Privacy Policy
Last updated: 3 July 2026
LittleMathematicians is made for children aged 8–10, so we hold ourselves to the strictest rules — COPPA (US), GDPR-K (EU) and equivalent laws — by design, wherever you live. This page explains, in plain language, exactly what we collect and why. If anything is unclear, email us at privacy@littlemathematicians.app.
🦉 The short version, for kids
- Your grown-up makes your profile — you never need an email or password.
- We only remember your nickname, your class, your avatar, and how you play.
- We never show you ads, and we never let strangers talk to you here.
- If your grown-up asks us to delete your profile, we delete everything.
What we collect about you (the parent)
- Email address — to identify your account, verify it, reset your password, and confirm deletions.
- Password — stored only as a cryptographic hash; we cannot read it.
- Timezone— so practice streaks roll over at your child's midnight, not ours.
- Security logs (sign-in events, IP address, coarse browser info) — kept for 90 days to protect your account, then purged.
What we collect about your child
Child profiles are deliberately pseudonymous — they belong to your account and carry no direct identifiers:
- Nickname — entered by you, and checked to block emails, links and full-name patterns.
- Class (3–5) and avatar choice — to show the right content.
- Learning data — answers, practice sessions, mastery per topic, mock results, XP, streaks and badges. This is the product itself, and it is keyed to a random profile ID, not to a person.
We never collect from or about children: real or full name, email, phone number, birthdate, photos, precise location, contacts, voice, free-text input, or advertising identifiers. There is nowhere in the child experience to type free text at all.
We also collect no payment data (there is nothing to pay for during early access), no precise geolocation, no biometrics, and no third-party advertising or tracking identifiers — from anyone.
How consent works
You — the parent — create the account, verify your email, and create every child profile. A child cannot sign up, sign in, or enter any data on their own; no child credentials exist. That means verifiable parental consent always comes before any child data is collected. If we ever materially change what we collect, we will email you and ask you to re-consent before your child continues.
Your rights: see, fix, export, delete
- See— your dashboard shows all of your child's data.
- Fix — nickname, class and avatar are editable any time.
- Export — email us for a JSON export of your data.
- Delete — delete a child profile or your whole account in the app: the data is hidden immediately, permanently deleted within 24 hours, and you receive an email confirmation. Nightly backups may retain deleted data for up to 7 days; backups are restore-only, and any restore re-applies deletions first.
Requests to privacy@littlemathematicians.app are answered within 30 days — usually within 7.
Who helps us run the service
A small set of infrastructure providers process data on our instructions, under data processing agreements, with encryption in transit: our database host (all data above), our cache host (short-lived tokens and counters — never child content), our cloud/CDN provider (question images only — no user data), our email delivery provider (your email address for verification and reset messages), our error-monitoring service (crash reports scrubbed of user identifiers), and our web host (serves the site, stores no user data).
We do not sell data. There are no advertising networks and no third-party analytics SDKs anywhere in LittleMathematicians.
Cookies
The web app sets exactly one cookie: a strictly-necessary, httpOnly sign-in cookie that keeps you logged in. There are no analytics or marketing cookies — which is why you don't see a cookie banner.
Changes to this policy
If this policy changes in any way that matters, we will email every parent before the change takes effect and ask for fresh consent where the law requires it.