Privacy Notice

Last updated: April 2026

Who we are

MarkyMaths is an AI-powered maths tutoring service for GCSE and A-Level students. For the purposes of data protection law, the data controller is MarkyMaths (hello@markymaths.com).

What data we collect and why

Account information

• Email address — collected when you sign up via magic link or Google. Used to authenticate you and send you account-related emails (sign-in links, welcome email). Legal basis: contract performance.
• Google account ID — stored if you sign in with Google, to link your Google identity to your account. Legal basis: contract performance.

Conversation data

• Your messages and the tutor's replies are stored on our servers. This allows your conversation history to persist across sessions and devices, and allows us to review sessions to improve the quality of tutoring.
• We may read stored conversations to identify where the AI gives unhelpful or incorrect responses and to improve the teaching approach over time.
• Legal basis: legitimate interests (service improvement).

Subscription and payment data

• If you subscribe to a paid plan, your payment is processed by Stripe. We do not store card details — Stripe handles all payment data. We store your Stripe customer ID and subscription status to gate Pro features. Legal basis: contract performance.

Usage data

• We track a daily message count per user to enforce fair-use limits. This is a simple counter and not a detailed activity log. Legal basis: legitimate interests.

Third-party services

We share data with the following processors:

• Google Gemini (Google LLC) — the content of your messages is sent to Google's AI service to generate the tutor's reply. Do not include sensitive personal information in your messages.
• Google OAuth (Google LLC) — if you sign in with Google, your Google account identity is shared with us. Governed by Google's privacy policy.
• Stripe (Stripe, Inc.) — processes subscription payments. Governed by Stripe's privacy policy.
• Resend (Resend, Inc.) — delivers transactional emails (sign-in links, welcome emails) to your email address.

We do not share your data with any other third parties, and we do not use your data for advertising.

Cookies and local storage

• Authentication cookie — a signed JWT cookie is set when you sign in, to keep you logged in. This is a strictly necessary cookie.
• Browser localStorage — used to store UI preferences and anonymous session state before you sign in.

We do not use advertising or tracking cookies.

Data retention

We retain your account and conversation data for as long as your account is active. If you request deletion, we will remove your data within 30 days.

Note for parents and guardians

MarkyMaths is designed for GCSE and A-Level students (typically ages 14–18). Sign-up requires an email address. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

Your rights

Under UK GDPR you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your account and associated data.
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, email hello@markymaths.com. You also have the right to lodge a complaint with the ICO (ico.org.uk).

How to delete your data

You can delete individual conversations from the sidebar in the app. To delete your account and all associated data, email hello@markymaths.com with the subject line "Delete my account" from your registered email address.

Changes to this notice

If we change how data is handled, we will update this notice and note the date at the top. Significant changes will be communicated by email.