MathsFamily Privacy Policy
Effective Date: 13 July 2026 Last Updated: 13 July 2026
MathsFamily.com (“MathsFamily,” “we,” “us,” or “our”) provides free maths learning resources, quizzes, and tools that help parents and teachers support the maths learning of their children and students. We take data protection seriously and have written this Policy to comply with the General Data Protection Regulation (GDPR), the GDPR provisions specific to children (“GDPR-K”), and the U.S. Children’s Online Privacy Protection Act (COPPA).
This Policy explains what information we collect, how we use it, who we share it with, and the rights available to you. By using our website (the “Service”), you agree to the practices described here. If you do not agree, please do not use the Service.
1. Who This Policy Covers
MathsFamily is built for use by parents, teachers, and legal guardians who wish to help the children and students in their care learn maths. Our learning resources are freely accessible to all. Creating an account to track a child’s progress, however, is restricted to parents and legal guardians only — see Section 4 for details.
2. Who We Are / Controller Information
MathsFamily.com is operated as a data controller for the purposes of the GDPR. Our Service is deployed and hosted for users in the European Union.
- Controller: MathsFamily.com
- Contact email: info@mathsfamily.com
- Data Protection queries: info@mathsfamily.com (subject line: “Privacy Request”)
3. Information We Collect
We collect the minimum information necessary to operate the Service.
| Category | What it includes | Source | Purpose |
|---|---|---|---|
| Account information | Name and email address associated with a Google account | Google Login (OAuth), provided by the registering adult | Creating and securing the account |
| Progress data | Quiz scores, completed lessons, activity timestamps | Generated by use of the Service under the adult’s account | Tracking learning progress, generating reports for the parent/guardian |
| Technical data | IP address (anonymized), browser type, device type, pages visited | Automatically, via cookies/analytics | Site security, performance, analytics |
| Communications | Emails or messages you send us | Provided voluntarily | Responding to support and privacy requests |
We do not knowingly collect personal information directly from children, and we do not require or request a child’s name, email address, or any other personal identifier to use the learning content.
4. Account Registration — Minimum Age 16
You must be at least 16 years old to create an account on MathsFamily.com. If you are under 16, a parent or legal guardian must register and manage the account on your behalf. Children under 16 are strictly prohibited from registering directly. Account holders register via Google Login to:
- Save and monitor their own child’s learning progress;
- Assign practice and view performance reports;
- Manage settings on behalf of their child.
Account creation and progress-tracking are not available to teachers. Teachers may use MathsFamily’s freely accessible learning resources, quizzes, and tools with their students, but do so without creating an account or having any student progress data collected or stored against their name.
If we become aware that an account has been created by someone under 16 without parental authorisation, we will suspend the account and delete the associated personal data.
5. How We Use Your Information
We use the information described in Section 3 only for:
- Creating, authenticating, and managing the registered adult’s account;
- Providing profile and progress-management features for that account holder’s own use (e.g., tracking their own child’s progress within their own dashboard);
- Operating, maintaining, and securing the Service;
- Responding to support requests and exercising data protection rights;
- Complying with our legal obligations.
We do not use your information for any other purpose. We do not build advertising profiles from account or progress data, and we do not use it for any purpose beyond the profile/progress management described above.
6. We Do Not Sell Your Information
We do not sell, rent, or trade your personal information, or your child’s progress data, to any third party, under any circumstances. We do not share this data with data brokers or use it for third-party marketing.
The only sharing that occurs is described in Section 7 below (service providers strictly necessary to run the Service) and any disclosure required by law.
7. Who We Share Information With
| Recipient | Data shared | Purpose | Safeguard |
|---|---|---|---|
| Google (Google Login / OAuth) | Name, email address | Authentication | Governed by Google’s own privacy policy and our use is limited to login |
| Hosting / cloud infrastructure provider | Account and progress data | Storing the Service’s data | Contractual data processing agreement (DPA) |
| Analytics provider (e.g., Google Analytics, IP-anonymized) | Technical/usage data | Understanding site performance | Data Processing Agreement; IP anonymization enabled |
| Advertising partners (e.g., Google AdSense) | Non-personalized, contextual ad data only; see Section 10 | Displaying ads that keep the Service free | Contractual compliance with Google’s publisher policies |
| Legal authorities | As required | Compliance with law, protection of rights | Only where legally compelled |
We do not permit any service provider to use your data for their own purposes, and each is contractually bound to process data only on our instructions.
8. Legal Basis for Processing (GDPR, Article 6)
We rely on the following legal bases:
- Consent — for creating an account via Google Login and for any non-essential cookies (Article 6(1)(a)).
- Contract — to provide the account and progress-tracking features you request (Article 6(1)(b)).
- Legitimate interest — for essential site security and anonymized analytics, balanced against your rights (Article 6(1)(f)).
- Legal obligation — where we must retain or disclose data to comply with law (Article 6(1)(c)).
Where processing relates to a child’s data collected via a parent’s or guardian’s account, the parent/guardian provides consent and directs the processing on the child’s behalf, consistent with GDPR-K and COPPA.
9. Children’s Privacy — COPPA and GDPR-K Compliance
MathsFamily is designed so that any account-based tracking of a child’s activity happens only under the direct supervision and account of a parent or legal guardian. We comply with COPPA and GDPR-K as follows:
- We do not collect personal information directly from children.
- We do not permit children to independently register, log in, or submit personal information.
- Any personal data connected to a child’s learning activity (e.g., progress data) exists only within, and is controlled by, the supervising adult’s account.
- We do not use behavioral advertising or tracking cookies targeted at children.
- We do not condition participation in an activity on a child disclosing more information than is reasonably necessary.
- Parents and guardians may review, correct, or request deletion of any data associated with their child’s activity at any time (Section 12).
- If we learn that a child under 16 has provided personal information directly to us, or that an account has been created by someone under 16 without parental authorisation, we will promptly delete that information and, where applicable, suspend the associated account.
Parents and guardians with questions about our children’s privacy practices can contact us at info@mathsfamily.com with the subject line “COPPA/GDPR-K Request.”
10. Advertising
We may display advertising (including via Google AdSense) to help keep the Service free for parents, teachers, and schools.
- Ads shown on pages primarily used by or directed at children are non-personalized and contextual only — no behavioral profiling or interest-based targeting is used in those contexts.
- We require our advertising partners to comply with COPPA and GDPR-K.
- Where personalized advertising may be shown to adult account holders (e.g., on general/parent-facing pages), it is subject to the consent choices described in our Cookies Policy.
- We do not control the internal practices of third-party ad networks. You can learn more about how Google uses data at https://policies.google.com/technologies/ads and manage ad personalization at https://www.aboutads.info/choices/ and https://adssettings.google.com.
11. Cookies and Tracking Technologies
We use:
- Strictly necessary cookies — required for login sessions and core functionality (no consent required).
- Analytics cookies — anonymized (IP-masked) usage analytics to understand how the Service is used.
- Advertising cookies — used only where consented to by an adult account holder, and never used for behavioral targeting on child-facing pages.
Full details, including how to manage or withdraw consent, are available in our Cookies Policy.
12. Your Rights
If you are located in the European Union / EEA / UK, under the GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data (“right to be forgotten”);
- Restrict or object to processing;
- Data portability (receive your data in a portable format);
- Withdraw consent at any time, without affecting prior lawful processing;
- Lodge a complaint with your local supervisory authority if you believe your rights have been violated.
If you are in California, you have equivalent rights under the CCPA, including the right to know, delete, and opt out of sale/sharing of personal information — noting that we do not sell or share personal information as defined under the CCPA.
To exercise any of these rights, contact us at info@mathsfamily.com. We will respond within one month (GDPR) or as otherwise required by applicable law. We may need to verify your identity before actioning certain requests.
13. Data Retention
We retain personal data only for as long as necessary to:
- Provide the account and progress-tracking features (i.e., for as long as the account remains active);
- Comply with legal, accounting, or security obligations.
If an account is inactive for 24 months, or upon request, we will delete or anonymize the associated personal data, unless a longer retention period is required by law.
14. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted transmission (HTTPS/TLS) across the Service;
- Access controls limiting internal access to personal data on a need-to-know basis;
- Use of reputable, contractually bound hosting and infrastructure providers.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting your personal information, we will notify affected users and relevant supervisory authorities without undue delay, in line with our legal obligations (including the GDPR’s 72-hour notification requirement to supervisory authorities where feasible).
15. International Data Transfers
Our core infrastructure — including compute (AWS Lambda), databases (AWS DynamoDB), and file storage (AWS S3) — is deployed in AWS eu-west-1 (Dublin, Ireland), which is within the European Economic Area. Personal data processed by these services remains within the EEA for all primary operations.
We also use Amazon CloudFront as our content delivery network. CloudFront operates a global network of edge locations, including locations outside the EEA (for example, in the United States and Asia-Pacific). When you access MathsFamily.com, your request may be routed through or served from an edge location outside the EEA, which may involve the temporary processing of your IP address and request metadata at that location.
All such international transfers are governed by Amazon Web Services’ Data Processing Addendum, which incorporates the European Commission’s Standard Contractual Clauses (SCCs) as the applicable transfer mechanism. AWS is also certified under the EU–US Data Privacy Framework. Further information on AWS’s data protection safeguards is available at aws.amazon.com/compliance/gdpr-center.
16. Third-Party Links
The Service may contain links to third-party websites or embedded content (e.g., videos). We do not control these third parties and are not responsible for their privacy practices. We encourage parents and teachers to review the privacy policies of any linked site before sharing information with it.
17. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this page will reflect the most recent revision. Material changes affecting how we handle children’s data will be communicated to registered account holders by email or an in-Service notice.
18. Contact Us
For any questions, requests, or concerns about this Privacy Policy or our data practices:
- Email: info@mathsfamily.com
- COPPA / GDPR-K requests: info@mathsfamily.com — subject line “COPPA/GDPR-K Request” for priority handling
- General GDPR requests: info@mathsfamily.com — subject line “Privacy Request”
This Privacy Policy works together with our Terms of Service, Cookies Policy, and Disclaimer.