Privacy Policy

1. Information we collect

• Account information:your name, email address, and information you choose to add such as date of birth or age range. You sign in using a secure link sent to your email, so we don’t store a password.
• Subscription and billing information:your subscription tier, billing cycle, and a reference to your payment. We don’t store your full card details; these are held by our payment processor.
• Learning data:your progress through lessons, quiz answers, scores, areas of strength and weakness, and your interactions with the AI tutor (ChatCat), including the questions and messages you send. We never sell this data. Where we use it to improve the Service, we anonymise or aggregate it first.
• Communications:messages you send us through contact forms or email.
• Technical information:IP address, device type, browser type and version, operating system, approximate location (derived from IP), and pages you view. This is collected automatically when you use the Service.
• Cookies and similar technology:see Section 7.

2. Why we use this information, and our lawful basis

Under UK GDPR we have to tell you both why we use your information and our legal basis for doing so:

• To deliver the Service to you (account, lessons, AI tutor, progress tracking). Lawful basis: performance of our contract with you.
• To take payment for your subscription. Lawful basis: performance of our contract with you.
• To keep the Service secure, prevent fraud and abuse, and protect child users. Lawful basis: our legitimate interests in running a safe service, and compliance with our legal obligations.
• To respond to your messages and provide support. Lawful basis: our legitimate interest in supporting you.
• To improve the Service using aggregated, mostly de-identified analytics. Lawful basis: our legitimate interest in making the Service better.
• To send you marketing about Maths Angel. Lawful basis: your consent. We’ll only send marketing if you’ve opted in, and you can withdraw consent at any time.
• To comply with the law (for example, tax and accounting records, responding to lawful requests). Lawful basis: legal obligation.

3. Children and the ICO Children’s Code

Maths Angel is designed for learners aged 10–16. We follow the principles of the ICO’s Age Appropriate Design Code (the “Children’s Code”):

• We only collect information we need to provide the learning service.
• We don’t profile children for marketing.
• We don’t sell children’s data.
• Default privacy settings are set to a high standard.
• We design our features (including the AI tutor) to avoid uses of children’s information that could be detrimental to their wellbeing.

If you are a parent or guardian and want us to access, correct, or delete a child’s account or data, please contact us.

4. Who we share information with

We don’t sell your personal information. We share it only with service providers who help us deliver the Service, and only to the extent they need to do their job. These include:

• Payment processing:a regulated third-party payment provider handles your payment securely.
• Hosting and infrastructure:cloud providers host the Service and store data on our behalf.
• AI services:when you use ChatCat or other AI features, the content of your interaction is sent to a third-party AI service provider who generates the response. They process this strictly on our behalf under contractual safeguards. Your conversations are never used to train AI models and are never sold.
• Analytics:product analytics tools help us understand how the Service is being used and improve it.
• Email and communications:providers help us send transactional and (where you’ve opted in) marketing emails.

We may also share information if we’re legally required to (for example, by a court or regulator), or if it’s needed to protect the safety of our users, including children.

If we ever sell or restructure the business, your information may be transferred to the new owner. They’ll be required to honour this Privacy Policy.

5. International transfers

Some of our service providers are based outside the UK and the EEA, including in the United States. Where personal information is transferred internationally, we rely on appropriate safeguards required by UK GDPR, such as the UK Addendum to the EU Standard Contractual Clauses, the UK–US Data Bridge, or other approved transfer mechanisms.

6. How long we keep your information

• Account and learning data:while your account is active, and up to 12 months after you close it (so you can come back without losing progress).
• Payment and billing records:at least 6 years after your last transaction, to meet UK tax and accounting requirements.
• Support communications:up to 2 years after our last contact.
• Marketing preferences:until you withdraw consent, plus a short retention period to record the withdrawal.
• AI tutor (ChatCat) conversations:kept while needed to provide the service and improve safety. Longer-term storage, where it happens, is in anonymised or aggregated form.

When we no longer need your information, we delete it or anonymise it.

7. Cookies and similar technology

We use cookies and similar technology for essential functions (such as keeping you logged in), to remember your preferences, and to understand how the Service is used. Some cookies are set by third-party services we use (such as analytics). You can manage cookies through the cookie banner shown when you first visit the Service, and through your browser settings. See our Cookies Policy for more details.

8. Your rights under UK GDPR

You have the following rights about the personal information we hold about you. These are free of charge and we’ll respond within one month:

• Access:get a copy of the personal information we hold about you.
• Rectification:ask us to correct anything that’s inaccurate or incomplete.
• Erasure:ask us to delete your information (the “right to be forgotten”), where there’s no good reason for us to keep it.
• Restriction:ask us to limit how we use your information.
• Portability:ask us to give you a copy of certain information in a structured, commonly-used format.
• Object:object to our using your information based on legitimate interests, or for direct marketing.
• Withdraw consent:where we rely on your consent (for example, marketing), withdraw it at any time.
• Rights about automated decisions:we don’t make decisions about you using only automated processing that have legal or similar significant effects on you.

To exercise any of these rights, please contact us.

9. Complaints

If you’re not happy with how we’ve handled your personal information, we’d like to hear about it first so we can try to fix it. Please contact us.

You also have the right to complain to the UK Information Commissioner’s Office (ICO).

10. Security

We use technical and organisational measures to keep your information safe, including encryption in transit, secure password storage, access controls, and regular security reviews. No online service is ever 100% secure, but we work hard to protect your data and will notify you and the ICO promptly if a serious breach occurs.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes that affect your rights, we’ll let you know by email or a clear notice on the Service before they take effect. The “Last updated” date at the top of this page will always show the current version.

12. How to contact us

If you have any questions about this Privacy Policy or how we handle your personal information, please contact us.