Skip to main content

Privacy Policy

Last revised: October 28, 2026

This policy explains what Successful Mathematics collects when you use our websites and apps (the "Services"), why we collect it, who we share it with, how long we keep it, and what you can do about it. The Services are run by Successful Mathematics LLC, a North Carolina limited liability company ("we" or "us"). Our contact details are in section 10.

Many of the people who use the Services are pupils, including children under 13. Section 3 is our notice to parents about children's information.

The Services are intended for people in the United States.

1. What we collect

  • Your account. Name, email address, password (stored only as a one-way hash by our sign-in provider), your role (pupil, parent, teacher or school administrator), and the classes, families and schools your account is linked to. Pupils and independent learners also give their month and year of birth, and a child under 13 who signs up on their own gives a parent's email address. You may add a display name, a profile picture or banner, and a phone number for account recovery.
  • Sign-in through another service. If you sign in with Google, Microsoft or your school's learning management system, that service sends us your name, email address and an identifier.
  • Learning. Your answers and working, scores, progress, time spent on lessons, assignments and due dates, and feedback from teachers. If a teacher asks for a recorded answer, the video or audio you record.
  • Things you write or post. Messages, social posts and the images attached to them, flashcards, and conversations with our support assistant.
  • AI features. What you type or say into the study assistant, hints, voice tutor or support assistant.
  • Fair-play signals. To help teachers and parents spot work that may not be a pupil's own, we record how answers were given: answer timings, help requests, whether the page was left in the middle of a question, whether the question was copied or text was pasted into an answer, and how answers compare with the pupil's own earlier work, with classmates' answers to the same questions, and with mistakes AI chat tools are known to make. This fair-play check is on by default only for pupils linked to a teacher or parent, who can switch it off for a class or for one pupil; nothing is recorded for someone learning on their own. Pupils see a notice while it is on. These records never change a mark by themselves: a teacher or parent decides, and the pupil can always give their side. If a teacher chooses, a quiz or test pauses at a strong pattern until the teacher looks; nothing is marked wrong. We do not use the camera or microphone for this, record the screen, or measure typing rhythm (the timing between individual keys).
  • Games and rewards. MathCoins, XP, merits, avatars, game progress, friends, and Arena scores.
  • Purchases. What was bought, when, and for how much. Payments are handled by Stripe; we never see or store card numbers. For printed books we keep the shipping address and phone number.
  • Technical information. IP address, browser and device type, and error reports when a page fails, used for security and to fix problems.

We do not use advertising or analytics trackers, we do not sell personal information, and we do not collect fingerprints, face scans, voiceprints or other biometric identifiers.

2. How we use it

  • To run the Services: lessons, grading, progress, assignments, messages, games and rewards.
  • To show pupils' progress to their teachers, their school and the parents they are linked to.
  • To answer questions in our AI features and support chat.
  • To keep the Services secure, prevent fraud and misuse, and enforce our Terms of Service.
  • To take payments and send receipts, reminders and account notices. We do not send marketing email to pupils.
  • To improve the Services, using totals and patterns with names removed (for example, which wrong answers are most common on a question).

We do not use personal information to train AI models, we do not show advertising, and we do not build profiles of pupils for any purpose other than their learning and the fair-play review described above.

3. Children's privacy: notice to parents

This section is our notice under the Children's Online Privacy Protection Act (COPPA) for children under 13.

  • What we collect from children: the information in section 1, except purchases and book orders, which a child under 13 cannot make.
  • How it is used: only to provide the learning service described in section 2. We do not use a child's information for advertising and we do not sell it.
  • Who receives it: the child's teachers, school and linked parents; other pupils, who see only the child's display name, avatar and what the child chooses to post or play; and the service providers in section 4, which handle it only to run the Services.
  • How consent is given:
    • A parent who creates a login for their child confirms their consent when they create it, after reading this notice. When the parent pays for the child's plan or seats with a card or another online payment that notifies the account holder of each charge, that payment is how we verify that the consent comes from a parent, and we keep a record of it.
    • When a school or teacher uses the Services for school, the school gives consent on parents' behalf, for educational use only.
    • A child under 13 who signs up on their own gives their birth month and year and a parent's email address. We email the parent what we collect and a link to approve or decline. Until the parent approves, the child can try lessons, but posts, messages, friends and a profile picture stay closed. This still applies if the child joins a teacher's class, unless their school enrolls them through its school account. If the parent declines, we delete the account and its information.
  • Parents' rights: a parent may see the information we hold about their child, have it corrected or deleted, and tell us to stop collecting it. We will not require a child to give more information than an activity needs. To use these rights, contact us; we will confirm you are the child's parent before acting.
  • How long it is kept: see section 6.

4. Schools and pupil records

When a school uses the Services, pupils' education records belong to the school. We act as a "school official" under the Family Educational Rights and Privacy Act (FERPA): we use those records only to provide the Services to the school, under the school's direction, and we do not disclose them except as this policy describes or the school instructs. A pupil's records can be seen by the teachers and parents the pupil is linked to, by administrators of the pupil's own school or district, and by our support staff when needed. Parents of pupils in a school should make requests about education records to the school.

5. Who we share it with

We share personal information only with the service providers below, which handle it to run the Services for us, and in the situations listed after the table.

ProviderWhat it does for usInformation it handles
SupabaseOur database and sign-in system.All account, learning and message data.
RenderRuns our application servers.Requests to the service while they are handled.
VercelHosts our website.Page requests, including IP address and browser type.
CloudflareDomain names, network security and routing of email sent to our support address.IP addresses; email sent to us.
Google (Gemini)Produces replies in our AI features: study assistant, hints, voice tutor and support assistant.What you type or say in those features, and the math question involved. See "AI features" below.
Google (Drive)Stores files.Profile pictures, banners, images attached to posts, recorded video or audio answers, support chat transcripts and school purchase orders.
Google and Microsoft sign-inOnly if you choose to sign in with them.Your name, email address and an account identifier, sent to us by them.
StripeTakes payments and runs subscriptions.Card details (entered directly with Stripe), billing name, email and address. We never see card numbers.
ResendSends our emails.Your email address and the message.
TwilioSends text-message codes, if you add a phone number for account recovery.Your phone number and the code.
Your school’s learning management systemOnly if your school connects one.Grades we send back to your class’s gradebook.
Anthropic (Claude)Software tools our team uses to build and support the service.Account and learning data our team looks at while investigating a problem.

AI features

When you use an AI feature, what you type or say, and the question you are working on, is sent to Google's Gemini models to produce a reply. We do not add your name or contact details. The support assistant also sends account details it needs to answer you, such as your role, purchases, credits, your school and the teachers you are linked to. Some AI requests currently run on Google's Gemini API, whose terms allow Google to use content to improve its services. We are moving all AI requests to Google Cloud's Vertex AI, under which Google does not use our content to train its models, and we will update this policy when the move is complete.

Pictures and images

Profile pictures, banners and images attached to posts are stored privately in Google Drive and shown only to people signed in to the Services, through our own website. The copy we show has hidden details, such as where a photo was taken, removed. Children under 13 cannot upload a photo; they use an animal avatar instead. Recorded video and audio answers can be played only by signed-in people allowed to see them.

Other situations

  • With other users, as the Services show it: your display name and avatar in classes, games and posts, and what you choose to post. Your settings control whether your real name is shown.
  • When the law requires it, or to protect the safety of a child or anyone else.
  • If the business is sold or merged, with the buyer, who must keep to this policy for information already collected.

6. How we protect it

  • Information travels encrypted (HTTPS/TLS), and our database is encrypted at rest by our provider.
  • Database access rules limit each account to the records it is allowed to see. Staff accounts that can see pupils' information use two-step verification.
  • If a security breach affects your information, we will tell you, and the affected schools, without unreasonable delay and within 72 hours of confirming it, and we will notify authorities where the law requires.

7. How long we keep it, and deleting it

We keep information while the account is in use, unless a shorter period applies:

  • Fair-play records: what is noticed on the page for 90 days, answer timings and help requests for 180 days, and lesson opening times for 30 days. A teacher's review is kept until the teacher resolves it and for one year after that.
  • Purchase records: kept as long as tax and accounting law requires. When an account is deleted they are kept with the personal details removed.
  • Friend-code lookups: which account looked up which friend code, kept for 90 days to keep children safe.
  • Backups: overwritten within 7 days.

Inactive Accounts: We keep data only while it is being used. An account with no activity (no sign-in, no session and no work) for 24 months is deleted, together with its data. A student login created by a parent or teacher without an email address is deleted after 12 months without activity. A sign-up whose email address was never verified is deleted after 30 days without notice, because there is no confirmed address to send one to; verifying the address before then keeps the account. Before any other inactive account is deleted we send two notices, 30 days and 7 days beforehand, to the account's email address or, for a student login without one, to the parent or teacher who created it; signing in at any time before the deletion keeps the account. Not having a paid plan is never, on its own, a reason for deletion. Accounts managed by a school or district, and accounts with an active license or trial, are kept for as long as that arrangement lasts.

Deleting an account: when you delete your account, we delete its personal information, including stored files and recordings, and cancel any billing. Accounts managed by a school are deleted through the school. Step-by-step instructions, including what to do if you can no longer sign in, are at Delete Your Account & Data.

8. Your choices and rights

  • You can see and change most of your information in your account settings, including whether your profile and real name are shown to others.
  • You can ask us for a copy of your information, to correct it, or to delete it. Contact us (section 10). Depending on your state, you may have further rights under its privacy law; we honor them for all users.
  • We do not sell personal information or share it for targeted advertising, so there is nothing to opt out of.

We use cookies and your browser's local storage only for things the Services need: keeping you signed in, security, and remembering your settings (such as your theme). We do not use advertising or analytics cookies.

10. Changes to this policy

When we change this policy we update the date at the top. If a change materially affects pupils or children, we will tell users by email or a notice in the Services before it takes effect, and we will ask parents for consent again before using a child's information in a materially different way.

11. Contact us

Questions, requests about your information, or a parent's request about a child:

Successful Mathematics LLC
1175 Scotch Meadows Loop, Monroe, NC 28110, USA
Phone: (704) 290-7619
Email: support@successfulmathematics.com