Mathbloom Privacy Policy
Mathbloom ("we", "us") makes personalized math courses for children, set up and managed by a parent, guardian, teacher, or tutor (the "account holder"). This policy explains what we collect, why, and the choices you have. It applies to the Mathbloom website (mathbloom.net) and the Mathbloom iOS app.
Who our accounts are for
Mathbloom accounts are created and controlled by adults. We direct our service to parents and educators, not to children. A child uses Mathbloom under an account holder's supervision; we do not ask children to create accounts or provide personal information.
Information we collect
- Account holder email. Used to create your account, sign you in (via a magic link or a one-time code), and send service messages such as "your course is ready."
- Course setup details. A learner's first name (or nickname), grade or course choice, and chosen interests, which we use to personalize lessons. We ask you to avoid entering a child's full name or any sensitive information.
- Learning content and progress. The courses generated for you and the answers and progress recorded as lessons are completed.
- Billing information. If you subscribe, payment is processed by Apple (in-app purchases) or Stripe (on the web). We never receive or store your full card number. We keep a billing identifier and subscription status to know whether your account is active.
- Basic technical data. Standard logs (such as IP address and request time) used to operate the service, prevent abuse, and meter free usage.
How we use information
- To create, personalize, and deliver courses and lessons.
- To sign you in and keep your account secure.
- To process subscriptions and provide customer support.
- To operate, debug, and protect the service from abuse.
We do not sell personal information, and we do not use it to show third-party advertising. We do not run third-party advertising SDKs in the iOS app.
How information is shared
We share information only with service providers that help us run Mathbloom, under contract and only as needed:
- Anthropic: generates course content from the setup details you provide.
- Apple and Stripe: process subscription payments.
- RevenueCat: validates Apple in-app purchases and tells our server whether a subscription is active.
- Resend: delivers sign-in and notification emails.
- Netlify: hosts the application and stores your data.
On the website we use Google Analytics to understand aggregate usage. We do not run Google Analytics or other third-party analytics in the iOS app.
Children's privacy (COPPA)
Mathbloom is intended to be set up and operated by an adult. We do not knowingly collect personal information directly from children under 13. Any information about a child (such as a first name or grade) is provided by the account holder for the purpose of personalizing lessons, and is used only to provide the service. An account holder can review, update, or delete this information at any time by editing the learner or deleting the account. If you believe a child has provided us information without an adult's involvement, contact us and we will delete it.
Your choices and rights
- Access and update your learners and account details in the app.
- Delete your account at any time from Account → Delete account. This cancels any subscription and permanently erases every course and all learning progress for the account.
- Manage your subscription in the app, or in iOS Settings → Subscriptions for Apple purchases.
Data retention
We keep account, course, and progress data while your account is active so you can return to your courses. When you delete your account we remove this data. Limited records may be retained where required for legal, tax, or fraud-prevention purposes.
Changes to this policy
We will update this page when our practices change and revise the "last updated" date above.
Contact
Questions or requests: hello@mathbloom.net.
This policy describes Mathbloom's actual data practices. Have it reviewed by legal counsel before public launch to confirm it meets your obligations in every jurisdiction you serve (e.g. COPPA, GDPR, CCPA).