Privacy Policy
Last updated: January 2026 • Compliant with Ghana Data Protection Act, 2012 (Act 843)
1. Introduction & Commitment to Privacy
Trainova Enterprise("we," "our," or "us") is dedicated to safeguarding the privacy and security of educational institutions, administrators, lecturers, students, and guardians across Africa.
This Privacy Policy describes how we handle personal data, academic records, and institutional information collected through our School Operating System (School OS), Novagrade.ai, Smart Timetable, Assessiva, Trainova EdTech, and Trainova Campus.
2. Categories of Information We Process
A. Institutional & Student Academic Data (School OS)
Student full names, registration IDs, class enrollments, attendance logs, exam scores, report card summaries, guardian contact details, and staff profiles provided by subscribing school administrators.
B. AI Assessment & Exam Data (Novagrade.ai)
Computer-Based Test (CBT) question banks, student answer submissions, automated evaluation metrics, and lecturer score confirmations.
C. Student Question Bank & Token Practice Data (Assessiva)
Student user registration profiles, topic search logs, solved question history, score accuracy metrics, free tier usage counters, and learning token transaction receipts.
D. Learner & User Account Profiles (EdTech & Campus)
User names, email addresses, phone numbers, course progress tracking, assignment submissions, digital certificate credentials, and campus article interaction data.
E. Payment & Billing Data
Mobile Money transaction reference IDs, invoice metadata, and billing contact details.
3. AI Data Safety & Isolation (Novagrade.ai)
We take student data privacy and academic confidentiality seriously when deploying artificial intelligence:
- No Public Model Training: Student exam scripts, institutional test questions, and grading data processed by Novagrade.ai are strictly isolated and NEVER used to train public AI models.
- End-to-End Encryption: Assessment data is encrypted both in transit (TLS 1.3) and at rest (AES-256).
4. Payment & Mobile Money Security
All financial payments for school fees, subscription billing, or course enrollments are processed via PCI-DSS compliant payment gateways licensed by the Bank of Ghana.
🔒 Security Note: Trainova Enterprise never sees, requests, or stores raw Mobile Money PINs, banking passwords, or card security codes on our servers.
5. Ghana Data Protection Act (Act 843) Compliance
Trainova Enterprise operates in full compliance with the provisions of the Ghana Data Protection Act, 2012 (Act 843). As a registered data processor, we adhere to the legal principles of lawfulness, data minimization, transparency, and security.
Under Act 843, authorized institutional users and data subjects have the right to:
- Access personal data held on their behalf.
- Request rectification of incomplete or inaccurate academic profiles.
- Request data portability and full export of student records.
- Request erasure of personal data upon expiration of legal retention periods.
6. Protection of Minors & Student Data
Student data for basic and secondary schools managed through School OS is uploaded under the administrative authority of the respective educational institution.
School administrators are responsible for ensuring that requisite parental/guardian consent is obtained in accordance with institutional policy prior to processing minor student information.
7. Data Retention & Export Rights
Institutions maintain the right to export full CSV/PDF backups of their academic, attendance, and financial ledgers at any time through the School OS administrator dashboard. Upon subscription cancellation, institutional data is archived securely for 90 days before permanent deletion.
8. Cookies & Analytics
We use strictly necessary cookies to maintain user session authentication across web portals. Analytics cookies are utilized solely in an aggregated, anonymized format to improve application speed and page responsiveness.
9. Contact Our Data Protection Team
If you have any questions regarding data processing, privacy compliance, or wish to exercise your data subject rights, please contact our Data Protection Officer: