Privacy Policy

1. Who we are

Tsang Kwan Tao
[to be added]
ICO registration: [to be added]
Privacy contact: kwantao2004@gmail.com

2. What we collect

Account information

• Your email address and name, provided through our sign-in provider
• Your role (student, teacher, parent, or organisation admin)
• The month and year you were born — never the day. We use it only to check you are old enough for an account and to keep the service appropriate for your age
• Your subscription plan and a customer reference from our payment provider

Learning data

• Every question you attempt: whether you got it right, how confident you said you were, how long you took, and when
• Scheduling data used by the spaced-repetition algorithm
• Quiz sessions, assignment submissions and exam papers you generate
• Derived figures such as topic mastery, predicted grade and streak

Content you create or upload

• Notes, folders, tags, bookmarks and question banks
• Documents you upload for question extraction, and the questions extracted from them
• Your conversations with the AI assistant, kept so you can return to them

Relationships

• Parent–student links, and who approved them
• Classroom membership and organisation membership

Mailing list

If you join the waitlist we store your email address, the date you consented and which version of the wording you agreed to. That is separate from having an account — you can be on the list without one. Every marketing email carries an unsubscribe link, and unsubscribing takes one click with no login. Deleting your BaldMaths account also removes you from the list.

Technical data

Standard server and security logs generated when you use the site, including IP address and browser type. We do not use advertising cookies and we do not sell data to anyone.

3. Why we use it, and our lawful basis

We do not use your learning data for advertising, we do not profile you for marketing, and no decision with a legal or similarly significant effect is made about you automatically. Predicted grades are a study aid only — see the Terms.

4. Who sees your data

Other people using BaldMaths

• Parents see a linked child's progress only after the student has approved the link. A student can decline or remove it.
• Teachers see the progress of students in their classroom.
• Organisation admins see performance across their organisation's classes, including individual pupils' names, email addresses and recent question-by-question activity — not only totals. If your school bought your account, assume a school administrator can see your work.
• Everyone sees only what you explicitly publish to the Community section. Your notes are private by default.

Service providers

We use these processors to run BaldMaths. Each handles data only on our instructions.

We do not use Google Fonts, analytics scripts, or any other third party that would see you simply for visiting a page. Fonts are served from our own domain.

International transfers

Some of these providers are outside the UK. Where that happens we rely on UK International Data Transfer Agreements or the UK Addendum to the EU Standard Contractual Clauses, together with a transfer risk assessment.

Please note in particular: when you ask for new or similar practice questions, the question text is sent to DeepSeek, whose processing takes place in China. What you type into the AI assistant is not — that goes to Google (Gemini) in the United States, because it is where you write in your own words and most of our users are under 18.

Either way, do not put personal details about yourself or anyone else into the AI assistant or your questions.

What the AI assistant can see

So that it can help with your own work rather than only with maths in general, the assistant is given your message, whatever is on the page you are looking at, and a summary of your own account: the names of your question banks and notes, your classrooms and assignments, and how you have been doing in practice — your accuracy and your weakest topics. It can also open your own notes, questions and mark schemes when you ask it about them.

It only ever reads material you could already open yourself, and it can only read — it cannot change or delete anything. We do not send your name or email address, and we do not send anyone else's name — not your teacher's, not your classmates'.

You can turn this off. Settings → AI tutor → “Let the AI tutor use my account”. With it off, nothing about your account is sent: the assistant only sees the message you type, and answers as a general maths tutor. It is on to begin with, because it is what lets the tutor explain the question already in front of you. You can change it back at any time, and it takes effect on your next message.

Others

We disclose data if the law requires it, to protect someone's safety, or to a buyer if the business is sold (you would be told first).

5. If you are under 18

We follow the ICO's Age Appropriate Design Code. In practice that means:

• your notes and question banks are private unless you publish them;
• a parent cannot see your progress until you approve the link, and you can remove it;
• we do not show you adverts or track you across other websites;
• we collect only what the features you use actually need;
• you can delete your account and data yourself at any time from Settings, and we do not make it difficult.

Parents and guardians can contact us at kwantao2004@gmail.com about their child's data. We may ask for proof of the relationship before acting, so we do not disclose a young person's data to the wrong adult.

6. How long we keep it

• While your account is open: account details, learning history and content are kept so your progress and revision schedule work.
• After you delete your account: deletion from Settings is immediate — your practice history, notes, question banks, AI conversations and connections are removed as part of the same request, along with your entry on any mailing list. The only things kept are the payment records below.
• Payment records: kept for six years, as UK tax law requires.
• AI conversations: deleted after 12 months without activity, by an automated nightly job.
• Security and error logs: kept for as long as our hosting and error-reporting providers retain them — currently up to 90 days. We do not extend that.
• Content you published to Community: removed from Community, but copies other users forked remain with them.

7. Your rights

Under UK GDPR you can ask us to:

• give you a copy of your data, or send it to another service;
• correct anything wrong;
• delete your data;
• restrict or object to how we use it;
• withdraw consent where we relied on it.

Email kwantao2004@gmail.com and we will respond within one month. There is no charge.

If you are unhappy with our response you can complain to the Information Commissioner's Office — ico.org.uk or 0303 123 1113. We would rather hear from you first so we can put it right.

8. Security

Data is encrypted in transit and at rest, access is restricted to those who need it, and passwords are handled entirely by our sign-in provider — we never see them. No system is perfectly secure; if a breach puts your rights at risk we will tell you and the ICO as the law requires.

9. Cookies

We use cookies that are strictly necessary — keeping you signed in and remembering your theme and preferences. These do not require consent. We do not use advertising or cross-site tracking cookies.

10. Changes

If we make a significant change to this policy we will email registered users and update the date at the top of this page.