Privacy Policy

1. Who We Are

Maiths provides online educational tools for practising and reviewing IGCSE mathematics work. References to "Maiths", "we", "us" and "our" mean the operator of the Maiths service. References to "you" mean a visitor, account holder, student, teacher, parent, guardian, school representative or other user of the service.

This policy is intended to describe our practices clearly. It is not a contract for professional, legal, academic or examination services.

2. Information We Collect

• Account information, such as email address, authentication identifiers, name, role, school or classroom details and subscription status.
• Educational content and activity, such as uploaded work, selected papers, answers, annotations, marking requests, generated feedback, scores, explanations, progress data, assignments and classroom records.
• Contact and support information, such as messages, issue reports, feedback, contact details and related correspondence.
• Payment and billing information, where paid features are used. Payment processing may be handled by payment providers, and we do not intentionally collect full card numbers through the Maiths interface.
• Technical and usage information, such as device type, browser, IP address, approximate location derived from technical data, pages viewed, feature interactions, error logs, security events and cookies or browser storage needed to run the service.
• Information provided by schools, teachers, parents, guardians or other authorised users when they invite, manage or support learners.

3. How We Use Information

We use personal information to provide, maintain and secure the service; create and manage accounts; process educational workflows; generate, save and display results; support classroom and assignment features; respond to enquiries; process subscriptions; prevent abuse; debug errors; improve reliability; comply with law; enforce our terms; and protect the rights, safety and security of users and Maiths.

We do not sell personal information. We do not intentionally use uploaded student work or contact-form messages for advertising profiling.

4. Legal Bases

Where the UAE federal Personal Data Protection Law applies, we process with consent or where a case expressly permitted by Article 4 applies, such as processing necessary to perform or take requested steps concerning a contract, or to meet a specific obligation under UAE law. We do not treat the GDPR concept of legitimate interests as a standalone UAE legal basis.

The applicable basis depends on the activity and our role. A school, parent, guardian or other responsible adult may provide instructions or authority for a learner, but that authority must be valid for the processing involved and does not permit unrelated use.

Users who provide information about another person must have authority to do so.

5. Sharing and Disclosure

We may share information with infrastructure, authentication, database, analytics, communications, payment, security, customer support and AI-processing vendors that help us operate the service. These vendors are authorised to process information only as needed to provide services to us or as otherwise permitted by law.

We may also disclose information if required by law, legal process or a valid governmental request; to enforce our agreements; to investigate security or abuse issues; to protect rights, safety and property; or as part of a merger, acquisition, financing, restructuring or sale of assets.

We do not publish private uploaded work, private marking results or private classroom records unless you or an authorised account user choose to share them.

6. AI Processing

Some educational features may process uploaded work, prompts, answers, images, metadata and generated outputs using automated systems. Outputs can be inaccurate, incomplete or unsuitable for a particular educational decision. You should review important results against authorised source material and qualified human judgement.

Do not upload highly sensitive personal information, medical information, financial information, government identifiers, confidential third-party material or content you are not authorised to process.

7. Retention

We keep information for as long as reasonably necessary to provide the service, maintain accounts and records, resolve disputes, enforce agreements, comply with legal obligations, maintain security and support backups. Browser-stored files or settings may remain on your device until you delete them or clear browser storage.

When information is no longer needed, we will delete, de-identify or aggregate it where reasonably practicable, subject to legal, security and backup requirements.

8. Children, Schools and Learners

Maiths is an educational service and may be used by learners only where permitted by applicable law and by a parent, guardian, school or other authorised adult where required. Adults and institutions using Maiths with learners are responsible for obtaining any required notices, consents or permissions.

If you believe a child has provided personal information without required authority, contact us so we can review the request.

9. International Transfers

The service may use infrastructure, authentication, payment, contact-form and AI providers that process information outside the UAE. The actual destinations depend on the configured service and, for routed AI inference, the selected downstream provider.

A transfer is not made lawful merely because it uses encryption. Before relying on a cross-border transfer, Maiths must identify the destination and recipient and establish an applicable UAE legal route and safeguards. Contact us for the current transfer information relevant to your request.

10. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information. No online service, transmission method or storage system can be guaranteed to be completely secure.

11. Your Choices and Rights

Depending on the law that applies, you may request information and access, a portable copy where the legal conditions apply, correction, erasure, restriction or cessation, objection, consent withdrawal, or human review of a qualifying automated decision. You may also have the right to complain to the competent data protection authority.

Signed-in users should use the Privacy section in their workspace so the request is tied securely to their account. You may also use the contact page if you cannot sign in. We verify identity and authority proportionately before disclosing, changing or deleting data. Some information may be limited or retained where law, security, another person's rights or a legal claim requires it.

12. Changes

We may update this Privacy Policy from time to time. The "Last updated" date shows when this version was last revised. Continued use of the service after an update means the updated policy applies from its effective date.

13. Contact

Privacy questions may be submitted through the Maiths contact page. Signed-in users can submit and track a request through the Privacy section of the workspace. A named controller address and DPO contact will be added when the operator and any Article 10 appointment are formally confirmed.