Canada-first privacy baseline

Privacy Policy

How the current accountless Novus Learn release handles information.

Last updated

Applies to Novus Learn 0.1.0

Scope and operator

Copy link

Novus Learn is a product of Novus Stream Solutions, a sole proprietorship trading as Novus Stream Solutions and based in London, Ontario, Canada. This policy describes the current accountless web application. Privacy questions and requests go to learn@novusstreamsolutions.com or through the contact page.

The 2026-08-21 revision makes Adsterra the active advertising provider for the current month and re-prompts saved choices because the third party changed. Google Analytics 4 remains the only analytics provider. Google AdSense stays listed in ads.txt for possible future use but its script is not loaded.

The short version

Copy link
  • There is no account, no login, and no user profile anywhere.
  • The application writes nothing about you to a database. In the standard deployment there is no product database at all.
  • Everything you make — projects, notes, uploads, transcripts, practice attempts, scores, career-matcher answers, puzzle progress, saved careers, exports — is created and kept in your own browser.
  • A server is involved only to fetch public material you asked for, and to score formal practice attempts without revealing the answer key. Neither one stores what passes through it.
  • Analytics is off in every region until you switch it on. Advertising is off until you accept it in the EEA, the UK, and Switzerland, and can be switched off anywhere else. Global Privacy Control keeps Analytics and Advertising off even if an earlier saved choice allowed them.
  • An eligible export or print action can open at most one clearly disclosed Adsterra sponsor tab; the requested export or print still completes if advertising is blocked.

Information processed on your device

Copy link

This is where the great majority of the product lives. These records are written by your browser to your browser (localStorage and IndexedDB); they are not transmitted to us, and clearing site data removes them permanently — we hold no copy to restore.

  • Theme, motion, and consent choices.
  • Saved and recently opened public topic shortcuts, and your local library.
  • Generated knowledge projects in IndexedDB, plus files, edits, study progress, and teacher lesson plans.
  • Files you upload (text, Markdown, PDF, EPUB, Word, or PowerPoint) and any video or audio you transcribe are parsed entirely in your browser. Their contents are not uploaded to our servers or to any third party; the on-device speech model runs locally.
  • Aptitude and Cognitive Skills Lab practice: which items you answered, your scores, and your history.
  • Reasoning Challenge attempts and results, including the Novus Reasoning Score.
  • Career Matcher answers, match results, saved occupations, comparison lists, and your career roadmap. Your questionnaire answers are scored on the device and are never sent anywhere.
  • Puzzle progress and coding-exercise work, including code you run in the sandbox.
  • Every export you generate — PDF, spreadsheet (CSV), printable HTML, plain text, JSON, or archive — is assembled in your browser from data already on your device. Producing one involves no upload, and the file is checked before it is written so it cannot carry a private project, share, or attempt address into a document you pass to someone else.

What a server actually does

Copy link

Novus Learn is a local-first application, but it is not an offline-only one: some material has to be fetched from the public web, and formal practice has to be scored somewhere that is not your browser. This is the complete list of what our server does, and in every case it processes a request and returns a result without storing it.

  • Fetches Wikipedia, Wikidata, Wikimedia Commons, and Wiktionary material when you search, open a topic, or look up a word.
  • Fetches a public web page, a set of pages from a site you name, or an open-access article from Europe PMC, when you ask one of those tools to read it.
  • Searches Wikimedia Commons and the Internet Archive for openly licensed video and lecture material related to a topic.
  • Starts and scores a formal practice attempt (see the next section).
  • Reads the coarse country code your connection already supplies, once, to decide which advertising default applies to you. No IP address is stored or logged for this.
  • Reads the Sec-GPC request header alongside that country decision so a browser-level Global Privacy Control signal can override Analytics and Marketing before either third-party script mounts.
  • Applies rate limits. To do that it uses the caller address the hosting edge provides, held in memory for the length of the limit window (a minute or less) and never written to disk or associated with anything you did.

Requests we make on your behalf

Copy link

When you search or open a topic, Novus Learn's server sends the search phrase, Wikipedia language, or page ID to official Wikimedia services. The same applies to a URL you paste, a site you index, a word you look up, or a journal search: the address or phrase you gave us is sent to that public source so the material can be retrieved and returned to your browser. Requests identify Novus Learn with a descriptive application User-Agent.

Those third parties, and our hosting provider, may process network information such as IP addresses and standard request logs under their own policies. We do not receive a copy of their logs. Private, internal, and login-only addresses are refused before any request is made, so a link you paste cannot be used to reach something on your own network.

Practice attempts and answer keys

Copy link

Formal aptitude and Reasoning Challenge attempts are the one place where a submission leaves your browser, and there is a specific reason for it: the answer key must not be in the page, or the practice would be worthless. Starting an attempt returns the question stems and choices only, together with a short-lived signed token that identifies that one attempt. Submitting sends your answers and that token; the server checks them against the key it holds and returns the result.

The token is not an account. It carries no name, no email, and nothing that identifies you or your device, it expires, and it is not stored after the attempt is scored. Neither your answers nor your result are written to any store on our side — the result is returned to your browser and kept there, which is why practice history lives on the device and disappears with your site data.

Accounts, cloud storage, analytics, and advertising

Copy link

This release has no accounts, identity provider, or cloud file upload, and it does not write your search, reading, or consent activity to a product database. Google Analytics 4 (aggregate usage measurement; it does not log IP addresses) and Adsterra (the active advertising provider for the current month) are consent categories you control. Analytics is off in every region until you enable it. Advertising does not load in the EEA, the UK, or Switzerland until you accept it; in other regions it is allowed by default. Switching Marketing off immediately unmounts Novus Learn's ad slots and prevents new ad scripts. Global Privacy Control overrides saved Analytics and Marketing grants. To decide which default and privacy signal apply, the no-store region endpoint reads the coarse country and Sec-GPC headers your connection already sends; no IP address is stored or logged for this. When a provider is active, it processes data under its own policy.

On eligible export and print actions, Marketing permission may open one disclosed Adsterra sponsor tab for that user gesture. The export or print always continues, and no sponsor tab opens when Marketing is blocked or Global Privacy Control is active.

Cookies and similar storage

Copy link

Necessary browser storage records consent and enables requested local features. The Google Analytics script stays disabled in every region until you allow Analytics. Adsterra stays disabled until you allow Marketing in the EEA, the UK, or Switzerland; in other regions it is allowed by default and you can switch it off. Withdrawing Marketing unmounts our ad slots and prevents new ad scripts, while Global Privacy Control overrides saved Analytics and Marketing grants. See the Cookie Policy and preference centre for categories and controls.

Retention and deletion

Copy link

Local records remain until you remove them, clear site data, or use the local-data control in the preference centre. Standard hosting and security logs follow the hosting provider's retention settings. No account deletion process is needed because accounts do not exist.

There is nothing on our side to delete. The application has no product database in its standard deployment: it does not write your searches, reading, practice, career answers, or consent choices to one. An optional database capability exists only to publish a small curated list of public topic pages chosen by us — it holds no user records and is not enabled by anything you do.

Children and education

Copy link

Novus Learn is designed for a general audience aged 13 and older. It does not knowingly collect student profiles in this release. Schools and guardians should assess whether public Wikimedia content is suitable for their context.

Rights and contact

Copy link

As a Canadian operator, Novus Stream Solutions handles personal information in line with PIPEDA and applicable Ontario law. People in Canada may have rights to request access to or correction of personal information held by an organization. Because the product stores no account profile, most user-controlled data is on the device. Send a privacy request to learn@novusstreamsolutions.com or through the contact page; Novus Stream Solutions (London, Ontario, Canada) answers privacy requests directly. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

Consent version 2026-08-21.1

Cookie preferences