Mathsense Privacy Notice

Christopher Reay is a sole trader operating the Mathsense service at mathsense.net ("Mathsense", "we", "us"). Mathsense is registered with the Information Commissioner's Office (ICO) as a data controller.

ICO registration number: ZC152231

You can contact us about data protection at:
Email: privacy@mathsense.net
Address: 65 Amherst Road, Fawdon, NE3 2QR

This privacy notice applies to:

• Teachers and school staff who create accounts and assessments
• Students (learners) who create accounts or complete assessments

Mathsense is intended for users aged 13 and over. If you are under 13, you must not create an account. We treat all learner accounts as potentially belonging to a child under 18 and apply heightened privacy protections accordingly.

Teachers

• Name and email address (via account registration)
• School or institution name
• Payment information (processed securely by Stripe — we do not store card details)
• Assessment data you create

Students

• Display name (the name you choose at registration or enter when joining an assessment)
• Email address (for account registration and password recovery)
• Year group (if provided)
• Confirmation that you are aged 13 or over
• Diagnostic results: which maths skills are mastered or need practice
• Assessment participation records

Automatically collected data

• Basic usage logs (collected by Supabase and Vercel for security and performance purposes)

We do not use tracking cookies, advertising pixels, or behavioural analytics.

Teachers

We process teacher data on the basis of contract performance (to provide the Mathsense service you have paid for) and legitimate interests (to manage accounts, prevent fraud, and improve the service).

Students

We process student data on the basis of:

• Contract performance — to deliver the diagnostic assessment service to you
• Legitimate interests — to enable teachers to view class results and to maintain the integrity of assessments

We do not use student data for advertising, marketing, or any commercial purpose beyond delivering the core service.

• To run the GCSE maths diagnostic and display your results
• To allow teachers to view class and individual results
• To maintain your account across sessions
• To send password reset emails if requested
• To improve the diagnostic algorithm (using anonymised, aggregated data only)

We will never sell your personal data to third parties.

We use a small number of trusted third-party services to operate Mathsense:

• Supabase (database and authentication) — servers in EU West (eu-west-2)
• Vercel (website hosting) — servers in London, UK (eu-west-2)
• Stripe (payment processing for teacher accounts) — does not process student data

Each of these providers acts as a data processor under a formal data processing agreement. We do not share your data with any other third parties without your consent, unless required by law.

• Active accounts: data is retained while your account is active
• Student diagnostic results: retained for 1 year after last login, then deleted
• Deleted accounts: all personal data is permanently deleted within 30 days of account deletion
• Teacher payment records: retained for 7 years as required by HMRC rules

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and all associated data
• Restrict how we process your data
• Object to processing based on legitimate interests
• Data portability (receive your data in a machine-readable format)

To exercise any of these rights, contact us at privacy@mathsense.net. We will respond within one month.

If you are a student aged under 18, a parent or guardian with parental responsibility may also exercise these rights on your behalf.

We take the security of your data seriously. Our measures include:

• All data is encrypted in transit (HTTPS/TLS)
• Database access is protected by row-level security policies
• Authentication is handled by Supabase with industry-standard protections
• Access to student data is restricted to the teacher who created the relevant assessment

If you have a concern about how we handle your personal data, please contact us first at privacy@mathsense.net and we will aim to resolve it promptly.

Our full complaints procedure is available at mathsense.net/privacy/complaints.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

• Website: ico.org.uk
• Helpline: 0303 123 1113

We may update this privacy notice from time to time. We will notify registered users of any significant changes by email. The current version will always be available at mathsense.net/privacy.

Last updated: 21 May 2026