App Privacy Policy

The Math Maker app is operated by Denella Ltd, a company registered in England and Wales. We are the data controller for the personal data described below.

Questions about this policy or your data: contactus@themathmaker.co.uk

The app is designed for children aged 6–11, but only a parent or guardian can hold an account. Children never sign in, never enter an email address, and are never asked for personal details.

• There is no advertising in the app, and no third-party advertising SDKs.
• We do not profile children for marketing, and we never sell data.
• We do not use behavioural tracking or third-party analytics.
• A child is identified only by a first name (or nickname — anything you like) and a school year group.

This reflects the ICO's Age Appropriate Design Code (the Children's Code): minimal data, high-privacy defaults, and the parent in control.

• Parent account: email address and an encrypted password. If you sign up, we store nothing else about you personally.
• Child profiles: the first name or nickname you enter, the school year group, the chosen world, and accessibility preferences (large text, dyslexia-friendly font, reduced motion, goal mode). No date of birth, no photographs, no contact details, no location.
• Learning activity: the questions served, the answers given, whether each was correct, time taken, hints used, and the resulting progress against National Curriculum objectives — this is what makes the practice adapt.
• Rewards data: stars earned and spent, collectibles owned, streaks, and any real-world rewards a parent sets up.
• Subscription data: your subscription status, trial end date, and an identifier from RevenueCat, our subscription manager. We never see or store your card details — payment is handled entirely by Google Play or the Apple App Store.
• Parent PIN: if you set a PIN to lock the parent area, we store a one-way hash of it, never the digits themselves. The PIN is a child-deterrent lock, not a security credential for your account.
• App events: a small number of first-party technical events (for example, whether the app could reach the subscription service, and how long it took) so we can diagnose faults. These are tied to your family account, not to any advertising identifier.

• To build each child's daily practice from what they personally find hardest
• To show parents an accurate picture of progress against the curriculum
• To run stars, streaks, collectibles and parent-set rewards
• To manage your free trial and subscription
• To send essential account emails, such as email confirmation and password resets
• To find and fix faults in the app

We do not use your data for advertising, we do not sell it, and we do not share it for anyone else's marketing.

• Contract: providing the service you signed up for, including the adaptive practice and subscription management.
• Legitimate interests: keeping the app secure, diagnosing faults, and improving how well the teaching works.
• Consent: any optional emails, which you can withdraw at any time.

Where children's data is processed, it is provided by the parent or guardian who holds the account and who exercises these rights on the child's behalf.

We use a small number of processors, each contractually bound to protect your data:

• Supabase — database, authentication and file storage (privacy policy)
• RevenueCat — subscription and entitlement management (privacy policy)
• Google Play and the Apple App Store — payment processing and subscription billing, under their own privacy policies

Some of these providers operate outside the UK. Where personal data is transferred internationally, it is protected by appropriate safeguards such as the UK International Data Transfer Addendum or Standard Contractual Clauses.

We keep your family's data for as long as your account exists. If you delete your account, everything associated with it — parent account, child profiles, learning history, rewards — is permanently deleted within 30 days.

Records of purchases may be retained for up to 7 years where we are legally required to do so for tax purposes.

You can ask us to delete your account and all associated data at any time by emailing contactus@themathmaker.co.uk from the address you signed up with. We will confirm and complete deletion within 30 days.

Deleting a single child's profile in the app removes that child's name, progress and rewards immediately.

Cancelling a subscription is handled in your Google Play or Apple account settings and is separate from deleting your data.

Under UK GDPR you have the right to:

• Access the data we hold about your family
• Correct anything inaccurate
• Delete your data
• Restrict or object to how we process it
• Portability — receive your data in a structured format
• Withdraw consent where processing relies on it

Email contactus@themathmaker.co.uk and we will respond within 30 days. You may also complain to the Information Commissioner's Office.

Passwords are hashed and never stored in readable form. All traffic between the app and our servers is encrypted with HTTPS, and data is encrypted at rest. Access to each family's data is enforced at the database level, so one account can never read another's.

If we make significant changes we will update the date at the top of this page and, where the change is material, notify you by email.

Denella Ltd
Email: contactus@themathmaker.co.uk
Support: themathmaker.co.uk/app/support