Privacy Policy

Last updated: 21 July 2026Effective: 21 July 2026Version: 1.0

This Privacy Policy explains how we collect, use, disclose and protect personal information when you and your child use MathoKido. It forms part of, and should be read together with, our Terms & Conditions.

1. Who we are

MathoKido is operated by Kevin Kuok Bing Tan trading as MathoKido (ABN 91 131 105 235) of 2 Wynette Avenue, Balwyn VIC 3103, Australia (we, us, our). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

"Personal information" means information or an opinion about an identified, or reasonably identifiable, individual. In this policy, the account holder is the parent or guardian who creates the account, and a child is a child profile they create.

2. Information we collect

2.1 Account holder (parent/guardian) information

• your name (or first name) and email address;
• your account password (stored only in a securely hashed form — we never see your plain password);
• subscription and billing status. Card payments are handled by Stripe; we do not collect or store your full card number.

2.2 Child profile information

• a first name or nickname you choose for the child;
• the child's year level;
• a chosen avatar and a User ID for signing in;
• a secret sign-in "tune" — we store only a one-way cryptographic hash of it, not the tune itself.

2.3 Learning information ("Inputs")

• answers, handwritten working captured on the canvas, and messages your child submits;
• where a voice feature is used, the words your child speaks are converted to text as they go — we keep only that text, not any audio recording of your child's voice;
• progress data — questions attempted, results, mastery scores, streaks, goals, revision papers, assessments, and reward/creature collections.

2.4 Technical and usage information

• device and browser type, approximate location derived from IP address, and log data such as access times, pages/screens used and errors, collected to operate and secure the Service.

We do not intentionally collect sensitive information (such as health, racial or religious information) and ask that you do not submit it.

3. How we collect it

We collect information directly from the account holder when you create an account, set up a child profile, subscribe, or contact support; automatically as the Service is used (technical and usage data above); and from our service providers (for example, subscription status from Stripe). We collect a child's information only with the consent of the account holder, given when the child profile is created.

4. How we use it

We use personal information to:

• provide and personalise the Service — generate tutoring responses, mark work, and track and display progress;
• create and manage accounts and child profiles, and authenticate sign-ins;
• process subscriptions, payments and refunds (via Stripe);
• respond to support requests, and send you service and account communications;
• maintain, secure, troubleshoot and improve the Service — for product improvement and research we use data on an anonymised or aggregated basis only;
• detect, prevent and address fraud, abuse, security issues and breaches of our Terms; and
• comply with our legal obligations.

We do not sell personal information, and we do not use children's personal information for advertising or marketing profiling.

5. Children's privacy

MathoKido is designed for children in Years 5 to 7, used through a child profile that a parent or guardian creates and supervises.

• We collect a child's personal information only with parental/guardian consent, obtained at the time the child profile is created.
• We do not serve third-party advertising to children, and we do not use children's information for marketing profiling.
• Marketing communications are sent only to the account holder, never directly to a child, and only where you have opted in.
• The account holder can view, correct or delete a child's profile and data from the account, or by contacting us.

6. AI and voice processing

The Service uses artificial intelligence — including large language models supplied by third parties — to generate tutoring responses, and text-to-speech services to produce spoken responses. To do this, we send your child's Inputs (for example, their question, working or message) to these providers, which process the data to return a response under their own terms and our agreements with them. Where a voice feature lets your child speak, their speech is converted to text and only that text is used — we do not store an audio recording of your child's voice.

These providers may process data outside Australia (see clause 8). We apply filters and controls intended to keep the Service on-topic and age-appropriate, and we restrict access to a child's stored Inputs to that child's profile and the account holder, behind the account login.

7. Who we share it with

We share personal information only with service providers who help us run MathoKido, and only as needed for them to perform their service. Our current providers include:

We may also disclose personal information where required or authorised by law, to enforce our Terms, to protect the rights or safety of any person, or in connection with a sale or transfer of our business (in which case the recipient will be bound to handle it consistently with this policy). We do not sell personal information.

8. Overseas disclosure

Your account and learning data are stored in Australia — our database, storage and website hosting are in the Sydney region. Some processing still happens outside Australia: in the United States, where our AI and text-to-speech providers generate responses and our payment provider processes payments. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the Australian Privacy Principles, including through our contracts with those providers. By using the Service, you consent to these overseas disclosures for the purposes described in this policy.

9. Data security

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure — including encryption in transit, access controls, and hashing of passwords and sign-in tunes. No system is completely secure; if we become aware of a data breach likely to result in serious harm, we will notify affected individuals and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

10. How long we keep it

We keep personal information for as long as your account is active. If you close your account, all student data and associated records are permanently removed within 14 days of the account being closed. Anonymised or aggregated data that can no longer identify you or your child may be kept, and any residual copies in backups are deleted on our ordinary backup cycle. You can also ask us to delete a child profile, or your account and associated data, at any time (see clause 11).

11. Your rights and choices

You may:

• Access and correct — request access to, or correction of, your and your child's personal information;
• Delete — request deletion of a child profile, or of your account and associated data;
• Opt out of marketing — unsubscribe from marketing emails at any time via the link in the email or by contacting us.

To make a request, email support@mathokido.com. We may need to verify your identity first. We aim to respond within a reasonable time and, in any case, within the timeframes required by law. There is no fee to make a request, though a reasonable charge may apply for access in limited circumstances permitted by law. If we refuse a request, we will tell you why and how to complain.

12. Marketing

Where you have opted in, we may send the account holder occasional emails about MathoKido features, offers and updates. We never send marketing directly to a child. You can opt out at any time; we will still send essential service and account messages (for example, billing, security and important changes).

13. Cookies and analytics

We use only cookies and similar technologies that are necessary to run the Service — for example, to keep you signed in and to remember your settings. We do not use them for advertising, and we do not use non-essential tracking or analytics cookies.

14. Complaints

If you have a privacy concern or complaint, please contact us first at support@mathokido.com so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

15. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new effective date, and where a change materially affects how we handle your personal information, we will take reasonable steps to notify you.

16. Contact us

For any privacy question, request or complaint:

Email: support@mathokido.com

Version 1.0 — 21 July 2026