Privacy Policy

Last updated: March 22, 2026

1. Overview

MathKix is a math learning platform for children in Grades 1-5. We take privacy seriously, especially when it comes to children's data. This policy explains what information we collect, how we use it, and how we protect it.

2. Information We Collect

From parents (account holders):

  • Name and email address (for account creation and communication)
  • Payment information (processed securely by Stripe; we never store card details)
  • Account preferences and settings

From child profiles:

  • First name (chosen by the parent)
  • School grade level
  • Learning preferences (pace, challenge preference, and attention span, as set by the parent)
  • Learning data: quiz answers, scores, mastery levels, lesson progress, XP, streaks, and achievements
  • AI tutor conversation history (messages exchanged with Ms. Owl during sessions)
  • Behavioral signals: response times, error patterns, and session duration (used to adapt difficulty in real time)

Automatically collected:

  • Basic device and browser information for compatibility
  • Usage patterns (pages visited, feature usage) for improving the Service

3. How We Use Information

  • Personalized learning: Adaptive question selection, difficulty adjustment, spaced repetition scheduling, and AI tutoring all rely on the child's learning data
  • Progress reporting: Parents can view detailed progress, mastery levels, and domain scores for each child
  • Service improvement: Aggregated, anonymized data helps us improve our curriculum, algorithms, and AI tutor quality
  • Communication: We use parent email addresses for account-related messages (billing, security, major updates)

4. Children's Privacy (COPPA Compliance)

We comply with the Children's Online Privacy Protection Act (COPPA):

  • Children cannot create their own accounts; only parents or guardians can create and manage child profiles
  • We collect only the minimum data necessary to provide personalized math learning
  • We do not collect personal contact information from children (no email, phone, or address)
  • Child data is never sold or shared with third parties for marketing purposes
  • Parents can review, modify, or delete their child's data at any time

5. AI Tutor and Data Processing

Our AI tutor (Ms. Owl) is powered by Anthropic's Claude. When a child interacts with Ms. Owl:

  • Conversation context (the current question, child's grade level, and recent chat history) is sent to Anthropic's API to generate responses
  • We do not send the child's full name to the API; only the first name entered by the parent is shared
  • Anthropic does not use this data to train their models (per their data usage policy)
  • Conversation history is stored to provide continuity within and across sessions; it is retained for as long as the child profile is active and deleted when the profile or account is removed

6. Data Sharing

We share data only with the following service providers, strictly for operating the Service:

  • Supabase: Database hosting and authentication
  • Stripe: Payment processing (parents only)
  • Anthropic: AI tutoring responses
  • PostHog: Product analytics (page views and feature usage; configured to collect only anonymized data unless the parent account is signed in)
  • Google Tag Manager: Tag management for analytics and performance monitoring on parent-facing and marketing pages
  • Vercel: Hosting and performance insights (anonymized)

We do not sell, rent, or share personal information with advertisers, data brokers, or any other third parties.

7. Data Retention

We retain account and learning data for as long as your account is active. If you delete your account, we will delete all associated data (including child profiles and learning history) within 30 days. Some anonymized, aggregated data may be retained for service improvement purposes.

8. Data Security

We use industry-standard security measures to protect your data:

  • All data is encrypted in transit (TLS/HTTPS)
  • Database access is restricted with row-level security policies
  • Authentication is handled by Supabase Auth with secure session management
  • Payment data is processed by Stripe (PCI DSS compliant); we never see or store card numbers

9. Parental Rights

As a parent or guardian, you have the right to:

  • Review all data collected about your child
  • Request correction of inaccurate information
  • Delete your child's profile and all associated data
  • Refuse further collection of your child's information (by deleting the profile or account)
  • Export your child's learning data

To exercise any of these rights, contact us at hello@mathkix.com.

10. Cookies

We use essential cookies for authentication and session management. We do not use advertising cookies. Our analytics providers (PostHog and Google Tag Manager) may set functional cookies to measure usage patterns on parent-facing and marketing pages. These tools are configured to minimize data collection and do not collect personal information from children. We do not use cookies for behavioral advertising.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact Us

For privacy-related questions or to exercise your parental rights, contact us at:

hello@mathkix.com