Privacy

What this training site stores and sends

A plain summary for students and staff. Your organisation’s own records policy still applies.

Novak LMS™ privacy in plain words

  • What we collect: your account (name, email, role, classes) and your learning progress: lessons, section checks, quizzes, tests and labs. Helix attention metrics are collected only if you consent.
  • Helix is opt-in, every session. The camera is processed locally in your browser; video and images never leave your device. Only summary numbers are sent, and saying no never affects grades.
  • Never sold. Student data is never sold or shared with third-party advertisers.
  • Built with FERPA in mind: role-based access (students see their own records; staff only their classes), each institution’s data kept separate, self-service export and deletion requests at /my-data, and a tamper-evident audit log of sensitive actions.
  • Questions? Email novakornothing@gmail.com or see Contact & help.

The details below describe exactly what this server stores and sends.

Stored on this server

  • Your account (name, email, role) and the classes you are enrolled in.
  • Training records: quiz and test attempts, lab completions, time on lessons, grades and instructor overrides, end-of-course feedback, messages and content tickets.
  • Lesson study time: while a lesson tab is visible and you have used it in the last minute, the page records the seconds you spend on it (sent every 30 seconds). It is never graded.
  • Mastery estimates: per learning objective, worked out from your quiz, test, lab and review answers plus lesson study time. Reviews, test-out checks, instructor overrides and every recommendation are logged with their reasons, which you can read under “My mastery” in each class. Estimates never change a grade. Helix data, only with your current consent, can at most offer an optional review.
  • An audit log of sign-ins and administrative actions.
  • Helix attention data, only if you opt in: see the Helix attention policy. Camera video never leaves your browser. Helix sessions, attention events and accuracy-study records are deleted after 365 days.

Sent to a third party

The lesson Listen button’s neural voice is produced by Microsoft’s online text-to-speech service (the Read Aloud service used by Microsoft Edge), through the open-source edge-tts library. When you press Play, the server sends the lesson text (up to about 3,500 characters at a time) to that service and caches the audio. Your name and account are not sent; the service sees the server’s network address.

An administrator can turn this off with NOVAK_NEURAL_TTS=0; Listen then uses your browser’s own voice.

Nothing else is sent off the server: fonts, icons and the eye-tracking model are served from this site.

Your choices

  • Helix: stop, withdraw consent and delete your sessions from My attention data; the optional accuracy study has its own leave-and-delete button.
  • You can download a copy of your records or request deletion anytime from My data (/my-data) when signed in, or by asking an administrator (every export and deletion is logged).