Privacy Policy
Last updated October 27, 2026 · Version 2026-10-27.2
Welcome to Nobl Kids Inc. (“Nobl”, “we”, “our”, “us”). We are committed to protecting your privacy and your child’s. This Privacy Policy explains how we collect, use, disclose and safeguard information when you visit our website and use Nobl Tutor, our math tutor for children in grades 4 to 10 in Canada. Please read it carefully. If you do not agree with it, please do not use our services.
Children use Nobl Tutor under a parent’s account: a parent creates the account and each child’s profile, and children don’t have accounts, emails or passwords of their own. Children under 13 (under 14 in Quebec) can’t consent for themselves, so a parent or guardian does. A parent turns on talking lessons for the family (on the talking-lessons screen after confirming it’s you, or when keeping the free session’s profile at sign-up) before any child can use them, and in the free session the grown-up gives their OK on the screen before the child talks. Talking lessons are never recorded unless a parent also turns on “Save audio recordings” (see Audio recordings).
COMPANY INFORMATION
- Full legal name of the company: Nobl Kids Inc.
- Email: support@noblkids.com
- Phone number: 437-529-3443
- Physical address: 1 First Canadian Place, 100 King Street West, Suite 6200, P.O. Box 50, Toronto, Ontario M5X 1B8, Canada
TABLE OF CONTENTS
- Personal Information
- Use of Information
- Sharing and Disclosure of Information
- Third-Party Partners and Integrations
- Your Rights
- Security
- Changes to This Privacy Policy
- Contact Information and Responsible Nobl Kids Entities
1. PERSONAL INFORMATION
When you use Nobl Tutor, we collect personal information to provide our services. Without it, we may not be able to provide the services you ask for. This includes:
1.1 Contact, Account, and Profile Details
- About you: your name, email address, mobile phone number and date of birth (to confirm that the account holder is an adult; accounts are for parents and guardians 18 or older).
- How you sign in: your Google account, a code texted to your phone, or (for older accounts) a password stored only as a secure hash.
- About your child: the display name, avatar and grade you choose for their profile (in the free session: the first name you type on the note when you agree, if you give one).
- In a talking or typed lesson, which a parent turns on first: the math problem your child enters (and what they tried, if they say) and the conversation (your child’s words, the tutor’s replies and what it draws). We keep the written conversation for 90 days after your child last worked on that problem, so they can pick it up where they left off (see 5.1).
- Only if a parent turns on “Save audio recordings”: an audio recording of each talking lesson (your child’s voice and the tutor’s), kept for 30 days (see Audio recordings). Otherwise we don’t record lessons.
- A record of each consent: which version of these policies, of the talking-lessons screen, of the audio recordings switch or of marketing messages a parent accepted, when, which parent, a one-way hash of the IP address at that moment, and when it was turned off, if it was.
We don’t collect a child’s email, surname, school, or photos of them, and nothing they type beyond the math problem they enter, what they tried and, in a typed lesson, what they write to the tutor. The tutor never asks about, and we never keep, health, diagnoses, family details or school names.
1.2 Payment Details
If you subscribe to the monthly plan, your card details go straight to Stripe, a third-party payment service, through its payment form on our payment page, never to us.
1.3 Information You Choose to Provide
- Other contributions: anything you send or tell us by email, text or phone, for example when you contact our support or talk with our team about personalized tutoring, or when you fill in a form or respond to a survey, kept as long as we need it to help you and to keep a record of what we were asked.
1.4 Information Automatically Collected During Use
- Usage data: how you and your children use the service, such as pages visited, lessons started and ended, and how much tutor time your family uses each day (counted per household, by Toronto calendar day, for the free plan’s daily minutes).
- Device data: your IP address, the kind of device and browser you use, and whether a page was opened inside an app’s built-in browser (such as Facebook’s), plus short technical records of problems such as a microphone that could not start.
- Sign-in records: when each sign-in happened, and the IP address and the browser it came from. We keep each one while your account exists (signing out deletes it), and short-lived counts of recent attempts (for 1 day) to slow down anyone trying to get in.
- Account status: if we ever pause your account under our Terms, at your request, to protect it, or while a payment is disputed, a note that it is paused, why, and until when.
We don’t collect your location.
1.5 Cookies and Tracking Technologies
We use cookies and similar technologies to keep you signed in, to remember your choices, and, only if you allow it, to understand how our pages are used and to measure our ads. Our cookies are set by our own servers. No other company’s scripts run on our pages, with two exceptions: our screen recorder (PostHog’s software, served from our own site, see below), and Stripe’s script on the payment page, which shows the card form and sets Stripe’s cookies to make the payment work and prevent fraud (see Stripe’s privacy policy).
- Essential, always on: signing you in and keeping your account secure; remembering that this device has used its free session; and remembering your cookie choice.
- Analytics, only if you allow it: a random identifier, used to record visits to our public pages and the link or campaign that brought you there, and the screen recordings described below.
- Advertising, only if you allow it: Meta’s identifiers and the sharing described in Advertising and Marketing.
Until you choose, only the essential cookies are used, and nothing optional runs if your browser sends the Global Privacy Control signal. Advertising never runs on your child’s screens. Your choice applies to this browser and lasts a year; then we ask again. If you open our page in your phone’s own browser using our link, your choice and your visit carry over with a one-time code. You can change your choice here at any time:
Signing in, security and the free session. Always on.
Which of our pages are visited and what brought you to them, and screen recordings of how the site and app are used (no sound; typing and names hidden), sent to PostHog. Never what your child says.
Telling Meta (Facebook and Instagram) when you view our pages, sign up or pay, so we can measure our ads. Nothing about your child.
Screen recordings. If you allow analytics cookies on a device, we record how our website and the app are used on it, so we can see where parents and children get stuck or confused. A screen recording is a replay of the page, not a video from the camera: it shows what was on the screen and where it was tapped and scrolled. It has no sound, and never contains anything typed into a field, your child’s name, the words or drawings of a lesson, the text of the talking-lessons or billing screens, your card details or your IP address. In the app it runs once you have accepted this policy, linked to your account and never to your child by name. The free session is recorded from its start, which comes only after your OK on the note. PostHog, in the United States, stores the recordings for us; only the people who build Nobl watch them, and each recording is deleted after 30 days.
1.6 Payment Transaction Data
For each payment: the amount, the date and Stripe’s reference for it. Stripe also receives your name, email address and phone number, and details of your device and browser from its payment form, for fraud prevention.
1.7 Third Party Sources
If you choose to sign up or sign in with Google, Google shares with us the name and email address on your Google account (and its profile picture, if it has one). We don’t receive your contacts or anything else from your Google account.
1.8 The Free Session
Our landing page offers one free session with no account. Nothing starts until a parent or legal guardian, 18 or older, gives their OK on screen: a short note asks you to pick your child’s grade and tick two boxes, one saying you are the parent or guardian and one agreeing to our Terms of Use and this policy for the free session, and only then does the tutor begin. We keep that agreement (when it was given, the version of the note and of our Terms, a one-way hash of the device’s IP address, the grade, whether a name was given but never the name, and whether you chose to do the session with your child or to try it yourself) as our record of your OK. The note also has a box for your child’s first name. It is optional: leave it blank and the tutor calls your child “you”; the tutor never asks for it. If you type it, it goes on the guest profile, the tutor uses it to talk with your child, and OpenAI hears it like the rest of the conversation. We never ask for a surname.
You can also try the session yourself first, in your child’s place: the tutor then works through a problem with you, and what you say or type is handled exactly as your child’s part would be, below. The note does not ask for a name in that case.
The session is processed like a talking lesson (see Artificial Intelligence). We don’t record audio in the free session. We keep its written conversation and your child’s grade and their first name if you gave it with a temporary guest profile on our servers; if you sign up and keep the profile, the conversation comes with it and your child can carry on with the problem. We remember that a free session was used with a signed cookie on the device and a one-way hash of its IP address. We keep all of this for two reasons: so you can sign up and keep your child’s profile, and so each family gets one free session. If you sign up on the same device within 30 days of the session, the guest profile becomes your child’s profile, and the cookie’s record and the IP hash are deleted no later than 30 days after the session. Otherwise it is removed 30 days after the session, and signing up on that device within 7 days after that still brings it back. Then the guest profile and its conversation are permanently deleted, and so are the cookie’s record and the IP hash. You can stop the free session at any time, and nothing more is collected.
If analytics cookies are allowed on the device, the free session is recorded as Screen recordings describes. The note itself is recorded like our other pages, but what you type on it is never captured.
2. USE OF INFORMATION
We use personal information as outlined in this Privacy Policy:
2.1 Providing, Improving, and Developing Nobl Tutor
- To run the tutor: help your child work through the math problem they bring.
- To sign you in, including codes texted to your phone, and to take payments.
- To answer your questions and provide customer support.
- To contact you by text message, phone call or email about your account and the services, including to set up and provide personalized tutoring when your plan includes it, as our Terms of Use describe.
- To conduct research, analytics and debugging, and to develop and improve the tutor: to see where families and children get stuck or confused, and fix it.
- To personalize your child’s lessons from their grade and what they say in each lesson.
- Only if a parent turns on “Save audio recordings”: to listen to recorded talking lessons, to find and fix problems and make lessons better (see Audio recordings).
Product analytics are sent from our servers to PostHog, an analytics service in the United States: events such as “a free session started” or “a lesson ended after 12 minutes”, tied to the household, never to a child by name and never containing what your child said or answered. We also count how much AI the tutor uses, to run and pay for the service.
2.2 Artificial Intelligence
Every reply the tutor gives, including the numbers, the steps and the drawings, is written by an AI model, so it can make mistakes. Each problem’s conversation is kept for the time 5.1 says, so your child can go back to it; we keep no record of what they have learned.
The tutor, Nobl, is an AI: a computer program, not a person. The screen where a problem is entered says so, and so does the tutor whenever it is asked.
In a talking lesson, which a parent turns on first, OpenAI receives your child’s speech and words, the math problem they entered and the conversation so far. It processes them in the United States. It also receives the first name on your child's profile (in the free session, the one you typed on the note), so the tutor can use it. With each talking lesson we also send OpenAI a scrambled code for your child's profile (never a name), which its safety systems use to tell accounts apart. Your child's voice goes from your browser straight to OpenAI, so OpenAI also sees the device's IP address. OpenAI doesn't use any of it to train its models. An AI model from OpenAI writes every reply the tutor gives, from the math problem, what your child tried (if they said), their grade, their first name and the conversation. If another company starts hearing your child, we’ll update this page, and talking lessons stop until a parent reads the new details and turns them on again.
Typed lessons. With talking lessons on, your child can choose to type to the tutor instead of talking (the chat). The same permission covers it. In a typed lesson OpenAI receives what your child types instead of their speech, with the same lesson details listed above (the math problem, what they tried, their grade, their first name), and writes the tutor’s replies. Typed lessons are never recorded as audio. OpenAI doesn't use any of it to train its models.
OpenAI may keep what it receives for up to 30 days, only to detect and look into abuse, and then deletes it. This applies to every talking lesson, to every typed lesson and to the free session, including what the grown-up says. We have asked OpenAI to keep nothing at all (zero data retention); once that is in place we will update this page.
Audio recordings. Talking lessons are not recorded unless a parent turns on “Save audio recordings”, on the talking-lessons screen (after confirming it’s you) or when turning on talking lessons at sign-up. It is off until a parent turns it on, and lessons work the same either way. While it is on, each new talking lesson of your family’s children is recorded as one audio file: what your child’s microphone picks up (their voice, and anything else it hears nearby; silence while it is muted) and the tutor’s voice. Your browser sends the recording to our own servers during the lesson, and we store it on Google Cloud in the United States (Iowa, us-central1). Recordings are never sent to an AI company or anyone else. Only the people who build Nobl listen to them, to find and fix problems (for example, the tutor not hearing your child well or misunderstanding them) and to make lessons better. We never use recordings to train AI models, never use your child’s voice in advertising, and never share or sell them. Each recording is deleted 30 days after its lesson started, and sooner when you delete your child’s profile or your account (within a day of the deletion). You can turn “Save audio recordings” off at any time on the talking-lessons screen, without confirming it’s you: nothing more is recorded from then on, even in a lesson already under way, and turning talking lessons off turns it off too. To have your child’s recordings deleted sooner, email support@noblkids.com. The free session and typed lessons are never recorded.
The written conversation. Whether or not audio is recorded, we do keep the written conversation of each problem (your child’s words, typed or spoken, the tutor’s replies, what it drew on the board and your child’s helpful or confusing taps) for 90 days after your child last worked on that problem, so they can pick it up where they left off. Then the words and drawings are removed; what stays is when the problem was worked on, for how long and how many turns it took, with no words in it (see 5.1).
2.3 Ensuring Safety and Security
We use your information to:
- Detect and prevent fraud, abuse and security risks.
- Verify that it’s you, for example before you turn on talking lessons or pay.
- Comply with legal obligations and protect the safety of children and the public.
- Resolve disputes and enforce our Terms of Use.
- Respond to legal requests and prevent harm.
2.4 Advertising and Marketing
We don’t sell data, and there is no advertising in the tutor. We send you marketing messages (news, tips and offers about Nobl) only if you ask for them: by email, or by text, each only if you turn it on under Marketing messages in your parent area. Both are off until you do, and creating an account or accepting our Terms of Use doesn’t turn them on. You can turn them off there at any time, or with the unsubscribe link in a marketing email or by replying STOP to a marketing text. We keep a record of your choice (see 1.1). Messages about your account and the services, such as sign-in codes, payments, support and personalized tutoring, are not marketing; our Terms of Use describe them.
We advertise Nobl Tutor on Facebook and Instagram. Only if you allow advertising cookies on your device, our servers tell Meta (the company behind Facebook and Instagram) when a parent views our landing or sign-up page, when a free session reaches its first problem, when a parent finishes setting up an account, and when a parent pays (with the amount). With these we send what Meta needs to recognise the person: your IP address, the kind of browser you use, Meta’s cookie identifiers and the ad’s click code if you came from one of our ads, and, when you set up an account or pay, your email address, phone number and name, each turned into a one-way hash first. Viewing the landing or sign-up page also loads one invisible image from Meta. Meta uses this under its own terms to measure our ads and decide who sees them, including showing our ads again to people who visited our pages.
We never send Meta anything about your child: not their name, grade, voice or answers, or anything said or done in a lesson. Nothing is sent from your child’s screens, while a free session is running, for a parent who is already signed in, or if your browser sends the Global Privacy Control signal. You can change your choice under Cookies and Tracking Technologies, and manage your ad preferences in your Facebook and Instagram settings.
2.5 Analyzing Communications
We may review the messages you send our support to answer them, to investigate fraud or security issues, and to improve the service. Our internal console never shows what your child said or their name. If a parent turns on “Save audio recordings”, the people who build Nobl may listen to those recordings, as Audio recordings describes. We never use these reviews for third-party marketing, and we never sell them.
2.6 Payment Services
Payment information is used to take payments for the monthly plan, prevent fraud, meet our legal and tax obligations, and enforce our payment terms.
3. SHARING AND DISCLOSURE OF INFORMATION
We don’t sell personal information, and we never share a child’s information with another family.
3.1 With Your Consent or Direction
We share your personal information when you have given us your consent or asked us to, for example when you ask us to send your family’s information to you or to someone you name.
3.2 Who We Share With
We share personal information with service providers who help us run Nobl Tutor and our business: hosting and storage, sign-in, the texts and emails we send you, the AI that powers the tutor, payments, product analytics, ad measurement about parents, product development, maintenance and debugging, and customer support. These service providers are bound by contract to protect your information, can access it only to perform these tasks, and may disclose it only where the law requires. They are:
- Google Cloud: hosting, the database and the storage of audio recordings (only made when a parent turns them on).
- OpenAI, in the United States: in a talking lesson, understanding what your child says and speaking the tutor's replies; writing every reply the tutor gives, in talking and typed lessons (receives what “Artificial Intelligence” above lists; does not use it to train its models; may keep it up to 30 days only to detect and look into abuse).
- Twilio and SendGrid (a Twilio company), in the United States and elsewhere: sign-in codes, and the texts and emails we send you (receive your phone number or email address and the message).
- Google sign-in, in the United States and elsewhere: only if you choose to sign in with your Google account.
- PostHog, in the United States: product analytics and screen recordings (never a child’s name or speech).
- Meta (Facebook and Instagram), in the United States and elsewhere: measuring our ads, only with your OK, about parents only (see Advertising and Marketing).
- Stripe, in the United States and elsewhere: payments for the monthly plan (never anything about your child).
3.3 Why We May Share Your Information
To comply with law, respond to legal requests, prevent harm and protect our rights. We may disclose your information to courts, law enforcement, tax or other governmental authorities if and to the extent we are required or permitted to by law, or where disclosure is reasonably necessary to: comply with our legal obligations; respond to valid legal requests, such as subpoenas or court orders, or claims against us; enforce our Terms of Use; or protect the rights, property or safety of a child, our families, Nobl or the public. Where appropriate and allowed, we notify you about a legal request first, unless the law or a court forbids it, or notice would be futile or would put someone at risk.
To effectuate business transfers. In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy or insolvency, we may transfer some or all of our assets, including your information. You will be notified before your personal information is transferred and becomes subject to a different privacy policy.
3.4 Where Your Data Is Kept
Your family’s data is stored on Google Cloud in the United States (Iowa, us-central1). The AI models that read your child’s words, from OpenAI, process them in the United States. If you live in Canada, this means your information is transferred to, stored and processed in the United States, and may be accessible to authorities there under U.S. law. To ask how our service providers outside Canada handle your information, write to our privacy officer at support@noblkids.com.
4. THIRD-PARTY PARTNERS AND INTEGRATIONS
4.1 Linking with Third-Party Services
You can sign up and sign in with your Google account. When you do, we receive only what is described in 1.7, and use it only to sign you in and run your account.
4.2 Terms of Third-Party Services
Parts of Nobl Tutor rely on third-party services we don’t own or control, such as Google sign-in and Stripe’s payment form. When you use them, you also provide your information to them, and their own privacy policies apply, including the Google Privacy Policy and the Stripe Privacy Policy.
5. YOUR RIGHTS
You have rights over your family’s personal information under Canadian privacy law, as described in this section. We may ask you to confirm it’s you before we act on a request, so we never give one family’s information to someone else. We answer within 30 days.
- Managing your information. To update your name, date of birth or phone number, email support@noblkids.com. Switch talking lessons off on the talking-lessons screen (after confirming it’s you); your child then can’t use the tutor until a parent turns them on again. Turn “Save audio recordings” on or off on the same screen. Turn marketing emails and texts on or off under Marketing messages in your parent area. Allow or refuse analytics and advertising cookies at any time under Cookies and Tracking Technologies.
- Access and portability. To see, correct or download what we hold about your family (your account, your children’s profiles, what you agreed to, the conversations of their lessons while we keep them, their audio recordings if a parent turned them on, and payments), email support@noblkids.com.
- Erasure. To delete a child’s profile, your whole account, or your child’s audio recordings, email support@noblkids.com. A deleted child’s profile is kept 30 days in case you change your mind, then permanently deleted; its audio recordings are deleted within a day. We may keep what the law requires us to keep (such as the anonymous payment records below), and copies in our backups are gone within about 7 days.
- Complaints. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca). If you live in Quebec, you can also complain to the Commission d’accès à l’information (cai.gouv.qc.ca).
Turning on talking lessons, audio recordings or marketing messages, or accepting a new version of these policies, asks you to confirm it’s you (password, a code to your phone, or Google) when a child is using the app on that device, or when you have not signed in within the last 10 minutes.
5.1 How Long We Keep It
- Your account details, your child’s profile and the records of what you agreed to stay while the account or profile exists.
- Each problem’s written conversation, talking or typed (your child’s words, the tutor’s replies, what it drew on the board and your child’s helpful or confusing taps), is kept 90 days after your child last worked on that problem, so they can go back to it. Then the words and drawings are removed. A record of the problem itself (when it was worked on, for how long, how many turns) stays while your child’s profile exists, with no words in it.
- An audio recording of a talking lesson, made only if a parent turned on “Save audio recordings”, is deleted 30 days after the lesson started, or within a day of your child’s profile or your account being deleted. Without it, we keep no recording.
- A free session’s guest profile and visitor record are kept as The Free Session describes.
- The record of each sign-in is deleted when you sign out, or with your account.
- A screen recording is deleted by PostHog after 30 days.
- Our security log of important account actions and staff access (ID numbers, codes and times only) keeps each entry for 12 months.
- The record of each payment stays while your account exists. When your account is deleted, we keep an anonymous record of each payment (the amount and the dates, with no name, email address or account) for 7 years, as tax law requires.
- Database backups are kept about 7 days, so something deleted is gone from the backups within about 7 days too.
6. SECURITY
Although no system can guarantee complete security, we continuously implement and update administrative, technical and physical security measures to protect your information from unauthorized access, loss, destruction or alteration. Data is encrypted in transit (HTTPS) and at rest on Google Cloud. Account data is reachable only by named staff who sign in with two-step verification. Our internal console never shows what your child said or your child’s name, and it records each account it opens and each change it makes. Audio recordings (only made when a parent turns them on) are kept in a private storage area that is never public: only our servers and named staff can open it. If a breach of our safeguards creates a real risk of significant harm, we will tell you and the Office of the Privacy Commissioner of Canada, as the law requires.
7. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in our practices or legal requirements. Each update is posted here with a new version at the top. If we make significant changes, we’ll ask you to read and accept the new version the next time you open the app. If you do not agree with the updated policy, you can stop using Nobl Tutor and ask us to delete your account.
8. CONTACT INFORMATION AND RESPONSIBLE NOBL KIDS ENTITIES
For any questions or concerns about this Privacy Policy or how Nobl handles your personal information, contact us at support@noblkids.com. Huseyn Akhundov, our privacy officer, is responsible for how we handle personal information. Nobl Kids Inc. is the entity responsible for your personal information.