Privacy for the mobile test builds
Updated 17 October 2026. This version is for testing by adults. A child-directed public release needs a completed privacy, authentication and parental-consent process.
Information used
The service stores the signed-in parent’s site identity, email, display name, trial and license state, learner nicknames, student usernames, salted password hashes (parent hashes also use a secret stored separately from the database), answers, progress, study time, daily quiz targets, target time zones and completion, settings and any learning content the parent imports. Prefer learner nicknames over full names.
Progress guidance
Charts and recommendations are calculated from saved quiz and practice results. The parent reviews suggestions and chooses whether to change difficulty or add timing. Recommendations do not change a learner’s plan automatically.
Trials and licenses
Each account receives one seven-day trial. License codes are stored as hashes. When you redeem a code, its ownership, redemption date and access duration are recorded for your account. Minimal hashed account and email references and original trial dates are kept after account deletion so a deleted account cannot restart its trial. Used codes remain consumed, with their account link removed. Deleting an account removes its license ownership and does not make its codes reusable.
Student accounts
Parents and teachers own the subscription and create student logins within its student limit. Students do not need an email address or ChatGPT account. Their sessions last up to seven days; only hashed session secrets are stored on the server. Sign-in attempts are rate-limited using hashed usernames and, when supplied by the hosting service, hashed network addresses. Password resets and archiving revoke student sessions. Archiving preserves learning history and frees a student place; deleting the parent account removes its student credentials and learning records.
Device connections
Parent / teacher sign-in happens in the device’s system browser using an email address and password. A recovery code allows a password reset; email password resets are not enabled in this pilot. Parent sessions last up to seven days. Session secrets and recovery codes are stored only as hashes. With your approval, the app gets a revocable 30-day connection to your MathMaster account. Only a hash of the device secret is stored on the server; Android protects its credential with Android Keystore. Parent controls require a PIN and close when the app moves to the background.
Permissions & audio
The app uses the internet. It has no advertising or analytics SDK, and requests no camera, microphone, contacts or location access. Optional read-aloud uses your device’s system text-to-speech service; that service may process spoken text under its own privacy settings.
Delete data or disconnect a device
Open Parents in the app or Devices & account data on the website. After entering your PIN, you can disconnect devices or permanently delete a non-owner MathMaster account and its learning records. Deleting these records does not immediately remove hosting-provider logs and backups. The site owner must arrange ownership or site closure separately.
Before public release
The operator’s legal name, support contact, retention periods, applicable consent process, and third-party disclosures must be finalized before public distribution to children. This page describes the current test implementation; it is not a completed public-release privacy policy. For this private testing phase, contact the site owner who invited you.