Privacy Policy

What we collect

When you use MathQuest, we collect:

• Email address — for sign-in via magic link and order receipts
• Display name — shown on leaderboards (optional; we can derive it from your email if not provided)
• Quiz activity — your scores, streaks, badges, and completion status
• Payment metadata — order IDs, payment IDs, amounts, status. Full card and banking details are handled by Razorpay; we never see or store them.
• Technical data — IP address and basic device info for security and abuse prevention

How we use it

• To authenticate you and provide access to purchased content
• To track your progress and award badges
• To display anonymized rankings on leaderboards (only your display name, not your email)
• To send transactional emails (login links, purchase receipts, refund confirmations)
• To prevent fraud, debug issues, and comply with legal obligations

We do not send marketing emails without your explicit opt-in. We do not sell your data to third parties.

Who we share data with

• Supabase — hosts our database and authentication system
• Razorpay — processes your payments; subject to their privacy policy
• Vercel — hosts our web application
• Resend — delivers transactional emails on our behalf
• Law enforcement — only when legally compelled by valid Indian legal process

Data retention

We keep your account data while your account is active. If you delete your account, personal data is removed within 30 days, except: (a) payment records, which we retain for 7 years for tax and accounting purposes, and (b) anonymized aggregate analytics.

Your rights

You can:

• Access the personal data we hold about you
• Correct inaccurate information via your dashboard or by emailing us
• Request account deletion by emailing us
• Opt out of leaderboards by emailing us

Cookies

We use only essential cookies needed for authentication and session management. We do not use advertising or third-party tracking cookies.

Children's privacy

MathQuest is used by school students. We do not knowingly collect personal data from children under 13 without parental consent. If you are a parent and believe your child has provided data without consent, email us and we will delete it.

Security

We use industry-standard encryption (HTTPS), Row Level Security in our database, and HMAC-verified payment webhooks. No system is perfectly secure — if you suspect a breach, please notify us immediately.

Contact

For privacy questions or requests, email support@mathquest.com.