← Back to My Math Roots

Privacy Policy

Effective date: April 1, 2026  ·  Last updated: April 1, 2026

My Math Roots is designed for children in Kindergarten through 5th Grade. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA). A parent or guardian must provide consent before any personal information is collected.

This Privacy Notice for My Math Roots ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you use our web application at mymathroots.com.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you disagree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at akeemjones93@gmail.com.

Summary of Key Points

This summary provides key points from our privacy notice, but you can find out more details about any of these topics in the full sections below.

1. What Information Do We Collect?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal information we collect may include:

Sensitive Information: We do not process sensitive information.

Application Data

If you use our application, we also collect the following:

We do not collect persistent device identifiers, advertising IDs, or mobile device hardware IDs. This is by design for COPPA compliance. We do collect standard server-side log data such as IP address and browser type for security and service operation purposes.

Information automatically collected

In Short: Some technical information is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser type, operating system, language preferences, and information about how and when you use our Services. This is primarily needed to maintain the security and operation of our Services.

We do not collect:

Google API: Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How Do We Process Your Information?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

We process your personal information for the following reasons:

3. When and With Whom Do We Share Your Personal Information?

In Short: We may share information in specific situations described in this section.

We do not sell personal information to third parties. We do not use personal information for advertising. We may need to share your personal information in the following situations:

4. Do We Use Cookies and Other Tracking Technologies?

In Short: We use browser localStorage to save your child's progress and preferences. We do not use advertising cookies.

We use browser localStorage (not cookies) to save your child's learning progress, preferences, and your Remember Me login preference. This data stays on your device and is not transmitted to advertisers. Email addresses stored locally are encrypted using AES-256-GCM with a device-specific key.

We do not use advertising cookies, third-party tracking pixels, or behavioral analytics tools. Our service provider Supabase may set technical session cookies required for authentication.

You can clear all locally stored app data at any time through your browser settings (Settings → Privacy → Clear browsing data → Cookies and site data).

5. Do We Offer Artificial Intelligence-Based Products?

In Short: We offer AI-powered features via Google Gemini. See Section 11 for full details.

As part of our Services, we offer features powered by Google's Gemini AI, including on-demand quiz hints and parent progress reports. These features transmit limited, relevant data to Google's API via a secure server-side proxy. See Section 11 — AI-Powered Features for full details.

6. How Long Do We Keep Your Information?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this notice or as required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

See Section 13 — Data Retention for our specific retention periods.

7. How Do We Keep Your Information Safe?

In Short: We aim to protect your personal information through organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process, including:

However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security. You access and use the Services at your own risk.

8. What Are Your Privacy Rights?

In Short: You may review, change, or terminate your account at any time.

As a parent or guardian, you have the following rights:

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. We may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, and comply with legal requirements.

If you have questions or comments about your privacy rights, you may email us at akeemjones93@gmail.com.

9. Controls for Do-Not-Track Features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Notice.

10. Do United States Residents Have Specific Privacy Rights?

In Short: If you are a US resident, you may have the right to access, correct, or delete your personal information.

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

Categories of Personal Information We Collect

The table below shows the categories of personal information we have collected in the past twelve (12) months. The table includes illustrative examples of each category.

Category Examples Collected
A. Identifiers Contact details such as real name, alias, email address, and online identifier YES
B. Personal information (CA Customer Records statute) Name and contact information YES
C. Protected classification characteristics Gender, age, date of birth, race and ethnicity, national origin, marital status NO
D. Commercial information Transaction information, purchase history, financial details, payment information NO
E. Biometric information Fingerprints and voiceprints NO
F. Internet or other similar network activity Browsing history, search history, online behavior, interactions with third-party sites NO
G. Geolocation data Device location NO
H. Audio, electronic, sensory, or similar information Images and audio, video or call recordings NO
I. Professional or employment-related information Business contact details, job title, work history NO
J. Education information Grade level, quiz scores, learning progress records YES
K. Inferences drawn from collected personal information Inferences drawn to create a profile about preferences or behavior NO
L. Sensitive personal information NO

We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information in the future without providing you with notice.

California Residents — Your Specific Privacy Rights

California Civil Code Section 1798.83 permits users who are California residents to request information regarding our disclosure of personal information to third parties for direct marketing. As noted above, we do not share personal information with third parties for direct marketing purposes.

Exercising Your Rights

To exercise your rights, submit a verifiable consumer request to us at akeemjones93@gmail.com. We will respond within 45 days. If we decline your request, you may appeal our decision by emailing us at akeemjones93@gmail.com.

11. AI-Powered Features (Google Gemini)

My Math Roots uses Google's Gemini AI to power two in-app features: on-demand hints and explanations during quizzes, and parent progress reports. When a parent requests a progress report, or when a child requests a hint, relevant data is transmitted to Google's Gemini API via a secure server-side proxy.

For hints, this includes the quiz question text, the child's answer, and the correct answer. For progress reports, this includes the child's display name, quiz scores, unit performance, mastery data, app usage time, and streak information. This data is used solely to generate the requested content and is not retained by Google beyond the API request. My Math Roots does not store AI-generated responses on our servers.

12. Push Notifications

If you opt in to push notifications, your browser generates a unique push subscription token (consisting of an endpoint URL and encryption keys). This token is stored in our database linked to your account and is used solely to deliver streak reminders and other app notifications you have requested. You can withdraw consent and delete your push subscription at any time through your device or browser notification settings. Stale or expired subscriptions are automatically removed from our database.

13. Data Retention

We retain account data, including learning progress, quiz scores, and mastery records, for as long as your account remains active. Lead contact information submitted through the app's save-progress prompt is retained until you request deletion. If you delete your account or submit a deletion request to akeemjones93@gmail.com, we will remove your personal data from our systems within 30 days. Anonymized, aggregate usage data that cannot be linked to any individual may be retained indefinitely for product improvement purposes.

14. Do We Make Updates to This Notice?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

15. How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us at akeemjones93@gmail.com or contact us by post at:

My Math Roots
[Business address — add before launch]

16. How Can You Review, Update, or Delete the Data We Collect From You?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please email akeemjones93@gmail.com. We will respond to your request within 30 days.

You can also delete your browser's locally stored app data at any time by clearing site data in your browser settings (Settings → Privacy → Clear browsing data → Cookies and site data).


This privacy notice was last reviewed on April 1, 2026  ·  My Math Roots