Privacy policy

Last updated: 20 October 2026

NOVALYT_Lab (the website at www.studio13developers.com/novalyt and its Android app) is operated by Studio 13 Developers, Uganda. Contact: info@studio13developers.com.

What we collect

Account details: your name, email address and password (stored only as a salted hash), and any profile details you add (affiliation, institution, ORCID, interests).
Content you add: papers and documents, datasets, notes, comments, algorithm specifications, experiments and paper drafts.
Results the service computes from your content: extracted claims, text and figure analyses, research gaps, experiment results, statistics and drafts.
Activity and technical records: an activity log of actions in your projects, usage counts used for plan limits, your IP address while signing in (to slow down password guessing) and server error logs.
Cookies: only a session cookie (to keep you signed in) and a security cookie against cross-site request forgery. There are no advertising or analytics cookies.

How we use it

Only to provide the service: to run your projects, to send account emails (address verification, password reset, invitations, notifications), to keep the service secure and to apply plan limits. We do not show ads, we do not sell or rent personal data, and we do not use your content to train models for others.

Where your content is processed

Text analysis, figure reading, gap analysis, experiments and statistics run on our own server. Your papers and datasets are not sent to other companies for this.
When you use literature search or DOI lookup, the search terms, titles or DOIs you enter are sent to the public scholarly services Crossref, OpenAlex or Semantic Scholar. Your documents are not.
AI provider features are switched off on this installation. If they are switched on in future, a project's documents are sent to an AI provider only when that project's principal investigator allows it in the project settings.

Who can see your content

Projects are private. Only people you invite to a project can see it, with the role you give them. Our hosting and email providers process data on our behalf to run the service. We disclose information to others only when the law requires it.

Keeping and deleting data

Your data is kept while your account exists. You can download a copy of your account data and delete your account from your profile page. Deleting a project deletes its files and records; deleting your account deletes the projects only you own. Copies in server backups disappear when those backups are rotated. You can also ask us to delete your data by writing to the address above.

To delete your account, in the app or on the website: sign in, open your profile, and under "Delete account" type your email address and password and choose "Delete my account". Your account, your personal workspace and the projects only you own, including their files, are deleted at once. Activity records in projects shared with others keep your email address as a label. To have your data deleted without signing in, email info@studio13developers.com from your account's address.

Security

All traffic uses HTTPS. Passwords are hashed, uploaded files are kept outside the public web folder and every download is checked against your project permissions.

Children

NOVALYT_Lab is a research tool for adults and is not directed at children under 16.

The Android app

The Android app shows this website. It does not collect anything beyond what the website collects and asks for no device permissions other than internet access.

Changes

We will update this page when our practices change and change the date at the top.