MathsMoji

Privacy Policy

Last updated: 16 May 2026

At Maths Moji, your privacy — and the privacy of children who use our Service — is a top priority. This Privacy Policy explains what information we collect, how we use it, and how we protect it when you access the Maths Moji website and application ("Service") at www.mathsmoji.com.

Maths Moji is a global educational platform available to schools, teachers, parents, and students worldwide. This Policy applies to all users of the Service, regardless of where they are located. Our data practices are built on the principles of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, which we treat as our baseline standard. We also recognise that users in different countries are subject to their own local data protection and privacy laws, which may impose additional or different requirements. Users are responsible for ensuring their use of the Service complies with the laws applicable in their country. Please see Section 15 for more detail on international users and local law obligations.

By using Maths Moji, you agree to the practices described in this Privacy Policy.

1. Who We Are

Maths Moji is the data controller for personal data collected through the Service. We are responsible for deciding how and why personal data is processed.

For any privacy-related enquiries, please contact us at: www.mathsmoji.com or [email protected]

2. Our Commitment to Child Safety

Maths Moji is designed for primary school children and we take the safety and privacy of children extremely seriously. Our data practices are designed to minimise the personal information we collect and to ensure that no sensitive personal information is exposed to other users.

Our key commitments are:

  • We do not display third-party advertising to users of the Service.
  • We do not sell any personal data.
  • We collect only the minimum data necessary to deliver the Service.
  • Student real names are never visible to other users of the Service.
  • Only a student's chosen username (not their real name) may be visible to others, and only in specific competitive features such as Battle Mode.

3. What Information We Collect

3.1 Student Account Information

When a student registers for a Maths Moji account, we collect the following information:

  • First name and last name: Collected to identify the student's account internally and to help teachers or parents locate and manage the account. First and last names are never displayed publicly or shared with other students or users on the platform.
  • Username: A name chosen by the student for use within the Service. The username is visible to other users only in specific features, such as the Battle Mode leaderboard. Students are encouraged not to use their real full name as their username. See Section 5 for more detail.
  • Password: Used to secure access to the student's account. Passwords are stored securely (encrypted/hashed) and are never visible to other users, teachers, or staff, and are not shared with any third parties.
  • Progress and performance data: Information about a student's activity on the platform, such as questions answered, scores, levels completed, and areas of strength or difficulty. This data is used to personalise the learning experience and may be visible to the student's teacher or parent within the platform.

We do not collect or store student email addresses, dates of birth, photographs, phone numbers, or any other sensitive personal data as part of the standard registration process.

3.2 Information Provided by Teachers and Schools

When a teacher or school administrator creates an account, we may collect:

  • Name and professional email address
  • School or institution name
  • Class or year group information
  • Login credentials (stored securely)

3.3 Information Provided by Parents or Guardians

When a parent or guardian creates or manages an account for home use, we may collect:

  • Name and email address
  • Basic account preferences

3.4 Automatically Collected Information

When you use the Service, we may automatically collect certain technical information to help us maintain and improve the platform:

  • Device type and operating system
  • Browser type and version
  • Pages visited and time spent on the Service
  • General location data (country or region only, not precise location)
  • IP address (used for security and fraud prevention; not stored long-term)

This information is collected using standard web analytics tools and cookies. Please see Section 10 (Cookies) for more detail.

4. How We Use Your Information

We use the information we collect only for the following purposes:

  • To create and manage student, teacher, and parent accounts
  • To provide and operate the Maths Moji Service
  • To personalise the learning experience for students based on their progress
  • To enable teachers and parents to monitor student progress within the platform
  • To display usernames on in-session leaderboards during Battle Mode
  • To communicate with teachers and parents about their accounts or the Service
  • To improve and develop the Service based on usage patterns
  • To maintain the security and integrity of the Service

We do not use student data for marketing, profiling, or any purpose unrelated to education.

5. Usernames and Visibility in Battle Mode

Important: When a student participates in Battle Mode, their chosen username will be visible on the leaderboard to other students in the same session. No other personal information — including first name, last name, password, or any account details — is ever displayed to other users.

This means:

  • What is visible to others: Username only, during Battle Mode sessions.
  • What is never visible to others: First name, last name, password, progress data, or any other account information.

We strongly encourage students, parents, and teachers to ensure that usernames do not include real full names or any other personally identifying information. Guidance on choosing a safe username is included in our Terms of Service and is displayed during the registration process.

6. Our Legal Basis for Processing Data

We process personal data on the following legal bases, consistent with the principles of UK GDPR and broadly aligned with major international data protection frameworks:

  • Contract performance: to provide the Service to teachers, schools, parents, and students who have agreed to our Terms of Service.
  • Legitimate interests: to maintain security, improve the platform, and ensure the Service functions correctly, provided these interests do not override your rights.
  • Consent: where required (for example, for optional communications to parents or guardians), we will ask for your explicit consent and provide an easy way to withdraw it.

For student accounts, we rely on consent provided by a parent or guardian — either directly or through the school acting on their behalf — confirming that the student has permission to register and use the Service.

We recognise that the legal basis for processing children's data, and the age thresholds at which parental consent is required, vary between countries. It is the responsibility of the user, school, or institution to ensure that the appropriate consent has been obtained under the laws applicable in their country before a student registers. See Section 15 for further detail on international obligations.

7. How Long We Keep Data

We retain personal data only for as long as necessary:

  • Student account data (including first name, last name, username, and progress data) is retained for as long as the account remains active. Accounts inactive for 24 months may be deleted.
  • Teacher and parent account data is retained for as long as the account remains active.
  • Technical log data is retained for a maximum of 90 days for security purposes.

You can request deletion of any account or personal data at any time by contacting us.

8. Sharing Your Information

We do not sell, rent, or trade your personal data to any third parties. We may share data only in the following limited circumstances:

  • Service providers: We may use trusted third-party providers (such as hosting and analytics services) who process data on our behalf under strict data processing agreements. These providers are only permitted to use data in accordance with our instructions and are required to maintain appropriate data protection standards.
  • Teachers and parents: A teacher or parent with access to a student's account can view that student's progress data. This data is not shared with other teachers, parents, or students.
  • Battle Mode participants: During a Battle Mode session, a student's username is visible to others in the same session. No other personal data is shared.
  • Legal obligations: We may disclose data where required by law, court order, or to protect the safety of users or others.

9. International Data Transfers

Maths Moji is a global service. Personal data collected through the Service may be transferred to and processed in countries other than the country in which you are based — including the United Kingdom, where our primary data processing infrastructure is located.

Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place to protect it. These safeguards may include standard contractual clauses, data processing agreements with third-party providers, or other mechanisms recognised under applicable data protection law.

We recognise that different countries have different rules governing the transfer of personal data across borders. Users in countries with specific cross-border data transfer restrictions — such as the European Economic Area, Thailand, or others — should be aware that by using the Service, personal data will be transferred to and processed in the United Kingdom. We take reasonable steps to ensure such transfers comply with applicable law, but users and schools are responsible for satisfying themselves that the use of our Service is consistent with any transfer restrictions that apply in their jurisdiction. See Section 15 for more detail.

10. Cookies

Maths Moji uses cookies and similar technologies to operate and improve the Service. Cookies are small text files stored on your device.

We use the following types of cookies:

  • Essential cookies: Required for the Service to function (e.g. keeping you logged in).
  • Analytics cookies: To understand how users interact with the Service so we can improve it. We use anonymised data wherever possible.

We do not use advertising or tracking cookies. Where required by applicable law in your jurisdiction, we will seek your consent before placing non-essential cookies on your device. You can manage cookie preferences through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the Service.

11. Your Privacy Rights

We respect your right to control your personal data. The specific rights available to you depend on the laws of the country in which you are based. As a baseline, and consistent with UK GDPR, the following rights apply to all users of the Service:

  • Right to be informed: You have the right to know what personal data we collect, why we collect it, and how long we retain it.
  • Right of access: You can request a copy of the personal data we hold about you or your child.
  • Right to rectification: You can ask us to correct inaccurate or incomplete data.
  • Right to erasure: You can ask us to delete your personal data or your child's account, subject to certain exceptions.
  • Right to restriction: You can ask us to limit how we use your data in certain circumstances.
  • Right to data portability: You can ask for your data in a commonly used, machine-readable format.
  • Right to object: You can object to processing based on legitimate interests.
  • Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at www.mathsmoji.com or [email protected]. We aim to respond within 30 days. Users in some countries may have additional rights under their local law — for example, the right to lodge a complaint with their national data protection authority. Contact details for the UK's Information Commissioner's Office (ICO) are available at www.ico.org.uk.

12. Security

We take the security of your data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, loss, or disclosure. These include:

  • Encrypted data storage and transmission (HTTPS/TLS)
  • Passwords stored using industry-standard hashing (never stored in plain text)
  • Access controls limiting who within our team can view personal data
  • Regular review of our security practices

While we take every reasonable precaution, no system is completely secure. In the event of a personal data breach that is likely to affect your rights or freedoms, we will notify you and the relevant supervisory authority in accordance with our legal obligations and within the timeframes required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law — including changes to data protection laws in different countries. The date at the top of this document will reflect any updates. Where changes are significant, we will notify users by email or through a notice on the Service. Continued use of Maths Moji following any update constitutes acceptance of the revised Policy.

14. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or how we handle your data, please contact us at:

If you are dissatisfied with our response, you have the right to contact your national data protection or privacy authority. In the United Kingdom, this is the Information Commissioner's Office (ICO) at www.ico.org.uk.

15. International Users — Local Data Protection Laws

This section is relevant to all users based outside the United Kingdom. Maths Moji is a global platform and we welcome users from every country. Our data practices are built on UK GDPR as a strong baseline, but we recognise that data protection and child privacy laws vary significantly around the world. It is the responsibility of users, schools, and institutions to understand and comply with the laws applicable in their own country.

15.1 Our Approach to Global Compliance

We are committed to handling personal data responsibly wherever in the world our users are based. Our baseline practices are designed to meet or exceed the core requirements of most major international data protection frameworks, including:

  • UK GDPR and EU GDPR: Our primary compliance framework, which sets a high standard for data protection, consent, and user rights.
  • Thailand PDPA: Thailand's data protection law, which applies to any organisation processing personal data of individuals in Thailand, regardless of where that organisation is based.
  • US COPPA: US federal law restricting the collection of personal data from children under 13 without verifiable parental consent.
  • Australia's Privacy Act 1988: Australia's primary federal privacy framework, currently undergoing significant reform to strengthen protections for children.
  • Other national frameworks: Including India (DPDP Act), Brazil (LGPD), Canada (PIPEDA), Japan (APPI), and others. Our core practices are designed to align with internationally recognised privacy principles.

15.2 Parental Consent — International Variation

One of the most significant areas of variation between countries is the age at which a child can consent to data processing, or the age below which parental or guardian consent is required:

  • Under 13 (United States — COPPA): US law requires verifiable parental consent before collecting personal data from children under 13.
  • Under 13 to 16 (EU/EEA — GDPR): EU member states set their own age threshold between 13 and 16.
  • Under 13 (United Kingdom): The UK Age Appropriate Design Code sets 13 as the default threshold for most online services.
  • Under 20 (Thailand — PDPA): The Thailand PDPA defines a minor as any person under 20. Parental or guardian consent is required for all students in this age group.
  • Under 18 (general recommendation): Where the applicable threshold in your country is unclear, we recommend treating any student under 18 as requiring parental or guardian consent.

By registering a student on Maths Moji, the person completing registration confirms that any consent required under local law has been obtained.

15.3 Responsibility of Schools and Institutions

Schools and educational institutions using Maths Moji with students are responsible for:

  • Verifying that they are legally permitted to use a platform of this kind with students in their jurisdiction.
  • Obtaining any parental or guardian consent required by local law before students register on or use the Service.
  • Notifying parents and guardians about the Service, what data is collected, how it is used, and that usernames are visible to other students during Battle Mode.
  • Retaining records of consent in accordance with local legal requirements.
  • Entering into any data processing agreements or similar arrangements required by local law.
  • Contacting us at www.mathsmoji.com or [email protected] promptly if a student appears to have registered without the required consent.

15.4 Cross-Border Data Transfers

Personal data collected through the Service is processed in the United Kingdom. If you are based in a country with restrictions on the transfer of personal data outside its borders, you should be aware of this before using the Service. We implement appropriate safeguards for international data transfers consistent with our obligations under UK GDPR, including standard contractual clauses where required.

15.5 Local Supervisory Authorities

If you have concerns about how we handle your personal data that we have not been able to resolve, you have the right to contact your national data protection or privacy authority:

  • United Kingdom: Information Commissioner's Office (ICO) — www.ico.org.uk
  • European Union: Your national data protection authority (full list at edpb.europa.eu)
  • Thailand: Office of the Personal Data Protection Committee (PDPC) — www.pdpc.or.th
  • United States: Federal Trade Commission (FTC) — www.ftc.gov (for COPPA matters)
  • Australia: Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au

15.6 Evolving Legal Landscape

Data protection and child privacy laws are developing rapidly across the world. We monitor significant legal developments and will update this Policy as needed. Users and schools are responsible for staying informed about changes to the laws applicable in their own country. If you have questions about a specific jurisdiction, please contact us at www.mathsmoji.com or [email protected].

This Privacy Policy was prepared for general guidance purposes. Maths Moji's data practices are built on UK GDPR as a strong international baseline, but because the Service is available globally, users and schools are responsible for ensuring compliance with the data protection and child privacy laws applicable in their own country. Maths Moji recommends that schools and institutions seek independent legal advice in their jurisdiction before deploying the Service.

Questions about our privacy practices? www.mathsmoji.com or [email protected]

Also see our Terms of Service