Privacy policy.

This policy is for the parents and guardians who arrange tutoring with us, the students we teach (who are usually under 18), students who create a free self-serve revision account (with or without the optional Mappth Plus subscription), visitors to mappth.com and mappth.net (which point to the same site), and anyone who uses the Mappth app. It covers Mappth — the website, the application process, and the student and parent portals with the learning tools inside them — and our separate, free Mappth app on the App Store and Google Play.

• When you apply:the parent or guardian’s name and email, the student’s name and email, their year group and subject, your goals for the student, and any message or rough availability you share.
• When a student is onboarded: date of birth, school, year group, current and target grades, any target university, exam board, and curriculum level.
• From lessons: notes on what each session covered, what to work on next, and homework set — plus the short per-lesson summary we write for parents.
• From the Learning OS:the questions a student attempts and their answers, quiz, worksheet and mock-exam responses and self-marks, conversations with the AI study tools, which topics they’ve studied, time spent, and a derived “mastery” score per topic.
• When you create a free revision account: the student’s name, email, date of birth (used to check they’re old enough to hold their own account), year group, subject, level and exam board.
• For billing: invoice records and, for Mappth Plus, your subscription status and renewal dates. Card payments are handled entirely by Stripe — we never see or store card numbers.
• For your account: the email address used to sign in and basic login activity. Sign-in is by secure email link or a password you choose — passwords are stored only as a secure hash by our authentication provider, never readable by us.
• Automatically:the basic technical logs our hosting provider keeps (such as IP addresses in server logs), used only to keep the site secure. We run no analytics. On our public marketing pages only — and only if you consent via the cookie banner — we use a Google advertising tag to measure whether our ads work (see “Advertising measurement” below). There are no tracking scripts of any kind inside the student and parent portals.

We use this information to teach the student well and tailor the Learning OS to them; to write parent summaries and keep you informed; to schedule and run lessons; to take payment; to keep accounts secure; and to improve Mappth. We never use students’ or families’ data for advertising, and we never sell it. The only advertising-related thing we do is measure, with your consent, whether our own ads led someone to our public pages — see “Advertising measurement” below.

Under UK data-protection law, we rely on: performing our contract with you; our legitimate interests in running and improving a safe service; and your consent where we specifically ask for it (which you can withdraw at any time). Where the person is a child, a parent or guardian provides consent and agreement on their behalf.

Most Mappth students are under 18. A parent or guardian sets up the relationship, agrees to this policy, and can see and exercise the student’s data rights at any time. We collect only what we need to teach, and we treat children’s data with extra care. If your family is outside the UK — for example in the US — we apply the same protections and honour the children’s-privacy rules that apply to you.

The standalone Mappth app works differently — it has no account and collects no personal information about who is using it — so the app sections below explain our approach to younger users there.

AI is core to how Mappth helps students, so we want to be clear about it. We use Anthropic’s Claude to power features like the Socratic study tools, to draft the parent summaries the tutor then reviews, and to generate practice material.

We do not use student data to train external AI models, and our AI providers do not train their models on it either. Anything an AI produces that reaches a parent — such as a lesson summary — is reviewed by a human before it’s sent. Inside Mappth, students and parents can always tell what is AI and what is the tutor.

The Mappth app is our free GCSE maths revision app for iOS and Android, separate from the tutoring service and from the student and parent portals described above. It needs no account: there is no login, and we don’t collect your name, email, or any profile.

Your progress — your flashcard review state, your practice and quiz results, and your daily usage counters — is stored only on your own device. It isn’t sent to us, and we can’t see it. If you delete the app, that progress is removed with it.

The app contains no analytics, no advertising, no third-party trackers, and no location collection, and it sets no cookies. The only time information leaves your device is if you choose to use the optional AI assistant, which we explain next.

The app is free. Its one paid feature is an AI assistant, available on a single subscription of £5 per month. When you use it, the text you type is sent to our server, which forwards it to Anthropic (the makers of Claude) to generate a reply. This means the words you type leave your device and are processed by Anthropic as our service provider.

We don’t store what you type — your messages are used to generate the reply and aren’t kept on our servers afterwards. Please don’t enter personal information you don’t need to — your name, contact details, or anything identifying — as the assistant only needs the maths you’re working on. We don’t use what you type to train AI models, and Anthropic doesn’t train its models on it either.

Our legal basis for processing what you type is performing our contract with you — delivering the AI assistant you’ve subscribed to — together with our legitimate interest in keeping the service secure.

The app relies on a small number of service providers, each under data-protection terms:

• Anthropic — powers the AI assistant; receives the text you type when you use it
• RevenueCat— manages your subscription status; it works from the store’s purchase information and an anonymous identifier, not your name or email
• Apple and Google — distribute the app and handle the in-app subscription payment; we never see or store your card details
• Vercel — hosts the Mappth server that passes your AI messages to Anthropic

Anthropic processes data in the United States. Where your AI messages are transferred internationally, we rely on the safeguards required by UK data-protection law — the UK International Data Transfer Agreement (or the UK Addendum to the standard contractual clauses).

The app has no age gate and no account, and it collects no personal information beyond the AI text described above. Many of its users are GCSE students under 18. Because we hold no account and no profile, there is nothing for us to tie to a particular child; our advice to every user, whatever their age, is the same — don’t type personal information into the AI assistant. We’d encourage a parent or guardian to be involved in setting up the paid subscription for a younger user.

We don’t sell your data. For the tutoring service and the student and parent portals, we share data only with the service providers that make Mappth work, each under data-protection terms (the separate Mappth app uses its own smaller set of providers, listed in the app section above):

• Supabase — secure database, login, and file storage
• Anthropic — the AI behind our study tools
• Stripe — payments and invoicing
• Resend — sending email (such as summaries and login links)
• Vercel — hosting the website and portals
• Google — video lessons over Google Meet, and (with your consent, on the public marketing pages only) Google Ads conversion measurement

Some of these providers are based outside the UK. Where data is transferred internationally, we rely on the safeguards required by UK data-protection law, such as standard contractual clauses.

We keep teaching records — such as lesson notes and progress — for as long as we work with a student, and for a reasonable period afterwards, so we can pick up where we left off and meet our legal and accounting obligations. You can ask us to delete a student’s data at any time, and we’ll do so unless we’re legally required to keep it.

For the Mappth app, there’s nothing for us to keep: your progress stays on your device, and what you type into the AI assistant isn’t stored on our servers.

Your data is encrypted in transit and at rest. Access is restricted at the database level, so people only see the records they should, and we collect the minimum we need to do our job.

Under UK data-protection law you can ask us to: show you the data we hold; correct it; delete it; restrict or object to how we use it; or give you a copy to take elsewhere. To exercise any of these, email mappthtutoring@gmail.com.

If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk — though we’d appreciate the chance to put things right first.

For the standalone Mappth app, because there’s no account and we don’t store your progress or your AI messages, we usually hold no information about an app user to show, correct, or delete — but you can still contact us with any question.

We advertise Mappth (for example on Google). To know whether that advertising works, our public marketing pages — the homepage, the apply page, and these legal pages — can use Google’s advertising tag to record when a visit that came from one of our ads ends in a booked introductory call or a submitted application. That is the entire purpose: counting conversions. We don’t build audience profiles, and we don’t run product analytics.

This only uses cookies if you choose Allow on the cookie banner; if you decline (or ignore the banner), no advertising cookie is set. It exists only on the public pages: the student and parent portals, and everything a student works in, contain no advertising or measurement tags of any kind, and no lesson or learning data is ever shared with an advertising service.

We use a small number of essential cookies to keep you signed in and to remember preferences like your theme. We don’t use analytics cookies. The only non-essential cookie is the Google advertising cookie described in “Advertising measurement” above, set on our public marketing pages only and only if you consent via the banner — decline and it is never set. The student and parent portals use essential cookies only, and the Mappth app sets no cookies at all.

If we change this policy we’ll update the date above and, for significant changes, let families know directly. Questions? Email mappthtutoring@gmail.com.