Maths Rocket is a learning tool, not a data product. Your child's progress belongs to you, and you can delete your account and its data at any time from the Parent Area. This policy explains what we collect, why, where it is kept, who helps us run the service, how long we keep it and what your rights are. It covers the Maths Rocket app (web, Android and iOS) and this website.
1. Who we are
Maths Rocket is provided by SMT NEXT, the data controller for the personal data described in this policy. For any privacy question or request, email support@mathsrocket.com.
2. Our promises in brief
- Progress (and common mistakes) syncs to your parent account.
- Max's AI (Anthropic's Claude, on Amazon Web Services in Europe) never gets names or emails, and never learns from your child's messages.
- Your family's data is stored with Amazon Web Services in London (UK).
- No ads, no trackers.
- Voice input is optional; no camera or location.
- Parent accounts and optional PIN protection.
3. What we collect
Playing without an account
A child who taps Play now types a first name and taps their age, so their buddy can say hello. These stay on the device: nothing is sent to us unless a grown-up creates an account.
Local progress and account backup
Your child's progress is stored on the device. With a parent account, each child's profile and progress record sync to our server (scores, topics, and the kinds of mistakes they tend to make) so your other devices and reports show the same. Device settings (audio, calm mode, reminders) stay on the device. The parent PIN is kept on the device and, scrambled, on your account, so it can confirm a grown-up's yes to Friends rooms.
Parent account details
If you create a parent account, we store your email, name and subscription status on our server to run sign-in and billing. Sign-in is run by Amazon Cognito. Payments are handled by Stripe on the web and by Google Play or Apple in the mobile apps: we never see card numbers. We use your email address for sign-in, for messages about your account and subscription, and for the weekly parent report, which you can switch off in the Parent Area.
AI tutor messages
When your child asks Max for help on an AI plan, that chat message and the current question go to our server and on to our AI provider to write a hint: Anthropic's Claude, run on Amazon Web Services in Europe. Messages are not used to train AI. Before the AI sees a message, we remove personal details your child types: emails, phone numbers and full names. We do not attach profile names to tutor requests. Tutor messages are not used for advertising.
Usage counts
No advertising or advertising trackers. We keep first-party activity counts for reports, and counters of AI tutor use so each plan's fair-use allowance can be applied. Optional pilot sharing adds completion and delayed-check results; it is off by default and parents control it per child.
Optional voice input
No camera or location is needed. On supported browsers, tapping the microphone asks permission to transcribe speech; the browser may use its own speech service. You can type instead.
Notifications
If you allow notifications on a device, we keep that device's notification token with your account so reminders can be delivered. It is deleted with your account.
Friends rooms (where available)
Off by default for every child. A grown-up switches them on in the Parent Area and approves each new friend. In a room, the other children see only a first name, avatar and stars; there is no chat, and links carry only the room code. A room's questions and taps are deleted a day after it ends, the room itself after 30 days.
Access log
We keep a log of who viewed or changed a child's class or Friends data (for example, a teacher opening a class dashboard, or a grown-up approving a friend), so you can see who looked. It contains the action, who did it and when.
Crash reports (mobile apps)
If the mobile app crashes, a stack trace and the device model are sent to our crash-reporting service, Sentry. No user or child details are attached, and there is no performance tracing or session replay.
4. How we use it, and our lawful bases
| Purpose | Data | Lawful basis (UK GDPR) |
|---|---|---|
| Running your account, syncing progress, reports | Parent account details, child profiles and progress | Contract (providing the service you asked for) |
| Billing and subscriptions | Email, subscription status, store or Stripe references | Contract; legal obligation for financial records |
| AI tutor replies | Chat message (personal details removed) and the current question | Contract (only on an AI plan you chose) |
| Fair-use limits, security, the access log | Usage counters, access log entries | Legitimate interests (keeping the service safe and affordable) |
| Optional pilot sharing | Completion and delayed-check results | Consent (off by default, per child, can be turned off at any time) |
| Weekly parent report email | Email, children's synced progress | Contract; you can switch it off in the Parent Area |
We do not sell personal data, we do not use it for advertising, and we do not build marketing profiles of children.
5. Who helps us run the service
We use a small number of service providers who process data on our behalf, under contract, only to run Maths Rocket:
- Amazon Web Services: hosting, storage and Amazon Cognito sign-in, in London (UK).
- Anthropic's Claude, run on Amazon Web Services (Amazon Bedrock) in Europe: writing AI tutor replies on AI plans.
- Stripe: card payments and subscriptions on the web.
- Google Play and Apple: in-app subscriptions in the mobile apps, with RevenueCat confirming which plan a store purchase gives your account.
- Sentry: crash reports from the mobile apps, without user or child details.
- An email delivery service, to send account emails and the weekly parent report.
Stripe, Google and Apple also act as controllers for the payment records they hold, under their own privacy policies.
6. Where your data is stored
Everything we keep is stored with Amazon Web Services in London (UK). AI tutor requests are processed by Anthropic's Claude on Amazon Web Services in Europe; messages are not used to train AI. Where a provider processes data outside the UK, we rely on UK adequacy regulations or appropriate safeguards such as the UK International Data Transfer Addendum.
7. How long we keep it
| Data | How long |
|---|---|
| Parent account, child profiles and progress | Until you delete the child or the account |
| Usage counters (activity and AI use) | About 13 months, then deleted automatically |
| Access log (who viewed a child's class or Friends data) | 12 months, then deleted automatically |
| Friends rooms | A room's questions and taps a day after it ends; the room itself after 30 days |
| Previous copies kept by our storage's version history | Deleted automatically within 7 days of a change or deletion |
| Data on your device (progress, settings, guest name and age) | On the device until you remove the app or clear its site data |
| Payment records held by Stripe, Google or Apple | Under their own policies |
8. Children's data
Maths Rocket is used by children in Years 1–6, but accounts are created and managed by parents. We follow the UK GDPR and the ICO's Age Appropriate Design Code (the Children's Code):
- We collect only what the learning needs: a first name, school year or age, avatar and progress. No camera or location; voice input is optional.
- Settings are high-privacy by default: optional pilot sharing and Friends rooms are off until a parent turns them on.
- No advertising, no advertising trackers, no profiling for marketing, and no manipulative design.
- Personal details are removed from tutor messages before the AI sees them, and profile names are never attached.
- The grown-up area, the plans and any Friends rooms yes are protected by the parent PIN.
- The access log makes it visible who looked at a child's class data.
9. Safeguarding by design
- You control audio. Sound effects and narration can be changed in the Parent Area. Calm mode reduces reward effects.
- No shaming for wrong answers. Mistakes are framed as learning, never punished.
- No dark patterns. No manipulative streak pressure or nagging.
- Parent access. Parent accounts manage payments and reports. The grown-up area, the plans and a Friends rooms yes all ask for the parent PIN.
10. Your rights
Under the UK GDPR you have the right to:
- access the personal data we hold about you and your children;
- correct data that is wrong;
- delete your account and data (see below);
- object to or restrict some processing, and withdraw consent to optional pilot sharing at any time;
- data portability for data you gave us.
You can do much of this yourself in the app: Account → Download my data gives you a copy of your account's and your children's data as a file (JSON), and Account → Manage account lets you change your email, password and grown-up PIN.
To use any of these rights, email support@mathsrocket.com from your account's email address. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk).
11. Deleting your account
You can delete your account and all its server data at any time in the app: Parent area → enter your PIN → Account → Delete account… → Yes, permanently delete. It takes effect immediately and includes your sign-in. You can also email us. Full details of what is deleted and what is kept are on the delete your account page.
12. This website
This website sets no cookies and uses no analytics or trackers. Pages are delivered by Amazon Web Services (CloudFront), which processes your IP address to send them to you. The text font, Nunito, is loaded from Google Fonts, which receives your IP address when it sends the font file.
13. Changes to this policy
If we change this policy, we will update the date at the top of this page and, for significant changes, tell parents by email or in the app.