage events.
• We collect no location, no contacts, no photos, and no files beyond what you choose yourself.
• We use no advertising identifiers, and do not track you across apps or websites.

4. Why we process data

To operate the app and its features: storing your work and syncing it across your devices, authenticating you, answering support requests, protecting the service from abuse, and meeting legal obligations.

5. Service providers

• Google LLC / Firebase: authentication (Firebase Authentication) and the database (Cloud Firestore) in the Doha region, under Google's data processing terms.
• Apple and Google as sign-in providers, if you choose to sign in with them.

We share your data with no one else, do not sell it, and do not use it for advertising.

6. Retention

Your data remains while your account exists. When you delete the account from inside the app, your account data is deleted from our servers immediately, and may persist in Google's technical backups for a limited period before removal. The copy on your device remains yours until you delete the app or clear its data.

7. Your rights

You may request access to, correction of, deletion of, or export of your data. Most of this is available inside the app: editing, deleting, and exporting to PDF and Excel. For anything else, write to info@nova-qa.net from the email linked to your account; we will ask for what is needed to verify identity and respond within the period set by applicable law.

A student or parent should first contact the tutor who entered their data, as the tutor decides about it; if technical intervention is needed, write to us at the same address.

8. Account deletion

Inside the app: Settings → Account → Delete account. This deletes your cloud data and then the account itself; the copy on your device stays with you. Or send a request to info@nova-qa.net from the email linked to the account.

9. Children's data

The app is not directed at children and we do not create accounts for them. What a tutor enters about their students — some of whom are minors — is the tutor's responsibility, including the legal basis and parental consent where required.

10. Security

We protect data with technical and organisational measures: account-level access rules so no one reads another account's data, encryption in transit (TLS) and at rest with Google, an encrypted database on the device, and an optional fingerprint or face lock. No method is completely secure, but we review these measures regularly.

11. Notifications

All reminders are local to your device and pass through no push server. You can choose discreet notifications so student names never appear on the lock screen.

12. Changes to this policy

We may update this policy and will publish the updated version with a new effective date. Material changes will be announced inside the app.

13. Law and contact

This policy is governed by the laws of the State of Qatar, whose courts have jurisdiction over any dispute arising from it, without prejudice to rights granted to you by mandatory law in your country of residence.