Privacy Policy

Last updated: July 11, 2026

Epic Math Adventures ("EMA", "we", "us") is committed to protecting the privacy of your family. This policy describes what data we collect, how we use it, and your rights.

What We Collect

• Account data: your email address and password (stored via Supabase Auth, never in plaintext)
• Child profile data: name, age, grade levels, selected piece, story genre preferences, and progress data (stone answers, battle scores, concept mastery)
• Usage data: which features are used and when (aggregate, not sold or shared)
• Optional: child photo and parent/companion photo — stored only if you upload them, used only for personalized adventure images

What We Don't Collect

• We do not collect payment card numbers (handled by Stripe directly)
• We do not collect government IDs, social security numbers, or sensitive personal identifiers
• We do not collect school names, class lists, or educational records

How We Use Your Data

• To generate personalized missions for your child
• To track concept mastery and provide parent-facing progress reports
• To maintain your account and subscription
• To improve the product (aggregate, anonymized)

Third Parties

We use the following third-party services, each bound by their own privacy policies:

• Supabase — authentication and data storage (Data Processing Agreement in place)
• Railway — application hosting
• Anthropic / OpenAI — AI content generation (prompts contain no personally identifiable information)
• Stripe — payment processing (we never see your card number)

We do not sell your data to any third party. We do not use your data for advertising.

Children's Privacy (COPPA)

Epic Math Adventures is designed as a family product. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

• Account creation is parent-only. We do not allow children to create accounts. All accounts are created by a parent or legal guardian who is at least 18 years old.
• Verifiable parental consent. By creating an account and adding a child profile, you confirm that you are the parent or legal guardian of the child and consent to the collection and use of the child's profile data (name, age, grade level, learning progress) as described in this policy.
• What child data we collect: child's first name (or any name the parent provides), age, grade level, story genre preferences, photos (only if uploaded by the parent), and learning progress data (problem answers, concept mastery scores, session history).
• How child data is used: to generate personalized math missions, track learning progress, and display progress reports to the parent. Child data is never used for advertising and is never sold.
• AI content generation: story prompts sent to Anthropic and OpenAI include the child's first name and age for story personalization. No other personally identifiable information is included in AI prompts. Both Anthropic and OpenAI are bound by their own data processing agreements.
• No behavioral advertising. We do not show advertisements in the app. We do not share child data with advertising networks or data brokers.
• Parental access and deletion. Parents may review, update, or delete all child data at any time by logging into their account or contacting us at privacy@epicmathadventures.com. We will process requests within 30 days.
• COPPA contact. For all privacy inquiries related to children's data, including parental access and deletion requests, contact us at privacy@epicmathadventures.com. We will respond within 30 days.
• Third-party processors. Child profile data is stored on Supabase (EU Standard Contractual Clauses) and hosted on Railway. No child data is shared with any other third party.

Security

We use industry-standard security practices: all data transmitted over HTTPS, passwords stored as hashed credentials via Supabase Auth, per-user data isolation enforced at the database level, and no storage of payment card numbers (handled entirely by Stripe).

Data Retention & Deletion

Your account data is retained for as long as your account is active. You may delete your account and all associated data — including all child profiles and learning history — at any time by emailing contact@epicmathadventures.com. We will complete deletion within 30 days and confirm when done.

Changes to This Policy

We will notify you by email if we make material changes to this policy that affect how we collect or use your child's data. For material changes that affect how we collect or use your child's data, we will obtain fresh consent from you before the change takes effect. For non-material changes, continued use of the service after the notification period constitutes acceptance.

Contact

Questions about this policy or your data? Email contact@epicmathadventures.com. We respond within 5 business days.