Last updated 1 August 2026.
MathIQO is used by children, so this policy is written to be read by the parents and teachers responsible for them. It describes what we actually store and who we send it to. Where something is deliberately not collected, we say so.
MathIQO is operated by [ TO CONFIRM: registered legal entity name ], at [ TO CONFIRM: registered postal address ]. For any question about this policy or about data held on a child, contact [ TO CONFIRM: privacy contact email address ].
An email address and a password, or a Google account if you choose to sign in with Google. A display name. For teachers, the school or classroom you belong to. Passwords are never stored in readable form.
A first name or nickname, chosen by the adult who adds them, and a grade level. That is the whole of it.
We do not collect a child's email address, and there is nowhere to enter one. Children do not have passwords either. A child signs in with a family or class code plus a short secret word. The secret word is stored only as a salted hash — it cannot be read back by us or by anyone with access to the database, which is why a forgotten one has to be reissued rather than looked up.
The questions a child answers, whether each answer was right, and the skill each question belongs to. This is what produces the progress a parent or teacher sees. It is the reason the product exists and it is not shared outside the child's own parents, their teacher, and their school if they have one.
We do not run behavioural analytics, advertising, or third-party tracking. There are no advertising cookies and no ad networks. We do not sell personal information, and we do not share it for anyone else's marketing.
Every cookie MathIQO sets is functional — it keeps you signed in or remembers a choice you made. There are no analytics or advertising cookies.
mm_region, mm_lang — the region and language you are viewing.mm_active_child — which child a parent is currently looking at.mm_kid_code, mm_kid_device — the class-code sign-in flow, and remembering a family's shared device.mm_oauth_role, mm_gc_state, mm_resend — short-lived cookies protecting sign-up, Google Classroom connection, and email resend against cross-site request forgery.A teacher may connect Google Classroom to import a class roster instead of typing names. This is optional, initiated by the teacher, and never touches parent or child accounts.
We request two read-only scopes: the list of courses you teach, and the roster of students in a course you choose. We do not request the scope that returns student email addresses, because the import needs names and nothing in MathIQO reads a school email address. We cannot create, modify, or delete anything in Google Classroom.
MathIQO's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Roster data is used only to create the student records the teacher asked for. It is not transferred to anyone else, not used for advertising, and not read by humans except where required for security or to comply with the law. A teacher can disconnect at any time in their Google account.
If you use MathIQO outside Canada, your data is transferred to and stored in Canada.
Accounts and practice history are kept while the account is active. On deletion we remove the account and the practice history attached to it within [ TO CONFIRM: deletion window, e.g. 30 days ], except where we must keep something to comply with the law. Backups are retained for [ TO CONFIRM: backup retention period ].
You can ask for a copy of the personal information we hold, ask us to correct it, or ask us to delete it. A parent may exercise these rights on behalf of their child, and a school may do so for records it controls. Write to [ TO CONFIRM: privacy contact email address ] and we will respond within [ TO CONFIRM: response window, e.g. 30 days ].
Parents in Canada may also complain to the Office of the Privacy Commissioner of Canada. Where provincial law applies — Quebec's Law 25, for example — those rights apply in addition to the ones above.
Where a school creates classrooms and student records, the school controls those records and MathIQO processes them on the school's instructions. Schools should tell families that they use MathIQO. [ TO CONFIRM: whether a signed data-processing agreement is offered to schools ]
If this policy changes in a way that affects what we collect or who we send it to, we will say so here and update the date at the top.
See also our Terms of Service.