Effective date: April 23, 2026
MathPaw ("we", "our", "the app") is a children's math practice app published by 372 Studio OÜ. We take the privacy of children and families seriously. This policy explains what data we collect, why, and how we protect it.
MathPaw is designed for children aged 5-12, used under parental supervision. A parent or guardian creates an account and adds child profiles. Children interact with math exercises; parents access dashboards, settings, and subscription management behind a PIN-protected gate.
Account data (parent): Email address or third-party sign-in identifier (Apple ID or Google account), used solely for authentication and account recovery.
Child profile data: Display name (first name or nickname), grade level, and avatar selection. We do not collect a child's full name, date of birth, photo, or any other personal identifier.
Practice data: Exercise responses, accuracy, session duration, mastery progression, and streaks. This data powers the adaptive learning engine and the parent dashboard.
Subscription status: Whether the account holds a free or premium subscription, managed through Apple's App Store via RevenueCat. We never see or store payment card details.
Device and usage analytics: We use PostHog (EU-hosted) to collect anonymized usage events such as screens visited, features used, and conversion funnel steps. We use Sentry for crash reporting. These services receive a device identifier and app version but no child names or exercise content.
Coarse location: Country-level location derived from IP address at sign-in, used for analytics and content relevance. We do not collect precise GPS location.
We do not sell personal data. We share limited data with the following service providers, solely for app operation:
We may share hashed email addresses with advertising platforms (e.g., Meta) for retargeting campaigns directed at parents. Child data is never shared with advertising platforms.
Child profiles contain only a display name, grade level, and practice data. We do not:
Parents can review, modify, or delete their child's data at any time from the parent dashboard or by contacting us.
Practice data is stored locally on the device (SQLite) and synced to Supabase (hosted in the EU). Data in transit is encrypted via TLS. Authentication tokens are stored in the device's secure keychain. The parent gate requires a PIN to access account settings and child data.
Account data is retained while the account is active. If you delete your account, all associated data (parent account, child profiles, practice history) is permanently deleted within 30 days. You can request deletion from the app's Settings screen, from our account deletion page, or by emailing us at simon@372studio.com.
You may request access to, correction of, or deletion of your data at any time by contacting us. If you are in the EU, you have additional rights under GDPR including data portability and the right to object to processing.
We may update this policy from time to time. Material changes will be communicated through the app or via email. The effective date at the top reflects the latest revision.
372 Studio OÜ
Email: simon@372studio.com