Privacy Policy
Last updated: October 2026 · Beta version
Who we are
MathStep is run by Quentin Smith in New Zealand. Quentin is our privacy officer. You can reach us at mathstepfeedback@gmail.com.
What we collect
From you, the parent:
- Your name, email address and password. Your password is stored by our login provider in a scrambled form that nobody can read back, including us.
- Your parent PIN, if you set one. We store it in scrambled form, with a count of wrong tries so we can pause the PIN after too many.
- Your email settings: whether daily reminders and the weekly summary are on, and the date we last sent each one.
- A second email address for the weekly summary, if you add one.
- Feedback you send through the app. We store your message with your name, your email address and the name of the child it is about, if you pick one.
About your child:
- A first name or nickname, which you give us.
- What they do when they practise: their answers, which questions they got right or wrong, any answers they fix afterwards, scores, time taken, their level, streak and points.
What we do not collect
- Payment details. MathStep is free during beta.
- Your child's full name, date of birth, school, photo or contact details.
- Advertising or tracking data. MathStep has no ads and no analytics tools, and does not follow you to other websites.
MathStep uses cookies only to keep you logged in and to remember student mode on your device.
Your child's information
MathStep is for children to use under a parent's account. We get your child's name from you, and we record their answers and progress when they practise. We do not ask your child for anything else. This page is how we tell you, as their parent, what we hold about them. You can see their progress at any time in Parent View.
How we use it
- To run MathStep: log you in, save your child's progress, choose their next level and show their results.
- To send the emails you can control. Daily reminders are off until you turn them on. The weekly summary is on by default and you can turn it off in your account or from the link in any weekly email. When your child is close to the last level, the weekly run also sends you a notice that new levels are needed.
- To answer feedback and fix problems.
We do not sell your information, share it with advertisers or use it for anything else.
If you add a second email address for the weekly summary, please tell that person. The stop link in a weekly email turns the summary off for the whole account.
Who else handles your information
We use four companies to run MathStep. They handle your information for us, to provide their service.
- Supabase holds the database and runs logins. Your data is stored in Sydney, Australia. Supabase also sends account emails, such as password resets.
- Vercelruns the website. MathStep's servers run in Sydney. Vercel is a United States company and keeps short technical logs, such as IP addresses and the pages requested.
- Resendsends our reminder and weekly emails. These emails include your child's first name and progress. Resend is a United States company, and it sends MathStep's emails through servers in Tokyo, Japan.
- Google holds any email you send to our contact address, in Gmail.
This means some of your information leaves New Zealand. The list above says where each company holds or sends it. We send each company only what it needs for its part.
Keeping it safe
Each family's records are locked to that family's login inside the database, so one parent cannot see another family's data. Passwords and PINs are stored scrambled.
How long we keep it
We keep your information while your account is open. If you ask us to delete your account, we delete it and all of your children's records within 14 days. We do not delete inactive accounts automatically. Our email providers keep delivery records for a short time under their own policies.
See, correct or delete your information
You can see your child's progress in Parent View. To get a copy of everything we hold about you or your child, to correct something, or to delete your account, email mathstepfeedback@gmail.com. There is no delete button in the app yet. We reply within 20 working days, as the Privacy Act 2020 requires.
If you are not happy with how we handle your information, you can complain to the Privacy Commissioner at privacy.org.nz.
Changes to this policy
We will update the date at the top of this page when this policy changes.
Contact
Questions? Email mathstepfeedback@gmail.com.