Privacy Policy

Last Updated: August 2026

Teach Me Maths ("we", "us", or "our") operates the web platform at https://teachmemaths.co.nz (the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we store it, who can access it, and how you can request its deletion. We comply with the New Zealand Privacy Act 2020 and the Information Privacy Principles it sets out.

This Privacy Policy should be read alongside our Terms of Service.

1. What Personal Information We Collect

We collect the following types of personal information:

Account Information

  • Email address — collected when you sign up via Google OAuth or email registration.
  • Full name — as provided by your Google account or entered during signup.
  • Role — whether you are a student, teacher, or administrator.

Learning Progress Data

  • Quiz scores — your score and total for each quiz you complete.
  • Completion dates — when you first and last completed each quiz.
  • Attempt counts — how many times you have attempted each quiz.
  • Resume state — if you use "Save & Exit", your current question number, score so far, and answer history are stored so you can continue on another device.

Class & School Information

  • Class membership — which class(es) you belong to or teach.
  • School license association — which school license your account is linked to.
  • Assignments — which quizzes your teacher has assigned to you and their due dates.

School License Information (for subscribing schools)

  • School name — the name of the subscribing institution.
  • Contact email — the primary contact at the school (typically an IT or admin staff member).
  • Approximate student count — used for license tier verification.

2. Why We Collect This Information

  • To provide the Service: Your account information allows you to log in, access content, and track your progress across devices.
  • To track learning progress: Quiz scores, completion dates, and attempt counts let students and teachers monitor achievement and identify areas needing support.
  • To manage classes and assignments: Class membership and assignment data let teachers organise students, set tasks, and view class-wide progress.
  • To administer school licenses: School name, contact email, and student count are used to manage subscriptions and verify that access is limited to authorised users.
  • To improve the platform: Aggregate, de-identified data about quiz performance may be used to identify content that needs improvement.

We do not collect information for marketing, profiling, or sale to third parties. We do not use your data to train external AI models or sell it to advertisers.

3. How We Store and Protect Your Data

Hosting: Your data is stored in a secure cloud database hosted by Base44, our platform provider. Data is stored and processed on servers located in the United States. By using the Service, you acknowledge that your personal data will be transferred to and processed in the United States. We take reasonable steps to ensure that this cross-border transfer is subject to appropriate safeguards consistent with the requirements of the New Zealand Privacy Act 2020. All data in transit is encrypted using HTTPS/TLS. The platform enforces HTTP Strict Transport Security (HSTS) to prevent downgrade attacks.

Authentication: Account access is managed through Google OAuth 2.0 single sign-on. We do not store passwords. Session tokens are stored as strictly necessary cookies and are not shared with third parties.

Access controls: The platform enforces role-based access control. Students can only view their own progress data. Teachers can view progress data for students in their own classes. Administrators can view data across their school. Access is enforced at both the application routing layer and the database row-level security layer.

No third-party tracking: We do not use Google Analytics, advertising pixels, or third-party tracking cookies. The only third-party service involved in authentication is Google (for OAuth sign-in), which receives your email address and name as part of the sign-in process.

4. Who Can Access Your Data

  • The student themselves — full access to their own progress, scores, and assignment data.
  • The student's teacher — access to progress and scores for students in their classes, for the purpose of monitoring learning and reporting.
  • The school's administrator — access to class rosters, school license details, and aggregate progress data.
  • Teach Me Maths platform administrators — limited access for support, troubleshooting, and license management. We access individual student data only when required to resolve a support request.
  • Base44 (platform provider) — acts as a subprocessor providing database hosting and infrastructure. Base44 does not access your data for its own purposes.

We do not share personal information with any other third parties. We do not sell or rent personal data under any circumstances.

5. Data Retention

Active accounts: Your data is retained for as long as your account is active and, for school-licensed users, for the duration of the active school license.

After a school license expires or is terminated: Student progress data, class membership, and assignment records linked to that school are retained for 18 months (to allow for renewal or data export), then permanently deleted.

Individual free accounts: If you stop using the Service, your data is retained for 12 months of inactivity, then deleted.

On request: You or your school administrator can request deletion of your data at any time (see Section 6 below).

We do not retain personal information longer than is necessary for the purposes for which it was collected, in accordance with Information Privacy Principle 9.

6. Your Rights & Requesting Deletion

Under the New Zealand Privacy Act 2020, you have the right to:

  • Access your personal information — you can request a copy of all data we hold about you.
  • Correction — you can request that we correct any inaccurate or out-of-date personal information.
  • Deletion — you or your school administrator can request that we delete your personal information.
  • Complaint — you can lodge a complaint with the Office of the Privacy Commissioner if you believe we have breached your privacy.

To exercise any of these rights, please contact us at jordan@teachmemaths.co.nz. We will respond to your request within 20 working days, as required by the Privacy Act.

For school accounts: A school administrator (e.g., principal, DP, or IT manager) may request bulk deletion of all student data for their school. This request should be sent from an official school email address.

7. Data Breach Notification

In the event of a confirmed security incident or data breach impacting personal information, we will notify the designated contact at affected subscribing schools without undue delay to enable compliance with statutory reporting obligations under the Privacy Act 2020. This notification will include:

  • The nature of the breach and what data was affected.
  • The steps we have taken to contain and remediate the breach.
  • Any actions the school or affected individuals should take.

We will also notify the Office of the Privacy Commissioner where required under the Privacy Act 2020.

8. Cookies

The Service uses strictly necessary cookies for authentication (keeping you logged in). These cookies are required for the Service to function and are not used for tracking or advertising. We do not use analytics cookies, advertising cookies, or third-party tracking cookies. No cookie consent banner is displayed because no non-essential cookies are set.

9. Third-Party Services

Google OAuth 2.0: Used for account authentication. When you sign in with Google, Google shares your email address and name with us. Google's use of this information is governed by Google's own Privacy Policy. We do not share any additional data back to Google.

Base44 (platform provider): Provides the database hosting, application hosting, and infrastructure for the Service. Base44 acts as a subprocessor and processes personal data only on our behalf. Base44 hosts data on servers located in the United States. For information about Base44's security practices, see https://base44.com/security.

KaTeX (CDN): Used to render mathematical notation. Loaded from jsdelivr CDN. No personal data is sent to this service — it is a client-side rendering library only.

We do not use any other third-party services that process personal data.

10. Children's Privacy

Teach Me Maths is designed for use in secondary schools (typically Years 9–13, ages 13–18). Subscribing schools act in loco parentis and are responsible for obtaining any parental notification or consent required under their internal policies before authorising students under the age of 16 to use the Service. We do not knowingly collect personal information from students outside of an authorised school context or individual free account signup.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users and subscribing schools of significant changes via email or a prominent notice on the Service. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For any questions about this Privacy Policy, or to request access, correction, or deletion of your personal information, please contact us at:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Privacy Commissioner at [www.privacy.org](https://www.privacy.org).nz or by calling 0800 803 904.