Privacy Policy
Revised 12 September 2026
The short version
We save learning progress so children can continue their adventures and parents can see how they are doing. New profiles do not ask for a birth date, school, real name or interests. Use a made-up explorer nickname, or keep the one we generate.
A nickname and game progress linked to your account are still personal data. Profiles are not public, and the app has no advertising, public chat or optional visitor analytics. Read our short explanation for children.
Privacy for explorers
Your adventure, your privacy. Here’s what we remember and how you can get help.
Pick a pretend name
You can be Explorer 1 or choose a fun nickname. You do not need to tell us your real name, birthday or school.
We remember your adventure
We save your level, stars and the maths you have tried so you can carry on next time. Your grown-up can see your progress. Other families cannot see your profile.
You are in control
You can turn sound off, take a break or stop playing. There are no adverts or public chats in Mathsonaut.
Want help?
Ask your grown-up if you want to change your nickname, see what is saved or ask us to delete it. They can contact support@mathsonaut.com.
Who is responsible
Mathsonaut is a maths learning service operated from the UK. Privacy enquiries go to support@mathsonaut.com.
Required before publication: identify the individual or company acting as controller and provide their business contact address. “Mathsonaut” alone is not a confirmed legal identity.
What we store and why
- Parent account: name, email, authentication records and account communications, to manage access, support and password recovery. If you choose Google or Apple sign-in, we receive the account information they share, such as your email and profile name. We do not receive your Google or Apple password.
- Subscriptions: payment status, Stripe customer and subscription references, purchase and cancellation records, and discount information. Stripe handles payment details; our application does not store card numbers.
- Explorer profile: a profile ID linked to your account, nickname, chosen character, current level and curriculum stage. New profiles start at the introductory stage; this is not a request for the child’s actual school year.
- Learning records: completed topics, answers and accuracy, assessments, stars, badges, streaks, session timing and last activity. These support resuming lessons, learning suggestions and the parent progress view.
- Technical records: network addresses, request and authentication information used by the hosting and security services to deliver and protect the app. Account-level AI usage is recorded to enforce generation limits.
Older profiles may still contain names, birth dates, year groups or interests supplied in a previous version. Removing these fields from new forms does not erase existing records. You can change the nickname or delete a profile in the parent dashboard, or ask us to remove old profile details while keeping progress.
Guest play
You can try the introductory free topics without creating an account. Guest progress is saved in your browser. Clearing site data can erase it. Loading games, images and audio still sends normal network requests to our hosting providers, which may create technical logs. Guest play is therefore not a promise that no personal data is processed.
Learning suggestions and AI
Answers, assessments and progress can affect suggested levels and difficulty. This is educational personalisation and can constitute profiling. It is not used for advertising, public rankings, school admissions or other decisions with legal effects. Parents can review progress and contact us about an unsuitable level.
Where AI question generation is used, our server sends topic information, difficulty and previous question text to Anthropic. It does not add profile names, birth dates or saved interests to the generation request. Do not include personal information in question text or support examples. Provider processing terms and retention must be confirmed before relying on a particular retention or model-training guarantee.
Narration uses prerecorded audio. Playing a voice does not record your child’s voice.
Providers and international processing
- Supabase: account authentication, database and stored media.
- Vercel: website delivery and infrastructure. Optional Vercel Analytics and Speed Insights are disabled in this version.
- Stripe: subscriptions, payment processing and fraud prevention.
- Anthropic: server-side question generation when used.
These providers may process information outside the UK. We have not yet verified this project’s hosting region, provider access locations or applicable international transfer safeguards. These must be documented, including how to obtain copies of relevant safeguards, before this draft is published. We do not claim that all information stays in the UK or EU.
Lawful processing and children
Parent account and subscription administration generally support the contract with the parent; security requires a documented legitimate-interests assessment, and legally required financial records have a legal-obligation basis.
Required before publication: document a lawful basis for each use of children’s learning data and assess necessity, best interests, educational profiling and parental involvement. A parent’s contract does not automatically provide a contract basis for processing a child’s data. The profile acknowledgement is not verified parental consent.
For families in the US, a child-directed service must assess COPPA obligations, including direct parental notice and verifiable consent where required. Other countries may impose additional requirements. A UK operator or a small amount of progress data does not automatically exempt this service.
How long information is kept
Account-linked learning records currently remain to support continued play unless a profile is deleted or a deletion request is carried out. There is no verified automatic inactivity-deletion schedule in this version. Guest and preference storage generally remain until cleared or replaced.
Required before publication: set and implement retention limits for inactive profiles, detailed answers and sessions, support messages, logs and backups. Financial records may need longer legal retention; the applicable periods and reasons must be specified. A deletion request must also address processors and backup expiry. We do not promise that every copy disappears immediately or within an unverified fixed period.
Your choices and rights
Parents can view progress, change a nickname or character, and delete a child profile from its edit page. To request a copy, correction, deletion of older details, closure of a parent account, restriction or objection, email support@mathsonaut.com. Include your account email and the request; do not send a password or a child’s identity documents.
We may need proportionate checks that you are entitled to act for the account or child. UK data rights depend on the circumstances and lawful basis. Access requests are normally answered within one calendar month, with any lawful extension explained. Where processing relies on consent, you may withdraw it. Children have their own privacy rights and can ask a trusted adult for help.
Make a privacy complaint
Email support@mathsonaut.com with “Privacy complaint”. Tell us what happened and how you would like it resolved. You do not need legal language or a particular form. If your device cannot open an email link, copy the address into your email app.
We must acknowledge your complaint within 30 days, investigate without undue delay, keep you informed and explain the outcome. You can also complain to the Information Commissioner’s Office or your relevant local regulator.
Security, storage and changes
The application uses authenticated access and database row-level policies to separate families’ records. Production access controls, provider settings, backups and incident procedures require ongoing review; no system can promise absolute security. See Cookie settings for browser storage.
This page carries a fixed revision date. Material changes to purposes or sharing need clear notice to parents and a review of any required permissions before they take effect.