Privacy Policy

1) Scope

This Privacy Policy applies to the AI Homework Tutor Android app and web/PC browser experience, plus our related websites (including math-kids.club) and customer support channels.

2) Data we collect

A) Data you provide

Account data

• Email address (required for login).

Homework content (processed, not stored)

• Text you type or paste
• Images you upload (e.g., worksheets)
• Voice input (if you use voice features)

Support communications (only if you contact us)

If you contact support, we receive the content you send (and any attachments) so we can help you.

B) Data collected automatically (minimal)

We collect limited technical data needed to operate securely and reliably:

• Session/authentication data (e.g., sessions/identifiers required to keep you logged in)
• Security and abuse-prevention signals (e.g., to detect fraud or automated misuse)
• Reliability data (e.g., error logs and crash reports)

We do not collect precise GPS location.

C) Purchases and credits

• Android: Credit purchases are handled by Google Play / Google Play Billing. We receive purchase confirmation details (such as an order ID or purchase credit record) so we can add credits. We do not receive your full payment card details.
• Web/PC (if available): If you buy credits on the web, payments are processed by a payment provider (e.g., Stripe or PayPal). We store only transaction metadata needed for accounting and customer support (e.g., amount, time, internal receipt reference), not full card numbers.

3) How we use data

We use data only to:

• Provide the service (login and deliver AI tutoring responses)
• Generate responses based on submitted homework content (processed temporarily, not stored)
• Manage tokens and purchases (credit tokens, prevent duplicate credits, resolve purchase issues)
• Protect the service (security, fraud prevention, abuse detection)
• Provide support (only when you contact us)
• Maintain reliability (debugging, crash fixing, performance monitoring)

We do not use your personal data for targeted advertising.

4) Legal bases (EEA/UK – GDPR)

Where GDPR applies, we process personal data under:

• Contract: to provide the service and deliver purchased tokens/features
• Legitimate interests: to secure the service, prevent abuse, and maintain reliability
• Consent: only where required for optional features (if applicable)

We aim to follow GDPR principles including data minimization, purpose limitation, and security by design.

5) Children and family use

The service may be used by children. We are designed to minimize data collection and avoid storing homework images and voice audio.

• Italy/EU: Italy’s digital consent age is 14. If a feature requires consent-based processing, parental/guardian consent may be required for users under 14.
• United States (COPPA): If we have actual knowledge that we are collecting personal information from a child under 13 in a way that requires verifiable parental consent, we will take appropriate steps to comply.

Parent/guardian requests: A parent/guardian can contact us to request access or deletion for a child’s account (see Section 14).

6) Sharing and service providers (processors)

We share data only as needed to run the service:

• AI processing providers: We send submitted homework content (text/images/voice) to AI services to generate responses. Homework images and voice audio are not stored by us and are processed only as needed to generate the response.
• Infrastructure hosting (EU/EEA): We use EU/EEA-based servers to run the service, store login email addresses, and maintain credit balances.
• Payments: Google Play / Google Play Billing for Android purchases, and a web payment provider (if applicable).
• Legal and safety: We may disclose information if required by law, or to protect users, our service, or our rights.

We require service providers to protect data and use it only to provide services to us.

7) Data location and international transfers

Our primary servers and databases are located in the EU/EEA.

If any service provider processes data outside the EU/EEA (for example, some AI or analytics services), we use appropriate safeguards required by GDPR, such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

8) Data retention

We keep data only as long as necessary:

• Email address and account records (e.g., credit balance): retained while your account is active. Deleted upon request, subject to legal obligations.
• Homework images and voice audio: not stored (processed temporarily in memory and discarded).
• Support messages: retained only as long as needed to resolve your request.
• Purchase records: retained as required for accounting/tax and handling disputes.
• Security/reliability logs: retained for a limited period, then deleted or anonymized.

9) Security

We use reasonable technical and organizational measures to protect data (encryption in transit, access controls, monitoring). No system is 100% secure.

10) Cookies and similar technologies (web)

If you use the web app, we may use:

• Essential cookies/local storage for login, session management, and security.

We do not use cookies for targeted advertising.

11) Your rights

Depending on your location, you may have rights to:

• Access, correct, or delete personal data
• Object to or restrict processing
• Data portability
• Withdraw consent (where applicable)
• Lodge a complaint with a data protection authority

To exercise rights, contact us (see Section 14). We may need to verify your identity.

12) No sale of personal data / no targeted advertising

We do not sell, rent, or share personal information for marketing/advertising purposes. We do not display ads and we do not use personal data for targeted advertising.

13) Changes to this policy

We may update this policy. We will post the latest version and update the effective date. Material changes may be communicated in-app or by email.

14) Contact

Data Controller: Math-Kids.Club
Address: Child Overseas Building, Hong Kong
Privacy email: admin@math-kids.club