Privacy Policy

Last updated July 4, 2026

Novana Index is a free, public directory of international schools operated by 不落教育科技株式会社 (Uni Education Technology Co. Ltd), the company behind Novana (“Novana Index,” “we,” “us,” or “our”). This Privacy Policy explains what information we handle in connection with the Novana Index website at index.novana.io (the “Directory”), why, and the choices and rights you have.

Novana Index has no user accounts and no login. It is an informational directory that compiles publicly available information about schools and presents it on a map. If you have any question about this policy, or you want to correct or remove information, contact us at support@novana.io.

Who this applies to

This policy covers everyone who interacts with the Directory. Different parts apply to different people, so you can go straight to what is relevant to you:

• Visitors and users (for example, parents or students researching schools): we handle only a small amount of information about you, and you have no account with us. See the information we handle and your privacy rights.
• Schools listed in the Directory: your listing is compiled from public sources, and you are in complete control of it. See where school information comes from and school listings, corrections & removal.
• Individuals whose information appears in a listing (for example, a named head or staff member): you can have your personal information corrected or removed. See school listings, corrections & removal and your privacy rights.

1. The information we handle

We handle two very different kinds of information.

Information about schools (Directory listings)

The core of the Directory is factual information about schools, such as the school’s name, location and address, curriculum and programmes, age ranges, languages, contact details, website, and similar descriptive details. Most of this is information about an organisation rather than a person. In some cases a listing may include information about individuals connected to a school where that information is already published publicly (for example, the name of a head of school, or a photograph that appears on the school’s own website).

Information about you (visitors)

When you use the Directory, we handle only a small amount of information about you:

• Server and log data. Like any website, our infrastructure processes technical data such as your IP address, browser and device type, and the pages you request, for security, abuse prevention, and to serve the site.
• Product analytics. We measure aggregate usage (for example, how many people view a region) using privacy-light analytics. This runs cookieless by default, and we set analytics cookies only if you accept them. See Cookies and analytics below and our Cookie Policy.
• Messages you send us. If you email us (for example, a correction or removal request), we process the contents of your message and your email address in order to respond.

We do not ask you to create an account, and we do not collect payment information.

2. Cookies and analytics

The Directory does not use cookies to track you across sites, and it does not run advertising. By default, our analytics are cookieless: they keep no persistent identifier, do not capture form input, and do not record your session. We set cookie-based analytics only if you accept them through the cookie banner shown on your first visit; if you decline, measurement continues in the cookieless, anonymous mode. You can change your choice at any time using the Cookie preferences control in the footer. Your browser may still store essential, non-tracking data needed to display the page. See our Cookie Policy for the full detail.

3. How and why we use information, and our legal bases

We use the information above to:

• operate, maintain, and improve the Directory and its map;
• compile and present accurate, useful information about international schools;
• measure aggregate usage so we can improve the service;
• keep the service secure and prevent abuse; and
• respond to your messages and handle correction and removal requests.

Where data protection laws such as the GDPR apply, our legal basis for publishing directory information and for operating the site is our legitimate interest in providing a free, public-interest directory of international schools, balanced against the rights of the people involved. Where a listing includes an individual’s personal data, we rely on legitimate interest and we honour your right to object and to erasure (see Your privacy rights). We do not use your information for automated decision-making that produces legal or similarly significant effects.

4. Where school information comes from

We compile listings from publicly available sources, primarily schools’ own websites and other public directories and records. We aim to publish factual details rather than to copy text or images from those sources. Where data protection laws require us to tell you the source of personal data we hold about you, you can ask us and we will provide what we have.

5. School listings, corrections & removal

We want the Directory to be accurate and fair, and we take correction and removal requests seriously. Because a listing can contain two different kinds of information, we handle requests in two ways:

• Institutional information about a school. The school is always the authoritative source for information about itself, and a school is in complete control of its own listing: a school, or its authorised representative, can claim its listing and have any information corrected, updated, added, or removed as it sees fit, and we defer to the school on information about itself. If a listing is wrong, out of date, or misleading, tell us and we will fix it promptly. As a public-interest directory, we generally keep a factual listing for a school that exists (this is standard for directories), but we will remove a listing where the school has closed, where a listing was created in error, where a school asks us to, or where we are legally required to.
• Personal information about an individual. If a listing contains your personal information (for example, your name or photograph as a staff member), you can ask us to correct it, or to remove it and stop publishing it. We will honour valid erasure and objection requests. This applies even when the information originally came from a public source.

6. Not a consumer report or an endorsement

The Directory is provided for general information only. It is not a consumer report, and it must not be used to make decisions about a person’s eligibility for employment, admission, housing, credit, or any similar purpose. Inclusion of a school is not an endorsement, ranking, or recommendation. Always verify details directly with a school before relying on them.

7. When and with whom we share information

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We rely on a small number of service providers (“processors”) who handle data on our behalf and under contract, such as our hosting and infrastructure providers and our privacy-light analytics provider. We may also disclose information where we are legally required to, or to protect our rights, users, or the public. School listings themselves are, by their nature, public.

8. International transfers

We operate internationally, and information may be processed in countries other than your own, including countries whose data protection laws differ from yours. Where required, we put appropriate safeguards in place for such transfers.

9. How long we keep information

We keep directory listings for as long as they are useful and accurate for the Directory. We keep server logs for a limited period for security and diagnostics, and correspondence for as long as needed to handle your request and keep a record of it. When information is no longer needed, we delete it or retain it only in aggregate, non-identifying form.

10. How we keep information safe

We use appropriate organisational and technical measures to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect the information we handle.

11. Your privacy rights

Depending on where you live, you may have rights over your personal information. Under the GDPR and similar laws, these include the right to access your data, to rectify it, to erase it (the “right to be forgotten”), to restrict or object to processing, and to data portability. Under laws such as the California CCPA/CPRA, these include the right to know, to delete, to correct, and to opt out of the sale or sharing of personal information (we do not sell or share it).

To exercise any of these rights, email support@novana.io. We will not discriminate against you for exercising your rights. If you are in the EEA or UK and you believe we have not handled your data properly, you also have the right to lodge a complaint with your local data protection authority, though we would appreciate the chance to help first.

12. Children’s information

The Directory is about schools, not students. It is intended for a general adult audience, and we do not knowingly collect personal information from children or knowingly publish personal information about a child. If you believe a listing contains a child’s personal information, contact support@novana.io and we will remove it.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Significant changes will be reflected here.

14. How to contact us

For any privacy question, correction, or removal request, email support@novana.io. The data controller is 不落教育科技株式会社 (Uni Education Technology Co. Ltd), Tokyo, Japan.