Privacy Policy

Last updated: October 11, 2026 | Effective: October 11, 2026

At Mathlite, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Mathlite mental math app. Please read this policy carefully to understand our practices regarding your personal data.

Data Controller

The data controller responsible for your personal data is:

Hakim Mohamed
Email: iabdelhakimmohamed@gmail.com

Information We Collect

We collect information that you provide directly to us when using the Mathlite app:

• Account Information: Your email address when you create an account or sign in
• Authentication Data: Information received from Apple or Google when you use Sign in with Apple or Sign in with Google (your email address, or a relay address if you choose to hide your email from Apple)
• Practice Data: The problems you answer, your answers, how long each answer took, whether you used a hint, your placement test score, the stars you earn, your level for each trick, your streak, and your best scores
• Settings: Your app language, your time zone (so your streak and daily goals follow your local day), and your reminder preferences
• Device Information: A device token for sending push notifications, if you allow notifications
• Technical Data: Our servers keep standard request logs, including IP addresses and request times, to keep the service secure and working

Mathlite does not collect your name, contacts, location, photos, or health data, and the app contains no advertising.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Create and manage your account, and send you sign-in codes by email
• Save your progress so it is the same on every device, and choose problems that match your level
• Work out your stars, streak, levels, and statistics
• Send you practice reminders and other app-related notifications, if you allow them
• Diagnose technical issues and improve app stability
• Improve our lessons, for example by seeing which problems are often answered wrongly
• Respond to your inquiries and support requests

Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide you with the Mathlite service, including account creation, lessons, practice, and saving your progress
• Consent: For sending push notifications. You can withdraw consent at any time in your device settings
• Legitimate Interests: For improving our lessons, ensuring security, and keeping the service working
• Legal Obligations: When we need to comply with applicable laws and regulations

Third-Party Services

We use the following third-party services that may process information:

• Sign in with Apple: If you choose to sign in with Apple, we receive your email address (or a relay email if you choose to hide your email) from Apple.Apple's Privacy Policy
• Sign in with Google: If you choose to sign in with Google, we receive your email address from Google.Google's Privacy Policy
• Firebase Authentication: We use Firebase, a Google service, to confirm your Apple or Google sign-in. Firebase receives the sign-in information from Apple or Google.Firebase Privacy Policy
• Amazon Web Services (AWS): We use AWS to host our servers and store your data securely, and Amazon Simple Email Service to send your sign-in codes.AWS Privacy Policy
• Apple App Store and Google Play: If you subscribe, Apple or Google processes your payment. We receive a confirmation of your subscription, never your payment details.

Data Sharing and Sale of Information

We do not sell your personal information to anyone.

We may share your information only in the following circumstances:

• With Service Providers: We share data with Apple, Google, and AWS as necessary to provide sign-in, data hosting, email delivery, and subscriptions
• For Legal Compliance: We may disclose information if required by law or in response to valid legal requests
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred

Data Storage and International Transfers

Your data is stored on secure servers located in the European Union (AWS EU region).

Some of our service providers (such as Google Firebase and Amazon Simple Email Service) may process data in the United States. When data is transferred outside the EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequate data protection laws
• Certification schemes such as the EU-US Data Privacy Framework

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Secure authentication: sign-in codes expire quickly, and no passwords are stored
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Data Portability: Request a copy of your data in a structured, machine-readable format
• Restriction: Request restriction of processing in certain circumstances
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw your consent at any time where we rely on consent to process your data

Right to Lodge a Complaint: If you are in the EEA, you have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights.

To exercise any of these rights, please contact us atiabdelhakimmohamed@gmail.com. We will respond to your request within 30 days.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about the categories and specific pieces of personal information we have collected about you
• Right to Delete: You can request deletion of your personal information, subject to certain exceptions
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights

Notice Regarding Sale of Personal Information: We do not sell personal information as defined by the CCPA. We have not sold personal information in the preceding 12 months.

To exercise your California privacy rights, contact us atiabdelhakimmohamed@gmail.com.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Backups of our database are kept for up to 30 days and are then deleted.

Account Deletion

You can delete your account and all associated data at any time:

• Open the Mathlite app
• Go to Profile
• Select "Help & support"
• Select "Delete account" and confirm your decision

You are signed out on every device straight away. If you sign in again within 30 days, your account is restored. After 30 days, your account and all your practice data are permanently removed.

Children's Privacy

Mathlite is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under the applicable age, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.

Tracking Technologies

Mobile App: We do not use advertising trackers, analytics SDKs, or sell data to advertisers.

Website: Our website does not use cookies for tracking or advertising purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page, updating the "Last updated" date, and where appropriate, notifying you via the app or email. We encourage you to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, our privacy practices, or wish to exercise your data protection rights, please contact us at:

Hakim Mohamed
iabdelhakimmohamed@gmail.com