Privacy Policy

What we collect

Magic Math Sparkies collects the minimum information needed to provide a math learning experience for your child: your child's display name (kid-chosen, not legal), their companion choice, their worksheet answers, and a parent email address used only for account access and service updates. We do not collect addresses, phone numbers, payment data (Stripe handles that directly), or precise location.

Singapore PDPA + Children's Privacy

Magic Math Sparkies is built for Singapore primary school students. We follow the Singapore Personal Data Protection Act (PDPA) and apply the strictest available children's privacy standards (including COPPA-equivalent controls) by default. Parents verify accounts and control all data deletion requests.

Your right to a copy of your data

You can download everything we hold on your family yourself, without asking us. Sign in to Parent Mode, open Settings, and use Download my data under Your data and privacy. You get one file holding your account details, your consent record, and every child's progress, worksheets, badges and rewards. Nothing to request and nothing to wait for.

Right to deletion

The same place holds the delete control: Parent Mode, then Settings, then Delete my account and all our data. We show you exactly what disappears and what stays, and ask you to confirm. When you confirm, your account and every child linked to it are removed right away. There is no waiting period and there is no undo, so take a copy of your data first if you would like to keep one. Afterwards we hold only the things listed below, and nothing else. If you would rather write to us, email [email protected] from your account email address and we will do it for you.

• Payment and tax records, if you ever paid us. Singapore tax law makes us keep these for five years. They sit with our payment provider and hold no learning data at all.
• Your email address, with the dates of your free week and how many worksheets it used. This is the only way to tell that the free week has already been used, so it cannot be started a second time. It also holds the day your account was deleted. There is no name, no child and no schoolwork with it.
• A copy of your family inside our encrypted backups, until each one ages out. Backups are how we would put the service back after a failure, so the copies taken before today still hold your family. They are encrypted, nobody opens them except to recover the service, and they are deleted on a schedule: nightly backups after two weeks, and one backup a month for a year. Within a year the last copy is gone on its own.

How we use AI

When your child's answer needs more than a tick, we send that question, their answer, their written working, and the name they chose for themselves in the app to our AI provider, so the answer can be read and marked and a helpful question sent back. A clearly correct answer is marked on the device and nothing is sent at all.

If your child is trying the app without an account, nothing personal is sent. The request carries the fixed word "Explorer" instead of a name, and no written working.

When the Practice Dungeon re-teaches an idea your child keeps missing, we also send their level, the topic, how many times that same slip has come up with a short note of what it was, and their companion's name.

We never send your email address, your address, your payment details, or your child's school.

AI does not write our lessons or worksheets. Those are built and checked in advance, so no child's data is involved in making them.

Third-party services

We use Anthropic Claude (the AI provider described above), Resend (transactional email), Railway (hosting), Stripe (payment processing), and Cloudflare R2 (asset CDN). Data Processing Agreements with each provider are in preparation.