What Navya records about how you use it
Written to be read by the people it describes.
This applies to everyone who signs in — staff, teachers, parents and children. See Children below, which you should read even if you are here about your own account.
What is recorded
- •Sign-ins and sign-outs. When you signed in, whether by password or by child PIN, and when the session ended. Failed attempts too, including the email address or nickname that was tried.
- •Your device. Browser, operating system, and whether it is a phone, tablet or computer — worked out from information your browser sends to every website.
- •Where you connected from. Your IP address, and the country, region and network it resolves to. Looked up against a database on our own servers; your address is not sent to anyone else.
- •Your timezone and language setting, which your browser sends to every website by default. When your IP resolves to nothing useful, the timezone is used to name a country and only a country.
- •A precise location, only if you say yes. Your browser asks, not us. Refusing is free and nothing else changes. It is recorded against that one sign-in, never in the background, and never while you are signed out.
- •Which parts of the product you used, for a reviewed list of pages and actions — which one, when, how long it took, and whether it succeeded.
- •What you practised. Which questions were answered, whether each was correct, and how long each took.
- •Time you were active, measured two ways, and counts of copying, cutting and printing.
What is never recorded
This list matters as much as the one above, and it is enforced in code.
- •No keystrokes. Nothing you type is captured.
- •No screenshots and no screen recording.
- •No clipboard contents. When you copy we record how many characters and nothing else. The text itself is never sent.
- •No passwords and no PINs, in any form.
- •No contents of any page, message, answer or form in the usage record.
- •No location tracking. Your position is never followed or sampled on a timer. Refusing is a complete and permanent answer.
- •Nothing at all when you are signed out.
How long it is kept
| What | Kept for |
|---|
| Detailed usage records | 6 months |
| Browser-reported events | 6 months |
| Sign-in sessions and attempts | Indefinitely |
| Daily summaries | Indefinitely by default |
Accuracy — what these numbers are not
- •Location is approximate. Country and network are usually right. City is often wrong, especially on mobile networks. A VPN defeats it entirely.
- •A location taken from your timezone is a guess, and it comes from a setting on your own device that anyone can change in seconds.
- •Device recognition is advisory. Identical school laptops produce identical fingerprints, and any user can change theirs.
Children
Navya records children's activity on the same basis as everyone else's. If you are a parent or guardian, this means your child's use is recorded in the same detail as an adult's.
A child is never asked to share a precise location unless their parent has turned that on in parental controls. The server refuses a child's location even if something bypasses the screen. A child tapping "Allow" is not consent, so the decision is not theirs to make.
Section 9(3) of India's Digital Personal Data Protection Act 2023 addresses tracking and behavioural monitoring of children. Whether this system falls inside the educational exemptions in the Draft DPDP Rules 2025 is a question for a qualified adviser, and it has not yet been answered.
Your rights
You can ask for a copy of everything held about you, ask for it to be erased, or object — contact the operator of this service at [email protected]. Note that deleting an account does not by itself delete this record.
This notice describes a system, not a legal position. It has not been reviewed by a qualified data-protection adviser.