Privacy Policy

1. Who this applies to

Mathnetic accounts are created directly by the tutor for each student and, where applicable, their parent/guardian — there is no public self-signup. If you are a parent or guardian and your child uses Mathnetic, this policy covers both your own account (if you have one) and the information collected about your child through their account.

2. What information we collect

• Account details: full name, phone number and/or email address, and account role (tutor, student, or parent).
• Learning data: assessment answers, uploaded photos of handwritten working, scores, marking feedback, and progress/mastery records.
• Live lesson data: during a live lesson, audio is transmitted directly between the tutor and student's devices (peer-to-peer, or relayed only when a direct connection isn't possible) and is not recorded or stored by Mathnetic. Whiteboard content (strokes, images, placed questions) created during a lesson is saved so the lesson can continue correctly if a device reconnects.
• Push notification tokens: if you install the Mathnetic app and allow notifications, we store a device token used only to deliver notifications relevant to your own account (e.g. an assessment being marked, a new assignment, or a live lesson starting).
• Payment information: subscription payments are processed by Stripe. Mathnetic does not receive or store your full card details — only Stripe's own confirmation that a payment succeeded.
• Technical data: basic device/browser information collected automatically for the app to function correctly (e.g. to keep you signed in, or to size content correctly for your screen).

3. How we use this information

• To provide and operate the tutoring service itself.
• To mark assessments and track a student's progress over time.
• To let a linked parent view their own child's class history, subscription status, and results.
• To send notifications relevant to your account (marking complete, new assignments, live lessons starting).
• To process subscription payments.
• Where AI tools are used to assist with marking or generating practice questions, only the specific content needed (e.g. a question and a student's written answer) is sent to the AI provider for that single request — it is not used to train any AI model.

4. Who we share information with

We do not sell personal data. Information is shared only with the service providers needed to run Mathnetic, each acting under their own security and privacy commitments:

• Supabase — hosts our database, user authentication, and file storage (e.g. uploaded photos of working).
• Firebase Cloud Messaging (Google) — delivers push notifications to the Mathnetic app.
• Stripe — processes subscription payments.
• Anthropic (Claude) — used for AI-assisted marking and question generation features, where enabled.
• Vercel — hosts the Mathnetic website and app backend.

We may also disclose information if required by law, or to protect the rights, safety, or property of Mathnetic, our users, or others.

5. Data retention

We keep account and learning data for as long as your account is active, and for a reasonable period afterward in case the account is reactivated or as needed for record-keeping. You can request deletion at any time (see Section 7).

6. Children's privacy

Mathnetic is a tutoring platform used primarily by school-age students. Student accounts are created and managed by the tutor, typically with a parent or guardian's knowledge and involvement, rather than through open self-signup. Parents may contact us at any time using the details below to review, correct, or request deletion of their child's information.

7. Your rights under the PDPA

Under Malaysia's Personal Data Protection Act 2010, you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate personal data.
• Withdraw consent to certain uses of your data (this may limit your ability to use some features).
• Request deletion of your account and associated data.

To exercise any of these rights, contact us using the details below.

8. Security

We use industry-standard measures — including encrypted connections and access controls restricting data to your own account (and, where relevant, your linked tutor or parent) — to protect personal data from unauthorised access, loss, or misuse. No online service can guarantee absolute security, but we take reasonable steps to protect your information.

9. Changes to this policy

We may update this policy from time to time as Mathnetic's features change. The "Last updated" date at the top of this page will reflect the most recent changes.

10. Contact us

For any questions about this policy, or to make a request about your personal data, contact us at:

training.danielwong@gmail.com