Privacy Policy

1. Who we are

MathBot Academy ("we", "us", "our") provides online maths practice for children aged 3–9, aimed at parents and primary educators.

Data controller: MathBot Academy
Email: mathbotacademy@proton.me

2. What this policy covers

This Privacy Policy explains how we collect, use, share, and protect personal information when you use mathbotacademy.com (the "Website"), including when you create an account.

3. Who the service is for (children's privacy)

Our content is designed for children, but accounts are intended to be created and managed by a parent/guardian or teacher. We aim to collect the minimum data needed to run the service. We do not sell personal data.

4. Information we collect

We may collect the following:

A. Account information

• Email address
• Password (stored in hashed form)
• Display name / profile name (if you provide one)

B. Usage and device information (analytics)

• Pages viewed and actions taken (e.g., starting an activity)
• Approximate location (e.g., city/region derived from IP, depending on configuration)
• Device and browser information
• General technical logs (e.g., errors)

C. Communications

If you contact us, we will receive the information you send (email address, message content, and any attachments).

D. Children's learning/progress data (if enabled)

Depending on how your account works, we may store learning/progress information (e.g., activities completed, scores). We treat this as personal data if it can be linked to an identifiable child.

5. How we use your information

We use personal data to:

• Create and manage accounts
• Provide and improve learning activities and site functionality
• Understand usage trends and fix bugs (analytics)
• Respond to support requests
• Keep the Website secure and prevent misuse

6. Legal bases for processing (UK GDPR)

We rely on:

• Contract (to provide the service when you create and use an account)
• Legitimate interests (site security, preventing fraud, improving performance and user experience)
• Consent (where required for non-essential cookies/analytics in your jurisdiction)
• Legal obligation (if we must comply with applicable law)

7. Cookies and analytics

We use cookies and similar technologies to:

• Keep you signed in (essential)
• Remember preferences (functional)
• Measure usage and improve the Website (analytics)

You can manage cookies via your browser settings and any cookie controls we provide on the Website.

Lovable analytics: We use Lovable's analytics to understand how the site is used and to improve it. We aim to configure analytics to be privacy-conscious (e.g., avoid collecting unnecessary identifiers where possible).

8. Sharing your information

We may share data with trusted service providers who help us run the Website, such as:

• Hosting and infrastructure providers
• Email/support tooling (if used)
• Analytics provider (Lovable analytics)

We only share what is necessary, and providers must protect the information.

We may also share information if required to comply with law or to protect rights, safety, and security.

9. International transfers

Some service providers may process data outside the UK. Where this happens, we take steps to ensure appropriate safeguards are in place (such as contractual protections).

10. How long we keep your data

We keep personal data only as long as necessary:

• Account data: while your account is active, and for a reasonable period afterwards in case you reactivate or to resolve disputes
• Analytics data: retained for a limited period according to our analytics settings
• Support emails: as long as needed to address your enquiry, then archived or deleted

You can request deletion at any time (see "Your rights").

11. Security

We use appropriate technical and organisational measures to protect data, including access controls and password hashing. No method is 100% secure, but we work to prevent unauthorised access.

12. Your rights (UK)

You have rights including:

• Access to your personal data
• Correction of inaccurate data
• Deletion of your data
• Objection to certain processing
• Restriction of processing
• Data portability (in some cases)
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at mathbotacademy@proton.me.

You also have the right to complain to the UK regulator: the Information Commissioner's Office (ICO).

13. Third-party links

The Website may link to third-party sites. We are not responsible for their privacy practices.

14. Changes to this policy

We may update this policy from time to time. We will update the "Last updated" date and, if changes are significant, we will take reasonable steps to notify you.