Privacy Notice
Version: privacy-2026-10-05
Effective: To be completed Hank to supply launch date
Published at: https://mathoncue.com/privacy
DRAFT, in-house review, not legal advice. Items marked To be completed must be completed before publishing. Items marked To be completed implement describe behavior the code does not do yet.
Math on Cue is a math-facts practice service for families, run by Aithnography LLC, an Idaho limited liability company ("we", "us"). This notice explains what we collect from parents and visitors, how we use it, and your choices. Children's information is covered in our Children's Privacy Notice, which is part of this notice.
The short version:
- Only adults have accounts. Children practice under a nickname profile that a parent creates after giving consent.
- We collect what we need to run the service: your email, your family's settings, practice results and your subscription status.
- Voice answers are recognized on your device. We never receive or store recordings.
- We do not sell your information, show ads in the app, or use third-party advertising or analytics tools in the app.
- You can download or delete your family's data at any time.
1. Information we collect about parents
Account and sign-in
- Your email address. We send a 6-digit code to it each time you sign in; there are no passwords.
- Your confirmation that you are the child's parent or legal guardian, and the versions of the Terms and this notice you accepted, with the date.
- Your time zone, read from your device at signup, so a "practice day" matches your family's day.
- An optional 4-digit parent PIN that keeps children out of the parent area. We store only a scrambled (hashed) form.
- Sign-in records: when you signed in, whether on the web or the app, and when the session expires (30 days). Sign-in codes expire after 10 minutes.
Consent records
When you give or revoke consent for your children, we record the date, what you agreed to, the notice version and the method (an email link).
Subscription and payment
- Your plan, billing period, renewal date, status (evaluation, active, canceled, refunded) and the reference numbers that Stripe, Apple, Google or RevenueCat use for your subscription.
- A record of each charge and refund: amount, currency, date and provider reference.
- We never see or store your card number. You enter card details on Stripe's checkout page (website purchases) or in your Apple or Google account (app purchases). Stripe may also collect your billing address to calculate sales tax.
How you found us (marketing attribution)
If you arrive from a link with campaign tags (for example from one of our videos), we record the tags (source, medium, campaign, content), the page you landed on, the referring website's domain and a random visitor ID created on our website. When you sign up, we attach these to your account. That tells us which page, video or campaign led to the signup.
Website activity
On mathoncue.com we record a few events: page viewed, video started or finished, button clicked, pricing viewed, demo tried. Each event carries the page address, the random visitor ID and any campaign tags. These are first-party records stored by us. We do not use third-party analytics or advertising trackers. To be completed confirm how and for how long the visitor ID is stored in the browser once the marketing site is built; state it here.
Technical information
Our servers see your IP address with each request. We use it briefly to stop abuse (for example, too many sign-in attempts) and do not keep it in our database beyond about 30 minutes. Our hosting provider's access logs record each request's IP address, browser type, the page or API address requested (without the part after "?"), and the result; we keep them for 30 days for security and troubleshooting. If something goes wrong, our error logs record the page address and the error. None of these logs record what you typed, answers, names, or your child's speech.
Support
If you email us, we keep the message and our reply to help you. To be completed state where support email is kept and for how long.
2. Information about children
Please read the Children's Privacy Notice. In short: a nickname, a stock picture, the facts chosen, and practice results (answer as a number, right or wrong, time taken, and when). No real names, photos, birthdays, schools or contact details. No voice recordings.
3. How we use information
- To provide the service: sign-in, family profiles, practice, progress reports, the parent gate and consent.
- To run subscriptions: start the 7-day evaluation, process purchases, renewals, cancellations and refunds, and send required notices.
- To communicate with you: sign-in codes, consent emails, receipts and account notices. To be completed if a weekly progress email or any marketing email is added, describe it here and offer an unsubscribe link.
- To understand what works: count signups, consents, first practice, purchases and renewals by source or campaign, using our own records. Reports hide groups smaller than five families.
- To keep the service secure: rate limits, fraud and abuse prevention, debugging.
- To meet legal duties: tax and accounting records, responding to lawful requests.
We do not sell or rent personal information. We do not "share" it for cross-context behavioral advertising. We do not use it to train AI models. We do not send any information to advertising platforms. If we ever start measuring ad conversions for parents through an ad platform, we will update this notice first. Child data will never be included.
4. Who we share information with
We use these service providers to run Math on Cue:
| Provider | What they receive | Why |
|---|---|---|
| Amazon Web Services (AWS), United States (Oregon region) To be completed confirm at deployment | All of the information above, stored and processed for us | Hosting, database, backups, logs |
| Amazon SES (part of AWS) | Your email address and the email we send you | Delivering email |
| Stripe | Your email, a random household reference, the plan chosen; Stripe collects your payment details directly | Website payments, sales tax, subscription management |
| Apple, Google | Your purchase, through your store account | App-store payments and refunds |
| RevenueCat | A random household reference and app-store purchase information To be completed verify which device data the RevenueCat SDK collects and state it | Telling us whether an app-store subscription is active |
Stripe, Apple and Google also handle payment information under their own privacy policies, as independent businesses.
Videos on our website. Our marketing website shows founder videos from YouTube using YouTube's privacy-enhanced mode (youtube-nocookie.com). The video player loads only after you press Play. Once it does, Google receives your IP address and may store information on your device under Google's privacy policy. Videos never appear in the child practice app. We cannot promise that YouTube playback is ad-free or tracking-free.
We may also disclose information:
- if the law requires it or to respond to valid legal process;
- to protect the rights, safety or security of our users, children or the service;
- as part of a merger, acquisition or sale of the business, under a promise that this notice (including the children's protections) continues to apply. We will tell you before that happens.
5. Voice and the microphone
Voice practice uses your device's microphone only while a question is waiting for an answer. Speech is turned into words on the device. We receive only those words, turn them into a number, and keep the number. We never receive audio and do not keep the words. On devices that can't do this on the device, your child types instead. We do not currently offer cloud speech recognition. To be completed verify on each platform before publishing.
6. Cookies and similar technology
- Sign-in cookie (
__Host-moc_session, app website only): keeps you signed in for up to 30 days. Required for the service. - Random visitor ID (marketing website): see section 1. To be completed name the storage (cookie or local storage), its lifetime, and how to clear it, once built.
- YouTube: only after you press Play (section 4).
We do not use advertising cookies. To be completed if any non-essential cookie is added, add a choice banner on the marketing site.
7. How long we keep information
| Information | How long |
|---|---|
| Account, family settings, consent records, subscription status | Until you delete your family account. Children's profiles and practice history follow the Children's Privacy Notice (for example, deleted after 12 months with no practice and no plan, after at least 30 days' email notice) |
| Children's information | See the Children's Privacy Notice |
| Sign-in codes | 10 minutes, then removed automatically within days |
| Sign-in sessions | 30 days |
| Charge and refund records (amount, date, provider reference, household reference; no child information) | 7 years, for tax and accounting, then removed automatically |
| Website activity and signup/purchase milestones | 25 months, then removed automatically |
| IP addresses for abuse prevention | About 30 minutes |
| Error logs | 30 days |
| Access logs (IP address, browser type, address requested) | 30 days |
| Database backups | Up to 35 days, then they age out |
| Proof of a completed deletion (date and counts only, no personal information) | Kept |
Stripe, Apple, Google and RevenueCat keep their own records under their own policies.
8. Your choices and rights
In Parent space (unlock with your PIN or a fresh email code) you can:
- Download your data: a file with your account details, family settings, consent and subscription records, and each child's practice history.
- Correct your children's profiles, or delete a child's profile and history.
- Revoke consent for your children at any time.
- Delete your family account. We send a code to your email to confirm. Deletion signs out every device, cancels a website subscription immediately, and removes your account, children's profiles, practice history and consent records. You'll get an email receipt listing what remains and why (charge records for 7 years; provider records; backups up to 35 days). App-store subscriptions must be canceled in the App Store or Google Play; we cannot cancel them for you.
- Manage your plan: website plans through the Stripe customer portal; app-store plans in your store account.
You can also email us to make any of these requests. We will check that the request comes from the account's email address. We honor these requests for every family, wherever you live. You can make them without any penalty or difference in service, other than what the deletion itself requires. If you are not satisfied with our answer, contact us again and we will review it. To be completed confirm whether any state privacy law threshold applies to Aithnography; this draft does not assume one does.
9. Security
We use encrypted connections, scrambled (hashed) storage for sign-in codes, links and PINs, and access limits on our systems. Sign-in codes expire quickly, and repeated wrong attempts are blocked. No system is perfectly secure. If a breach affects your information, we will notify you as the law requires. To be completed confirm encryption at rest and TLS in infrastructure.
10. Children
Math on Cue accounts are for adults (18 or older) only. If we learn that a child created an account, we will delete it. Children's use under a parent's account is described in the Children's Privacy Notice.
11. Where we operate
Math on Cue is offered to families in the United States, and our servers are in the United States. To be completed decide whether to block or allow signups outside the US; if you allow them, this notice needs international sections.
12. Changes
When this notice changes, we update the version and date above. For material changes, we email account holders before the change takes effect. Changes affecting children's information also need your renewed consent.
13. Contact
Aithnography LLC
5501 N Armstrong Ave, Boise, ID 83704
(208) 314-0259
Email: To be completed proposed privacy@mathoncue.com
Support: https://mathoncue.com/support