Privacy Policy

• About you (the parent): your email address (used for magic-link sign-in and account emails) and your billing history. Card details go straight to Stripe, our payment processor — we never see or store card numbers.
• About your child: the first name (or nickname) you enter, their year level, an avatar choice, and — only if you choose to fill it in — optional notes about interests and learning style. We recommend using a nickname and never need a surname, birthdate, school name, photo or address.
• Session data: the maths problems shown, what your child writes on the whiteboard, the coaching conversation, and short voice recordings when your child holds the talk button. Voice audio is sent for transcription and coaching, and the resulting transcript is kept so you can review every session in your dashboard.
• Technical data: sign-in cookies, an optional referral cookie if you arrived via an invite link, and anonymous page performance analytics (Vercel Analytics). We do not run advertising trackers and we do not sell data to anyone, ever.

• To run coaching sessions: the AI needs to see the problem, the whiteboard and what your child says in order to coach.
• To show you everything in the parent dashboard: session history, transcripts, progress and reports.
• To keep kids safe: sessions are monitored for content a trusted adult should know about, and we email you if something is flagged.
• To bill your subscription and send the emails you have opted into (like the weekly digest).
• To improve Mathey — using aggregate numbers (e.g. how often hints are needed), not by reading your child's sessions.

Mathey is built on third-party AI models. During a session, the problem, your child's whiteboard working, and their transcribed speech are sent to our AI providers (currently Anthropic for the coaching model, and ElevenLabs and Google Cloud for voice transcription and speech). These providers process the data to provide the service under agreements that prohibit them using it to train their models where such options are available to us. We send the minimum needed: providers receive the session content and your child's first name and interests if you provided them — never your email or billing details.

AI can make mistakes. That is a fact of the technology, not a fine-print excuse — see our Disclaimer. We recommend a parent stays nearby during sessions, especially for younger children.

• Supabase — our database and sign-in provider; all account and session data lives here.
• Vercel — hosts the website and provides anonymous performance analytics.
• Stripe — payments and subscriptions. Stripe keeps its own transaction records as required by financial law.
• Anthropic — the AI coaching model.
• ElevenLabs and Google Cloud — voice transcription and text-to-speech.
• Resend — sends our emails (sign-in links, safety alerts, digests you opt into).

Some of these providers store or process data outside Australia (typically in the United States). We choose providers with strong security practices, but you should know that cross-border processing happens.

Children never create accounts. A parent creates the account, enters the child's profile, and controls everything about it. Kids cannot chat freely with the AI — it is constrained to the maths problem in front of them — and everything a child writes or says in a session is visible to the parent in the dashboard. We collect the minimum about a child needed to coach them, and what is optional is clearly optional.

• Your data is kept while your account is active so your child's history and progress work.
• Whiteboard images and session conversation transcripts are kept for 30 days (so you can replay recent sessions in your dashboard), then automatically deleted. Progress records — which questions were practised, results and mastery — are kept so reports keep working.
• Removing a child hides them from the product but keeps their practice history and safety records under your account.
• Deleting your account (available self-serve in Settings) permanently erases your family's data — profiles, sessions, whiteboards, transcripts and progress — and we verify the wipe and email you a confirmation of what was deleted.
• Two things survive deletion: Stripe's own transaction records (financial-law requirement) and encrypted database backups, which expire automatically on their retention schedule.

Data is encrypted in transit and at rest. Access to your family's data is restricted by row-level security so one family can never see another's. Parent areas are separated from kid areas by your PIN. No system is perfectly secure, and we will notify you as required by law if a breach ever affects your data.

You can access everything we hold about your family directly in the dashboard, correct it there, or delete it entirely from Settings. Under the Australian Privacy Principles you may also request access or correction by email, and complain to us — and if we don't resolve it, to the Office of the Australian Information Commissioner (oaic.gov.au).

If we change this policy in a way that matters, we'll email account holders before the change takes effect. The date at the top always reflects the latest revision.