Privacy Policy

1. Who we are

Mathbound ("Mathbound," "we," "us") operates the website and learning platform at mathbound.vercel.app and related domains. For privacy questions contact mathboundhelp@gmail.com.

2. How we store data

Mathbound uses cloud accounts (Supabase) for authentication and profile fields. Learning progress is stored on your device and may also sync to our platform store for operations and support.

The internal /admin console is restricted to authorized Mathbound operators. It may show account emails, profile fields, and associated learning activity for support, account administration, and access approval. It is not available to other students or the public, and it does not provide live surveillance of visitors' screens.

3. Information we collect

• Account data — email address, password (stored hashed by our auth provider), display name, and optional profile fields.
• Learning data — workouts, mock exams, error log entries, mastery scores, streaks, and related activity when saved to our servers or on your device.
• Hosting & delivery — our host (Vercel) processes IP addresses, request logs, and device/browser metadata to deliver the site, prevent abuse, and maintain security.
• Aggregate analytics (optional) — if you accept cookies on our banner, we load Vercel Web Analytics for aggregate page views and traffic (not used for advertising). If you choose "Essential only," this analytics script does not load.
• Uploaded content — images you submit for OCR scratchpad review are sent to our OCR provider when that feature is enabled, solely to return feedback.

We do not sell personal information. We do not run third-party advertising networks on the Service.

4. How we use information

• Provide, secure, and improve the Service.
• Save your progress and personalize practice on your device.
• Authenticate you when cloud accounts are enabled.
• Respond to support and legal requests.
• Comply with law and enforce our Terms.

5. Legal bases (EEA / UK users)

Where GDPR applies, we process data based on: contract (running the Service when you request an account), legitimate interests (security, hosting, product improvement), consent (optional analytics and where we ask explicitly), and legal obligation. Essential browser storage for sign-in and progress is used because it is strictly necessary to provide the Service you request.

6. Service providers

We use trusted processors who host or support the Service, including:

• Vercel — website hosting, delivery, security logs, and optional Web Analytics (aggregate usage).
• Supabase — database and authentication when cloud accounts are configured.
• Optional email (e.g. Resend) or OCR(e.g. Mathpix) providers when those features are enabled.

They process data only on our instructions and under appropriate agreements.

7. Children's privacy (COPPA)

Mathbound is designed for students preparing for math contests and exams. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

• Users must confirm they are at least 13 or that a parent/guardian is creating the account during signup.
• Even when progress stays in the browser, parental consent is still required for children under 13 before they use the Service with personal learning data stored on a device.
• Parents can clear data by deleting site data in the browser or using Account → Delete account.
• If you believe a child under 13 used the Service without consent, contact mathboundhelp@gmail.com.

8. Retention

We keep account and server-stored learning data while your account is active. When you delete your account, we delete or anonymize associated server data within a reasonable period, except where we must retain records for legal, security, or backup purposes. Data in your browser may remain until you clear it locally.

9. Security

We use industry-standard measures (encryption in transit, access controls on hosting). Data on your device is protected by your device and browser security — use a device password and do not share your browser profile. No method of transmission is 100% secure.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to processing of your personal data. You can:

• Export data from Account → Your data (server profile and/or local progress)
• Delete data from Account → Delete account (server account and local data)
• Clear site data in your browser settings at any time.
• Email mathboundhelp@gmail.com for other requests.

11. California residents (CCPA / CPRA)

California residents may request disclosure of categories of personal information collected, deletion, and correction. We do not sell or share personal information for cross-context behavioral advertising. To exercise rights, use Account settings or email mathboundhelp@gmail.com. We will not discriminate against you for exercising privacy rights.

12. International transfers

If you access the Service from outside the United States, your data may be processed in the U.S. and other countries where our providers operate (including Vercel). We rely on appropriate safeguards where required by law.

13. Changes

We may update this Policy. We will post the new date at the top and, for material changes, provide additional notice where appropriate. Continued use after changes means you accept the updated Policy.

14. Contact

Mathbound · mathboundhelp@gmail.com · Contact & Legal