Privacy notice
Last updated 12 October 2026.
The short version
- Mathable keeps your maths chats, and any photos in them, for 30 days, then deletes them.
- An AI called Claude, made by Anthropic, writes the tutor’s replies. Anthropic does not use your chats to train its AI.
- If a parent or guardian set up your account, they see your progress: topics, scores and how often you practise. They never see your conversations.
- A small number of Mathable staff may read conversations to check the tutor is teaching well and safely.
- No adverts. We never sell your data, and we don’t track you around the web.
- You can download or delete your data yourself, at any time.
- Nobody watches your chats as they happen. If you are worried about your safety, talk to an adult you trust, or call Childline free on 0800 1111.
The rest of this notice gives the detail. Questions go to support@getmathable.com.
Who we are
Mathable is a trading name of Neural Ltd, a company registered in England and Wales (company number 17428669), whose registered office is at 7 Langford Road, Stockport, SK4 5BR. Neural Ltd is the data controller: it decides how your information is used and is responsible for it. It is registered with the UK’s data protection regulator under registration number ZC266762.
For anything about your data, email support@getmathable.com with “Privacy” in the subject, or write to us at the address above.
Who this notice is for
Learners aged 13 and over who use Mathable, parents and guardians who set up a household for a learner, and anyone visiting our website. Mathable is not for children under 13, and we do not knowingly hold their information. If you think a child under 13 has an account, tell us and we will delete it.
What we collect
When you create an account
Your email address and password, and the codes used to confirm a sign-in. These are provided by Clerk, our sign-in provider, which holds them; Mathable keeps only an identifier for your account. We do not see your password.
When a household is set up
The learner’s first name, year group (optional) and age band (13–15, 16–17 or 18+). We do not ask for a date of birth, school, address, phone number or photo of anyone. We also keep a record of the confirmation ticked at sign-up: which version of the words was shown, when, who ticked it, and a fingerprint of the exact words. Beta and invite codes are stored only as fingerprints, never as the code itself.
When you use the tutor
The messages you write, the working you enter, the tutor’s replies and the results of our maths checks; photos you send of a question or your working; your learning goal and tutoring preferences (such as how detailed hints should be); answers you type in practice sets and tests; whether you found a reply helpful; and anything you write when you report a problem with a question. Answers you write to “explain it back” are sent to be checked, then discarded.
What we work out
How secure each topic looks, with a daily reading so progress can be shown over time; the topic of each chat; and two working estimates, how confident and how frustrated you seem. The estimates are worked out by a simple rule from words you use (such as “stuck” or “got it”) and from whether your answers check out. They are used only to choose how much help the tutor gives.
When you pay
Payments are handled by Stripe. You give your card and billing details to Stripe directly; we never see your card number. We keep Stripe’s reference for your account, whether the subscription is active, and when it renews.
When you visit or use the service
Counts of how much the tutor is used, so we can apply fair-use limits. Cloudflare, which hosts Mathable, keeps short-lived technical logs of requests, which can include your IP address and the address of the page you asked for. Loading a page on our website also sends your IP address to Google, which supplies the fonts.
What we do not collect
We do not use advertising, analytics or tracking tools. We do not collect your location, contacts or microphone, and the app does not ask for them; it asks for the camera only so you can photograph your work. We do not ask for health information or other sensitive details; please do not put them in a chat, and please photograph only the maths, not people. Photos are re-saved on your device before they are sent, which removes hidden details such as where they were taken.
Why we use it, and our lawful basis
Data protection law requires a lawful basis for each use of personal information. Ours are:
| What we do | Using | Lawful basis |
|---|---|---|
| Creating your account and household, signing you in, and keeping your account working | Sign-in details, first name, year group, age band, household and invite records | Contract with the account holder. For a learner whose parent or guardian holds the account: legitimate interests (giving the learner the tutoring their parent arranged) |
| Tutoring: writing the tutor’s replies, checking your maths, reading your photos, and keeping your chats so you can come back to them | Messages, working, photos, test answers, preferences and learning goal | As above |
| Adapting the tutoring to you: tracking which topics are secure, and how confident or stuck you seem, to choose hints | Progress readings and the confidence and frustration estimates | As above. This is profiling; see “How the AI tutor works” |
| Showing a parent or guardian their child’s progress | Progress, set work and scores, activity counts | Contract with the parent or guardian; legitimate interests (a parent supporting their child’s learning, without seeing the child’s conversations) |
| Taking payment and managing subscriptions | Stripe customer reference, subscription status and renewal date | Contract; legal obligation (keeping accounting records) |
| Checking the tutor teaches accurately and safely, and fixing what it gets wrong | Conversations, ratings of replies, reports about questions | Legitimate interests (making the tutoring correct and safe for learners). You can object |
| Keeping Mathable secure and available: preventing abuse, limiting use, capping costs, keeping backups and technical logs | Usage counts, technical logs, backups | Legitimate interests (protecting learners, the service and its data) |
| Keeping records of what was agreed and of privacy requests | The confirmation ticked at sign-up, records of downloads and deletions | Legal obligation (showing we comply with data protection law) |
| Answering your questions, requests and complaints, and dealing with legal claims | Your messages to us and what we need to answer them | Legal obligation; legitimate interests |
| Protecting someone at risk of serious harm | Only what is needed | Recognised legitimate interest (safeguarding vulnerable people); vital interests; and, for any sensitive information, the safeguarding condition in the Data Protection Act 2018 |
Where we rely on legitimate interests, we have weighed them against your interests, rights and freedoms, giving extra weight to the fact that most learners are children. We do not use your information for advertising or marketing, we do not sell it, and we do not use it to train AI models.
How the AI tutor works
The tutor’s replies are written by Claude, an AI model made by Anthropic. Each time you send a message, Mathable sends Anthropic what Claude needs to reply: your message, the recent conversation, your working and our checks of it, the photos in that chat, and your tutoring preferences and estimates. We do not send your name, email address, age band, year group or account details. Anthropic acts only on our instructions. Under its contract with us it may not train its models on what we send, and it deletes it within 30 days, unless a conversation is flagged as breaking Anthropic’s usage policy, which it may keep for up to 2 years to investigate.
Arithmetic and algebra are checked by Mathable’s own checker, not just the AI. Even so, the tutor can be wrong; if a question or a mark looks wrong, report it from the question and we will look at it.
Choosing hints from your progress and the confidence and frustration estimates is profiling. It is on because adapting the help is the point of a tutor, and it is used for nothing else. No decision with legal or similarly significant effects is made about you by automated means. Fair-use limits, and access depending on whether a subscription is active, apply the same way to everyone and do not use your profile.
Mathable is not a safeguarding or monitoring service. Nobody watches conversations as they happen. If a message suggests a learner may be at risk, the tutor gives them Childline’s and Samaritans’ numbers and tells them to call 999 in an emergency; a request for harmful information is refused. It does not alert a parent or anyone else.
Child safety
Mathable is for learners aged 13 and over, and is designed to meet UK data protection law, including the ICO’s Age Appropriate Design Code (the Children’s Code), which we apply to every user whatever their age. It follows Anthropic’s guidelines for organisations whose products are used by under-18s: every chat says the tutor is an AI; the tutor is instructed to keep every reply suitable for a school classroom and never to ask for personal details; requests for harmful information are refused; and a learner who may be at risk is pointed to help. There are no adverts, public profiles or ways to contact other users. You can report a problem with a question in a practice set or test, and rate the tutor’s replies.
Who can see your information
You
A learner sees their own conversations, photos, progress, set work and settings.
A parent or guardian
Where a parent or guardian set up the household, they see the learner’s first name, year group and age band; how secure each topic looks and how that has changed over the last 90 days; how many sessions the learner has had, how many this week, when they were last active, and how many times they used the tutor this month; set work, with its status and score; and the household’s billing status. They see nothing else, and never the conversations, chat titles, photos, learning goal, the confidence and frustration estimates, the answers typed in sets, or what a learner writes in a report.
Mathable staff
A small number of named staff can see summary figures about how Mathable is used, and reports about questions, which they see without the learner’s name. They may also read individual conversations to check the tutor is teaching accurately and safely, to fix a fault, or to deal with something you have asked us to do. We keep a record of staff use of our operations tools.
Our service providers
These companies handle information so that Mathable can run. Each acts on our instructions, except where noted:
| Provider | What for | What they receive | Where |
|---|---|---|---|
| Anthropic (Claude) | Writes the tutor’s replies and checks “explain it back” answers | Your message, the recent conversation, your working, the photos in that chat, your tutoring preferences and estimates. Not your name, email, age band, year group or account details | United States; the model may run in other countries |
| Clerk, Inc. | Sign-in | Your email address, password (Clerk stores it scrambled; we never see it), sign-in codes, and the devices and sessions you sign in from | United States |
| Cloudflare, Inc. | Hosting, database and photo storage | Everything Mathable stores, and short-lived request logs | Stored in western Europe; served through Cloudflare’s worldwide network |
| Stripe | Payments | Your card and billing details, which you give Stripe directly, and our reference for your household. We never see your card number | UK, Ireland and United States |
| GitHub, Inc. | Runs our automated jobs and keeps our backups | A copy of the database (not photos) passes through GitHub’s servers while a backup is made. It is encrypted there, before it is stored, with a key only we hold, so GitHub keeps only what it cannot read | United States |
| Fly.io | Runs our maths checker | The equation being checked, with nothing that identifies you | London, UK |
| Google (Google Fonts) | Supplies the website’s fonts, under Google’s own privacy policy | Your IP address and browser details when a web page loads. No cookies | United States |
| Cloudflare, and our mailbox provider | Our support inbox | Emails you send to support@getmathable.com | United States |
Stripe also uses some payment information as a separate controller, for example to prevent fraud and meet financial regulation; its own privacy policy covers that use.
Others, only when we must
We share information with others only where the law requires it (for example, a court order), to establish or defend legal claims, or where we believe someone is at risk of serious harm, in which case we share only what is needed with the people who can help, such as the police or children’s services. If Mathable is ever sold or merged, your information would pass to the new owner under the protections in this notice, and we would tell you first.
Information sent outside the UK
Some of our providers are in the United States, or may handle information there. Where information leaves the UK, it is protected in one of two ways. Clerk, Cloudflare, Stripe, GitHub and Google are certified under the UK–US data bridge, which UK law recognises as protecting information to UK standards. For Anthropic, our contract includes the International Data Transfer Addendum to the EU standard contractual clauses, approved for this purpose under UK law. You can ask us for a copy of the safeguards that apply.
How long we keep it
| Information | How long |
|---|---|
| Messages, working and checker results in a chat | 30 days, then deleted automatically. Deleting the chat deletes them at once |
| Photos | 30 days, then deleted automatically. Deleting the chat deletes them at once. Photos are never in backups |
| A chat’s record after 30 days: its topic, the main equation, how it went | Until the account is deleted. The chat’s title is replaced after 30 days. This record feeds your progress |
| “Explain it back” answers | Not stored. They are sent to Anthropic to be checked, and only a usage count is kept |
| Profile, preferences and learning goal; progress and daily progress readings; set work and your answers; ratings of replies; reports about questions; usage counts | Until the learner’s data or the household is deleted |
| Household, invite and confirmation records | Until the household is deleted. An unused invite code stops working after 14 days |
| Sign-in account (Clerk) | Until it is deleted (see “Deleting your account”) |
| Stripe customer record | Deleted when the account that pays is deleted, which cancels the subscription. Stripe keeps records of past payments as the law requires it to |
| Our accounting records | Six years after the end of the financial year they relate to, as UK law requires |
| Backups (encrypted full copies of the database, daily and before each update) | 30 days. Something you delete leaves the backups within 30 days |
| Limits on use (counts per minute and per month) | 5 minutes and 35 days |
| Records of downloads and deletions (kept as a one-way fingerprint, not your ID) | 90 days |
| Records of staff use of our operations tools | 1 year |
| Request logs at Cloudflare | Up to 7 days |
| Emails to support | As long as we need to deal with them, and no more than two years after the matter is closed |
| Drafts saved on your device | On your device until you hand the work in or clear them |
Cookies and storage on your device
We do not use advertising or analytics cookies. Mathable stores only what it needs to work:
| What | Why | Type |
|---|---|---|
| Clerk sign-in cookies (such as __session, __client and __client_uat) | Keep you signed in on the web | Strictly necessary |
| mathable.paper.… (browser) or a draft file (app) | Keeps test answers you have typed but not yet handed in | Strictly necessary |
| mathable.plan, mathable.seed (browser, cleared when you close the tab) | Carry the plan you picked, or the question you started, to the next page | Strictly necessary |
| mathable.welcomed, mathable.explained (browser) | Remember you have seen the welcome tour, and which “explain it back” parts you have done | Functional; stays on your device |
| Sign-in token (app, in the device’s secure storage) | Keeps you signed in on the app | Strictly necessary |
You can clear these in your browser’s settings, or by deleting the app; you will need to sign in again.
Keeping it safe
Information travels encrypted between your device and Mathable. Access to the database is limited to named staff. A learner’s conversations can only be opened by that learner; a parent’s view of the household is built so that it cannot reach them. Codes are stored as fingerprints, not as the codes themselves. Backups are encrypted with a key only we hold. If something goes wrong that puts your information at risk, we will tell the UK’s data protection regulator within 72 hours where the law requires it, and tell you without delay if it is likely to put you at high risk.
Your rights
You have the right to:
- see your information and get a copy of it;
- correct anything that is wrong;
- delete it;
- restrict how we use it while a concern is looked into;
- object to our using it on the basis of legitimate interests, including staff reading your conversations;
- take it with you, in a format a computer can read;
- complain to us, and to the UK’s data protection regulator.
Many of these you can do yourself, at any time:
- A learner can download their conversations, profile and progress, or delete everything, from Privacy and data in the chat screen’s menu on the web, or from Account in the app. A single chat can be deleted from the chat list.
- A parent or guardian can download the household’s progress, or delete the whole household, from their household page.
For anything else, including a complete copy of your information (with your photos, set work, reports and the record of what was agreed at sign-up), email support@getmathable.com. It is free. We may ask you to confirm who you are, and we will reply within one month. If a request is complex we may need up to two more months, and we will tell you why. If we need more information from you to find what you asked for, the month starts once we have it.
Learners and parents
A learner’s rights over their own information are their own, whatever their age. A parent or guardian can make a request on a learner’s behalf where the learner agrees, or where it is clearly in the learner’s best interests; we may check with the learner first. A parent’s access to their child’s progress through the household page does not include the conversations, and a request does not change that unless the learner agrees.
Deleting your account
In the Mathable app, Account → Delete my account removes everything Mathable holds about you and then your sign-in. A parent’s account takes the household and every learner’s data with it. If you pay for your own account, deleting it cancels your subscription first.
On the web, a learner does the same from Privacy and data in the chat screen’s menu. A parent deletes the household from their household page, which cancels the subscription and deletes every learner’s data; the parent’s sign-in stays until they delete it in the app or ask us. A learner who joined a parent’s household keeps their own sign-in, which holds only their sign-in details, until they delete it or ask us.
Or email support@getmathable.com from the address you sign in with, and we will delete the account for you. A deleted account cannot be restored. Backups that still hold it expire within 30 days.
Complaints
If you are unhappy with how we have handled your information, please tell us first at support@getmathable.com. We will acknowledge your complaint within 30 days and tell you what we have done about it. You can also complain to the UK’s data protection regulator, the Information Commission (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113.
Changes to this notice
When we change how we use your information, we will update this notice and its date. If a change matters to you, we will tell you in Mathable before it takes effect.