Privacy policy.

This policy is for the parents and guardians who arrange tutoring with us, the students we teach (who are usually under 18), visitors to mappth.com and mappth.net (which point to the same site), and anyone who uses the Mappth app. It covers Mappth — the website, the application process, and the student and parent portals with the learning tools inside them — and our separate, free Mappth app on the App Store and Google Play.

• When you apply:the parent or guardian’s name and email, the student’s name and email, their year group and subject, your goals for the student, and any message or rough availability you share.
• When a student is onboarded: date of birth, school, year group, current and target grades, any target university, exam board, and curriculum level.
• From lessons: notes on what each session covered, strengths, what to work on next, and homework set — plus the short per-lesson summary we write for parents.
• From the Learning OS:the questions a student attempts and their answers, quiz, worksheet and mock-exam responses and self-marks, conversations with the AI study tools, which topics they’ve studied, time spent, and a derived “mastery” score per topic.
• For billing: invoice records (amounts, status, dates). Card payments are handled entirely by Stripe — we never see or store card numbers.
• For your account:the email address used to sign in (we use secure email links, so we don’t store passwords) and basic login activity.
• Automatically: standard usage analytics, to understand how the website and portals are used and to keep them secure.

We use this information to teach the student well and tailor the Learning OS to them; to write parent summaries and keep you informed; to schedule and run lessons; to take payment; to keep accounts secure; and to improve Mappth. We don’t use it for advertising, and we never sell it.

Under UK data-protection law, we rely on: performing our contract with you; our legitimate interests in running and improving a safe service; and your consent where we specifically ask for it (which you can withdraw at any time). Where the person is a child, a parent or guardian provides consent and agreement on their behalf.

Most Mappth students are under 18. A parent or guardian sets up the relationship, agrees to this policy, and can see and exercise the student’s data rights at any time. We collect only what we need to teach, and we treat children’s data with extra care. If your family is outside the UK — for example in the US — we apply the same protections and honour the children’s-privacy rules that apply to you.

The standalone Mappth app works differently — it has no account and collects no personal information about who is using it — so the app sections below explain our approach to younger users there.

AI is core to how Mappth helps students, so we want to be clear about it. We use Anthropic’s Claude to power features like the Socratic study tools, to draft the parent summaries Marcus then reviews, and to generate practice material.

We do not use student data to train external AI models, and our AI providers do not train their models on it either. Anything an AI produces that reaches a parent — such as a lesson summary — is reviewed by a human before it’s sent. Inside Mappth, students and parents can always tell what is AI and what is the tutor.

The Mappth app is our free GCSE maths revision app for iOS and Android, separate from the tutoring service and from the student and parent portals described above. It needs no account: there is no login, and we don’t collect your name, email, or any profile.

Your progress — your flashcard review state, your practice and quiz results, and your daily usage counters — is stored only on your own device. It isn’t sent to us, and we can’t see it. If you delete the app, that progress is removed with it.

The app contains no analytics, no advertising, no third-party trackers, and no location collection, and it sets no cookies. The only time information leaves your device is if you choose to use the optional AI assistant, which we explain next.

The app is free. Its one paid feature is an AI assistant, available on a single subscription of £5 per month. When you use it, the text you type is sent to our server, which forwards it to Anthropic (the makers of Claude) to generate a reply. This means the words you type leave your device and are processed by Anthropic as our service provider.

We don’t store what you type — your messages are used to generate the reply and aren’t kept on our servers afterwards. Please don’t enter personal information you don’t need to — your name, contact details, or anything identifying — as the assistant only needs the maths you’re working on. We don’t use what you type to train AI models, and Anthropic doesn’t train its models on it either.

Our legal basis for processing what you type is performing our contract with you — delivering the AI assistant you’ve subscribed to — together with our legitimate interest in keeping the service secure.

The app relies on a small number of service providers, each under data-protection terms:

• Anthropic — powers the AI assistant; receives the text you type when you use it
• RevenueCat— manages your subscription status; it works from the store’s purchase information and an anonymous identifier, not your name or email
• Apple and Google — distribute the app and handle the in-app subscription payment; we never see or store your card details
• Vercel — hosts the Mappth server that passes your AI messages to Anthropic

Anthropic processes data in the United States. Where your AI messages are transferred internationally, we rely on the safeguards required by UK data-protection law — the UK International Data Transfer Agreement (or the UK Addendum to the standard contractual clauses).

The app has no age gate and no account, and it collects no personal information beyond the AI text described above. Many of its users are GCSE students under 18. Because we hold no account and no profile, there is nothing for us to tie to a particular child; our advice to every user, whatever their age, is the same — don’t type personal information into the AI assistant. We’d encourage a parent or guardian to be involved in setting up the paid subscription for a younger user.

We don’t sell your data and we don’t use advertising networks. For the tutoring service and the student and parent portals, we share data only with the service providers that make Mappth work, each under data-protection terms (the separate Mappth app uses its own smaller set of providers, listed in the app section above):

• Supabase — secure database, login, and file storage
• Anthropic — the AI behind our study tools
• Stripe — payments and invoicing
• Resend — sending email (such as summaries and login links)
• Vercel — hosting the website and portals
• PostHog — product and usage analytics
• Google — video lessons over Google Meet

Some of these providers are based outside the UK. Where data is transferred internationally, we rely on the safeguards required by UK data-protection law, such as standard contractual clauses.

We keep teaching records — such as lesson notes and progress — for as long as we work with a student, and for a reasonable period afterwards, so we can pick up where we left off and meet our legal and accounting obligations. You can ask us to delete a student’s data at any time, and we’ll do so unless we’re legally required to keep it.

For the Mappth app, there’s nothing for us to keep: your progress stays on your device, and what you type into the AI assistant isn’t stored on our servers.

Your data is encrypted in transit and at rest. Access is restricted at the database level, so people only see the records they should, and we collect the minimum we need to do our job.

Under UK data-protection law you can ask us to: show you the data we hold; correct it; delete it; restrict or object to how we use it; or give you a copy to take elsewhere. To exercise any of these, email mappthtutoring@gmail.com.

If you’re unhappy with how we’ve handled your data you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk — though we’d appreciate the chance to put things right first.

For the standalone Mappth app, because there’s no account and we don’t store your progress or your AI messages, we usually hold no information about an app user to show, correct, or delete — but you can still contact us with any question.

We use a small number of essential cookies to keep you signed in, and analytics cookies to understand how Mappth is used. We don’t use cookies for advertising. The Mappth app sets no cookies at all.

If we change this policy we’ll update the date above and, for significant changes, let families know directly. Questions? Email mappthtutoring@gmail.com.