Nuvia is software that academies (dance, music, yoga, martial arts, sports, art, coding and similar) use to run their students, classes, attendance and fees. It is operated by The House of Valam under the Lazearound name, at nuvia.lazearound.thehouseofvalam.in. This page explains what personal data Nuvia collects, why, who it is shared with, and how to have it removed. For questions write to happyabundance55@gmail.com.
Who is responsible for the data
Each academy decides which students, guardians, coaches and staff it records and why; the academy is responsible for that data. The House of Valam provides the platform, stores the data on the academy’s behalf, and is responsible for the sign-in accounts, the platform itself and the contact details of academy owners who sign up.
How you sign in, and what we receive
There are no passwords. Every person signs in in one of two ways:
- Google sign-in. When you choose “Sign in with Google”, Google tells us your Google account’s unique ID, your email address, your name and your profile picture (the
openid,emailandprofilescopes, nothing else). We use the email address to recognise you and link you to the person the academy has recorded; the name and picture to show who is signed in. We do not read your Gmail, Drive, contacts, calendar or any other Google data, and we do not ask for access to them. - Mobile number and WhatsApp code. You enter your mobile number and we send a one-time code to it on WhatsApp. We keep the number to recognise you the next time. The code is sent through the WhatsApp Business service of Meta Platforms, which therefore receives the number and the message.
What academies store about people
On behalf of each academy we store names, photographs, contact details (phone, email, address), dates of birth, gender, blood group and health notes the academy chooses to record, emergency contacts, class enrolment, attendance, fee invoices and payments, certificates, exam results, remarks from coaches, leave and payout records for staff, and messages and notices sent inside the app.
How we use data
- To sign you in and keep you signed in (a session cookie).
- To run the academy’s classes: schedules, attendance, fees, receipts, certificates and notices.
- To send you notices, reminders and one-time codes (in the app, by web push where you allow it, and by WhatsApp for sign-in codes).
- To keep the service secure, prevent abuse and fix faults.
We do not use your data for advertising, we do not build advertising profiles, and we do not sell personal data.
Google user data: what we access, use, share, protect and keep
- What we access: only the basic profile Google returns at sign-in: your Google account ID, email address, name and profile picture. Nothing else from your Google account.
- How we use it: only to let you sign in and to match you with your record at an academy, and to show your name and picture in the app. Nothing is used for advertising, profiling, or to train any AI or machine-learning model.
- Who it is shared with: the academy you belong to sees your name and email as part of its own records. We do not sell, rent or give it to anyone else, or transfer it to data brokers.
- How it is protected: see Security below.
- How long we keep it: while your sign-in is linked to an academy. When you ask us to delete it (see Your choices and rights), we remove it within 30 days.
Google API Services policy
The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google account information (ID, email, name, picture) is used only to sign you in and to match you with your record at an academy. It is not transferred to anyone else except as described under “Who we share data with”, it is not used for advertising, and no person at Nuvia reads it except as needed to give you support or keep the service secure.
Who we share data with
- The academy you belong to sees its own people’s data and nobody else’s. Each academy is separated from every other one.
- Payment gateway. Fees are paid to the academy’s own Razorpay account. Razorpay handles the card, UPI or bank details; we never see or store them.
- Meta (WhatsApp) for sign-in codes, as above. Google for Google sign-in.
- Browser push services (such as those of Google, Apple and Mozilla) if you turn on notifications.
- Authorities, only where the law requires it.
We do not share personal data with anyone else.
Cookies and storage on your device
We use one session cookie to keep you signed in, and a few small items in your browser’s storage (for example your light or dark choice and a short-lived cache of the academy’s name and look). We use no advertising or tracking cookies.
Children
A person under 18 cannot register themselves. A parent or guardian registers them and gives consent for data use and, separately, for photo use; consent is stored with the date. Date of birth, blood group and medical notes are shown only to staff whose permissions include the student record, and to the student and guardian.
How long we keep data
- WhatsApp sign-in codes are valid for 10 minutes and are not kept after that.
- A sign-in session lasts 30 days, or until you sign out.
- Sign-in accounts and an academy’s records stay for as long as the academy uses Nuvia, and are removed within 30 days of a verified deletion request.
An academy’s records stay for as long as the academy uses Nuvia. If a subscription lapses the account becomes read-only; data is not deleted because of non-payment. People who leave an academy are marked as left, not erased, so the academy’s history stays complete, unless they ask for erasure (below).
Your choices and rights
- Ask your academy to correct, export or delete your data. An academy owner can export everything at any time from Settings.
- To delete your sign-in and personal data, or to stop receiving WhatsApp messages, write to happyabundance55@gmail.com from the email or number you signed in with. We act on a verified request within 30 days; some records an academy must keep for accounting may be kept without personal details where the law allows.
- You can remove Nuvia’s access to your Google account at any time at myaccount.google.com/permissions.
Security
- All connections use HTTPS (TLS encryption in transit).
- Sign-in session tokens are stored only as one-way hashes; we never store a copy that could be reused.
- Payment gateway keys and similar secrets are encrypted (AES-GCM) before they are stored, and cannot be read back through the app.
- Every request is checked against the person’s role at their academy, and one academy’s data cannot be read from another academy.
- The servers are our own, access to them is by personal keys only, and production secrets are never kept in the code or sent in chat or email.
Changes
If this policy changes we will update the date above and tell academy owners about material changes.
Contact
The House of Valam (Lazearound), happyabundance55@gmail.com. See also our Terms of use.