Privacy Policy

1. Introduction

My Math Learning Hub L.L.C. ("we," "our," or "the Hub") operates the website www.mymathlearninghub.org and the Math Learning Hub platform. This Privacy Policy describes how we collect, use, store, and protect personal information from students, parents and guardians, teachers, and other users of our platform.

We are committed to protecting student privacy. Our platform was designed from the ground up with privacy as an architectural principle, not an afterthought. We comply with applicable federal and state laws governing student data privacy, including the Children's Online Privacy Protection Act (COPPA) and the California Student Online Personal Information Protection Act (SOPIPA), and we align our practices with the Family Educational Rights and Privacy Act (FERPA).

We do not display advertisements on our platform. We will never display advertisements on our platform. This is a permanent commitment.

2. Information We Collect

2.1 Account Information

When a user creates an account, we collect:

• Full name
• Email address
• Role (for example, student, teacher, or parent)
• Pronouns (optional, provided by the user)

2.2 Student Learning Data

During platform use, we collect the following data to support personalized learning:

• Responses to practice questions and assessments
• Diagnostic assessment results and domain gap profiles
• Skill progress, mastery levels, and tier advancement
• Mood check-in selections (green, yellow, or red indicators)
• Micro-reflections written during practice sessions
• Thinking tool usage (which interactive tools students use and when)
• Session timestamps and learning event logs

2.3 Information We Do Not Collect

We do not collect:

• Social Security numbers or government-issued identification
• Financial or payment information
• Location data, IP address tracking, or device fingerprinting for profiling purposes
• Biometric data
• Information from social media accounts
• Browsing history outside of the platform

3. How We Use Information

We use student data exclusively for educational purposes. Specifically:

• To personalize the learning experience by adjusting difficulty, pacing, and skill recommendations based on student performance
• To provide teachers with actionable insights about student progress, skill mastery, and areas requiring support
• To generate AI-assisted narrative reports for teacher use in parent conferences and consultations (see Section 5 for details)
• To provide parents and guardians with a growth-focused view of their child's learning trajectory
• To improve and maintain the platform's educational effectiveness

We will never use student data to:

• Advertise or market to students, parents, or any other users
• Create advertising profiles or target advertisements of any kind
• Sell, rent, or trade student data to any third party for any purpose
• Build non-educational profiles of students
• Train artificial intelligence or machine learning models

4. Role-Based Data Access

Access to student data within the platform is controlled by role and enforced at the database level through Row-Level Security (RLS) policies. This means access boundaries are architectural, not merely policy-based.

4.1 Students

Students can view only their own learning data, including their progress, practice history, and reflections. Students cannot view other students' data.

4.2 Teachers

Teachers can view learning data only for students assigned to them. They can see skill progress, mastery levels, diagnostic results, mood check-in patterns, tool usage, and micro-reflections. Teachers use this data to inform instructional decisions. Where the platform supports additional educator roles, such as a learning specialist supporting intervention, access for those roles is likewise scoped only to the students they serve.

4.3 Parents and Guardians

Parents and guardians see a growth-focused view of their child's learning that includes strengths, learning trajectory, and current skills. Parents do not see:

• Individual question scores or raw assessment data
• Mood check-in data
• Private micro-reflections written during practice

This boundary exists to protect students' private learning space. Access is scoped per family and protected by database-level Row-Level Security, with server-side verification actively being hardened. The teacher serves as the mediator between the student's learning experience and the parent's need for information.

4.4 Administrators

Platform administrators have access to system-level data for the purpose of user management, platform maintenance, and aggregate reporting. Administrative access is restricted to authorized personnel of My Math Learning Hub L.L.C.

5. Third-Party Services

We use the following third-party services to operate the platform:

5.1 Supabase (Database and Authentication)

Student data is stored in a Supabase-hosted PostgreSQL database. Supabase provides authentication services and database hosting. Data is encrypted in transit (TLS) and at rest. Our database instance is hosted on Amazon Web Services (AWS) infrastructure. Supabase's privacy policy is available at supabase.com/privacy.

5.2 Netlify (Website Hosting)

The platform's front-end files are hosted on Netlify. Netlify does not have access to student data stored in the database. Netlify's privacy policy is available at netlify.com/privacy.

5.3 Anthropic API (AI Narrative Generation)

When a teacher requests an AI-generated narrative report, the platform sends relevant student data (name, diagnostic results, skill progress, gap profiles) to Anthropic's API to generate the narrative. This is the only circumstance in which student data is transmitted to a third-party service.

Important safeguards regarding this service:

• Anthropic does not retain API inputs or outputs after processing
• Anthropic does not use API data to train its AI models
• Narrative generation is initiated only by an authorized teacher, never automatically
• The generated narrative is stored within our platform and is accessible only to the teacher and administrators

5.4 Services We Do Not Use

We do not use Google Analytics, Facebook Pixel, advertising networks, data brokers, or any tracking services. We do not embed third-party tracking scripts on our platform.

6. Data Security

We implement the following security measures to protect student data:

• Row-Level Security (RLS) policies across all database tables, ensuring users can only access data they are authorized to view
• Origin-validated messaging across all platform components to prevent cross-site data leakage
• Content Security Policy (CSP) headers restricting script execution sources
• HTTPS encryption for all data in transit
• Manual account provisioning by administrators, with self-serve registration closed, preventing unauthorized account creation
• No client-side exposure of administrative credentials, invite codes, or API keys
• Role-based access controls enforced at the database level, not merely the application level

7. Data Retention and Deletion

We retain student data only for as long as it is needed to provide educational services. Specifically:

• Student learning data is retained for the duration of the student's use of the platform
• Upon written request from a student's parent or guardian, or from the school the student attends, we will delete all personally identifiable student data within 30 calendar days
• If a student stops using the platform, a parent, guardian, or the student's school may request deletion or a copy of the student's data at any time

To request data deletion, contact us at nive@mymathlearninghub.org.

8. Parental Rights

Parents and guardians of students using the platform have the right to:

• Review the personal information we have collected about their child
• Request correction of inaccurate information
• Request deletion of their child's data
• Refuse further collection of their child's data (which may require discontinuing use of the platform)

To exercise these rights, parents may contact us at nive@mymathlearninghub.org or contact their child's teacher, who can facilitate the request.

9. Children's Privacy (COPPA)

Math Learning Hub is directed to students in grades 7 through 12. The current pilot enrolls only students who are 13 years of age or older, and we do not knowingly collect personal information from children under 13.

If a student under 13 is enrolled in the future, we will obtain verifiable parental consent before collecting that child's personal information, and we will collect only the information reasonably necessary to provide the educational service. We do not condition a student's participation on the disclosure of more information than is reasonably necessary.

Parents and guardians may review, request deletion of, or refuse further collection of their child's information at any time by contacting us at nive@mymathlearninghub.org.

10. California Student Privacy (SOPIPA)

In compliance with the California Student Online Personal Information Protection Act (SOPIPA), we affirm that:

• We will not use student data for targeted advertising or any form of advertising
• We will not sell student data to any third party
• We will not use student data to create profiles for non-educational commercial purposes
• We will not disclose student data except as described in this Privacy Policy or as required by law
• We implement and maintain reasonable security procedures to protect student data
• We will delete student data at the request of a parent or guardian, or the school the student attends

11. Artificial Intelligence and Student Data

Our platform uses AI solely for generating narrative learning reports at the request of authorized teachers. We make the following commitments regarding AI and student data:

• We will never use student data to train artificial intelligence or machine learning models
• AI-generated narratives are produced on-demand by teachers, never automatically
• The AI service provider (Anthropic) does not retain student data after processing
• Students are never subject to automated decision-making that affects their educational opportunities

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. If we make material changes, we will notify users through the platform and update the "Last Updated" date at the top of this document. Continued use of the platform after notification constitutes acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: