Mathstroverse Privacy Policy

Effective Date: November 2023

This privacy Policy (“Privacy Policy” or “Policy”) explains how Mathstroverse (referred to as “Mathstroverse,” “we,” “our,” “us”) collects, uses, discloses, sells and transfers information through its mobile application, website and other digital properties. Mathstroverse’s mobile application as well as its website located at https://www.Mathstroverse.com will be referred to collectively in this Privacy Policy as the “Sites.” This Privacy Policy is incorporated as part of Mathstroverse’s Terms of Use which apply to your use of the Site and Services. Unless otherwise defined herein, capitalized terms in this Policy shall have the meaning set forth in the Terms of Use.

User Consent

By engaging with or using the Sites and Services, you consent to the terms of this Privacy Policy. If you do not agree to the terms and conditions of this Policy, including having your “Personal Information” used in any of the ways described herein, then do not use the Sites. Use of the Sites and Services by you or your designees following our posting of a new Privacy Policy on our Sites constitutes your acceptance of the Privacy Policy as modified. In the event we materially change the way in which we use your Personal Information, where required by law we will provide you with the Policy and ask you to affirmatively accept these material changes.

Personal Information We Collect

You may voluntarily provide us with personal information when you register an account with us, contact us for customer support, or otherwise provide us with personal information. “Personal Information” means information that tells us specific details about you such as your name, phone number, email, and mailing address. You may also provide us with demographic information, such as gender, age, or birthdate. “Personal Information” also includes any information understood to be personal information under the specific laws of different states and or countries. For instance, in the UK and EU, this kind of personal information is referred to as “personal data”. In the United States it is referred to as “personally identifiable information.” In California it is referred to as “personal information.”

Mathstroverse collects data and personally identifiable information through the use of the Site or third-party services such as Apple Authentication and Apple Pay. When registering with Mathstroverse, parents or legal guardians are asked to provide personal information, including but not limited to their first and last name, email address, city, state/province, and a password for their account.

For users with a paid membership, payment information may be collected by us or our third-party vendors. Note, we do not directly store credit card information — all credit card information and transactions are stored by our third-party payment providers through which you purchased your membership.

When you create profiles, you will provide names for users of the profiles and the grade level. The names may be nicknames, i.e., they do not need to be the name of your child. We will then assign usernames for you and your profiles.

In addition to this personal information, we may also collect technical information during a user’s of the Service. This technical information may include device type, device identifier, IP address, date and time you accessed our mobile application or website, gameplay data, and webpages visited or content you accessed on your browser or device. We may use cookies or similar technology to collect this technical information.

The Personal Information collected is utilized for various purposes, including providing our Services, addressing inquiries, delivering product updates, and communicating with you regarding our products and services, such as promotions and new features.

Children Information and Use Information

We collect certain children’s information such as profile or screen names and grade level directly from parents during the account registration process. Additionally, you may provide usernames. Any passwords required to use the Services shall be collected and stored through Apple via the Apple Authentication service. Mathstroverse will not receive, collect or store any passwords.

We also collect information related to the use of our Services, including a profile user’s activities and performance in games and activities. This gameplay data may be used to generate reports and suggest suitable games and activities and other activities including without limitation facilitating progress reports and tracking your child’s performance and progress. You retain the option to withhold certain data; however, doing so may limit access to certain special features. You can review, modify, cease data collection, or remove your Personal Information or a child’s Personal Information at any time by accessing your account settings and modifying the relevant profile and account information accordingly.

Mathstroverse obtains verifiable parental consent before collecting Personal Information from children. If parental consent is not provided, we do not collect, use, or disclose any Personal Information about the child. We also collect various information necessary to provide our Services and other data essential for Service provision including without limitation information when contacting us for product or technical support.

Advertising:

We may run advertising campaigns to promote our Services and utilize technology like Cookies to analyze ad performance and enhance them. Presently, we do not display third-party advertisements on our Services or use third-party Cookies to track child users for advertising purposes. Additionally, we do not engage in targeted advertising based on Student Data or Children’s Personal Data.

How We Use the Information We Collect

We may use the Information we collect for a variety of purposes, including:

To provide our Services to you;
To process payments and maintain memberships;
To provide you with customer support;
To maintain, improve, and personalize your experience of our Sites;
To monitor our Sites for compliance with our Terms of Use;
To provide you with marketing materials about new products and services that you may be interested in from us, our affiliates, and other third parties;
For our analytics, research, record keeping, and reporting purposes; and
As otherwise disclosed at the time of collection.

We also use the profile user’s (which we presume to be children) information we collect to measure a user’s progress and performance and provide associated reports, and to adapt, personalize, and customize the user experience accordingly.

The protection of children’s personal data is of utmost importance to us. We adhere to both the Children’s Online Privacy Protection Act (COPPA) and the European Union General Data Protection Regulation (GDPR) guidelines for collecting and processing personal data of children.

Collection of Children’s Personal Data: We do not knowingly collect or request personal data from children under the age of 13 (if located in the United States) or under the age of 16 (if located in the European Economic Area or United Kingdom) (“Age of Consent”) without obtaining verifiable consent from the child’s parent or guardian.

Registration and Interaction: Children under the Age of Consent may not register for our services or disclose any personal data to us unless and until we have obtained parental consent. Children can only interact with our Services through an account created by their parent or legal guardian, who has provided consent.

We do not make participation in our Services conditional on the disclosure of more Personal Information from a child under the Age of Consent than is reasonably necessary for their participation, and we do not retain Personal Information from children under the Age of Consent for longer than necessary to fulfill its intended purpose.

If you are a parent of a user of our Services who is a child under the Age of Consent, you may contact us at any time at support@stemlins.com to request (a) the cessation of Personal Information collection from such user, (b) the deletion of any Personal Information already collected from such user (note that we may continue to retain and use anonymized data such as data collected from users’ use and activity in connection with the Services for performance and operations), or (c) the discontinuation of Personal Information disclosure to third parties while permitting continued collection and use of Personal Data for Service-related purposes.

Reporting Non-Consensual Data Sharing: If you believe that a child under the Age of Consent has provided us with Personal Information without obtaining parental consent, please contact us at support@stemlins.com.

Parental Rights: Parents of users who are children under the Age of Consent can contact us at any time to request (a) the cessation of collecting Personal Information from their child, (b) the deletion of any Personal Information already collected from their child, or (c) the discontinuation of disclosing Personal Information to third parties while allowing for continued collection and use of Personal Information for service-related purposes.

Parental Access: Parents who have signed up for our Service may have access to all data associated with their child’s account, including progress reports and usage data related to games, assessments, and other tests available through our Services. If you are a child, and your parent has registered for our Service, please be aware that your parent may have access to all data within or associated with the account, including progress reports and usage data tracking your performance on games, assessments, and other tests available through the Services.

How We Store and/or Share the Information We Collect

Mathstroverse may use third-party marketing services such as Mailchimp to store email account information and other information for use in sending customers and potential customers product updates, notices, upcoming news and events and other notifications. You expressly agree to the foregoing and agree to hold Mathstroverse harmless for any claims that may arise from such use that is not due to the intentional misconduct of Mathstroverse.

In addition, Mathstroverse uses the third-party service Firebase to store user performance (namely, gameplay) data, which is anonymized data associated with profile users’ activities in connection with the use of the Service. We also use Google Analytics to log web and app data and track website and app activities and events.

California Residents:

If you are a resident of the State of California, you have the right to be informed about Mathstroverse’s practices regarding the collection, use, disclosure, and sale of your Personal Information. Pursuant to the California Consumer Privacy Act (“CCPA”), you have the right to request disclosure and deletion of your personal information, the right not to be discriminated against for exercising your California privacy rights, and the right to opt-out of the sale of your personal information. Mathstroverse does not sell the Personal Information of California consumers, and we do not discriminate in response to privacy rights requests.

If you are a California resident, and you do not want us to share your personal information with third parties for their direct marketing purposes, or if you would like to request disclosure of information about you that we have collected, please contact us at the following address: support@stemlins.com.

Opting-In to Marketing for International-US Customers

If you are a customer outside the US, you may need to provide us with your express consent to being contacted by us, or receiving such information from us when you register to use the Services by selecting to opt in. This consent may be necessary in order to receive information regarding updates to the Services and for us to send you information regarding Mathstroverse, such as promotions, contests and events.

Again, your email will not be distributed or shared with third parties and you can revoke your consent at any time to stop receiving any communication by emailing support@stemlins.com or using the “unsubscribe” option provided in our marketing messages.

If, at any time after registering for information or ordering the Service, you change your mind about receiving information from us send us a request specifying your new choice. Simply send your request to support@stemlins.com.

Access, Correction, or Deletion of Information

Users may access, correct or delete their personal information maintained by us and to withdraw their consent where provided, subject to legal or contractual restrictions. Personal information can be accessed and changed by contacting our customer support or through the Site, namely to access and review certain account-related details by logging into your online account. Note that a request to delete or cease collecting personal information or withdrawal of consent may lead to closing of the relevant user’s account or the inability to use the products or Services or certain portions of the products or Services. When a correction, deletion or other change to personal information is requested and validated, we will effect the change as soon as reasonably practicable and in accordance with privacy laws.

Opting Out of Email Communications

You can opt out of receiving commercial or promotional emails from us by following the unsubscribe instructions indicated in the email and manage your communication preferences by contacting customer service.

The laws of California, Colorado, Connecticut, Utah, and Virginia also grant the residents of those states certain rights regarding the collection and use of their personal information. Subject to certain limitations and differences between the states, residents of these states have the following rights. Depending on your state of residence, you may have the right to know/confirm and/or access/receive in a portable format information about the categories and specific pieces of personal information we have collected about you, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties to whom we disclose such information. You also have the right to know if we have sold or disclosed your personal information. You have the right to request the deletion of your personal information, subject to certain exceptions such as non-personally identifiable information from the use of the Services such as data collected from gameplay. You have the right to request that we correct inaccuracies in the personal data that we process. You have the right to opt out of any “sales” or “sharing” of your personal information or the use of your personal information for “targeted advertising,” as those terms are defined under applicable state law. Note that while we do not monetize the personal information of any user of the Services by providing it to a third party in exchange for money (except in the context of a potential sale of the company), California law has a broader definition of the terms “sell” and “share” which includes making user information available to a third party for the purposes of targeted advertising. As described above, when we work with our advertising partners, we allow them to collect information about individuals who visit areas of the Services that are not directed to children in a way that would be considered a “sale” or “sharing” under California law, or “targeted advertising” under other state laws. These individuals can direct us to stop allowing the collection of their information in this way by opting out of cookies through our cookie preference center, accessible within the footer of our website at prodigygame.com. You have the right to be free from discrimination for exercising these rights. Please note that if the exercise of these rights limits our ability to process personal information, we may no longer be able to provide you with our products and services.

Privacy Rights for Data and Personal Information Collected from EU Residents

This section applies if you are an EU data subject (for these purposes, reference to the EU also includes the European Economic Area countries of Iceland, Liechtenstein and Norway and, where applicable, Switzerland). The term “Personal Information” as used in this Privacy Policy means “personal data” as defined under Regulation (EU) 2016/679 (General Data Protection Regulation, or “GDPR”).

Under GDPR, Mathstroverse is both a “Controller” and a “Processor.” Mathstroverse is the Controller of Personal Information you provide to us about yourself as a customer or when requesting information about our products and services. For data you provide to Mathstroverse or request that we collect as part of using our Services, including but not limited to the Personal Information we collect on behalf of our customers, we are a Processor for our customers, who are the Controllers that determine the purposes and means of the processing of your Personal Information by Mathstroverse.

Mathstroverse is based in the USA. Personal information and data processed by Mathstroverse is transferred to our servers in the USA. When transferred, we take all reasonable steps to protect your Personal Information, including encryption during data transit and storage. For more information, see “International Data Transfers and our Privacy Shield Compliance” below.

How Your Personal Information is Used

Your data may be used in a variety of ways. As a Controller, we collect and use your Personal Information to respond to enquiries or provide the products and services you seek to obtain from Mathstroverse. As a Processor, we do not transfer Personal Information to third parties except we may in the future sell to the companies in which case we will update to include them on our list of sub-processors, and then only in order to provide the services requested by our customer.

Purposes for which we will use your personal data

We have set out below, in a table format, a description of all the ways we plan to use your personal data, and which of the legal bases we rely on to do so. We have also identified what our legitimate interests are where appropriate.

Note that we may process your personal data for more than one lawful ground depending on the specific purpose for which we are using your data. Please contact us if you need details about the specific legal ground we are relying on to process your personal data where more than one ground has been set out in the table below.

Purpose/Activity	Type of data	Lawful basis for processing including basis of legitimate interest
To register you as a new customer	(a) Identity (b) Contact	Performance of a contract with you
To process and deliver your order including:(a) Manage payments, fees and charges(b) Collect and recover money owed to us	(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications	(a) Performance of a contract with you (b) Necessary for our legitimate interests (to recover debts due to us)
To manage our relationship with you which will include:(a) Notifying you about changes to our terms or privacy policy(b) Asking you to leave a review or take a survey	(a) Identity (b) Contact (c) Profile (d) Marketing and Communications	(a) Performance of a contract with you (b) Necessary to comply with a legal obligation(c) Necessary for our legitimate interests (to keep our records updated and to study how customers use our products/services)
To enable you to partake in a prize draw, competition or complete a survey	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications	(a) Performance of a contract with you (b) Necessary for our legitimate interests (to study how customers use our products/services, to develop them and grow our business)
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)	(a) Identity(b) Contact(c) Technical	(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganization or group restructuring exercise)(b) Necessary to comply with a legal obligation
To deliver relevant website content and advertisements to you and measure or understand the effectiveness of the advertising we serve to you	(a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical	Necessary for our legitimate interests (to study how customers use our products/services, to develop them, to grow our business and to inform our marketing strategy)
To use data analytics to improve our website, products/services, marketing, customer relationships and experiences	(a) Technical (b) Usage	Necessary for our legitimate interests (to define types of customers for our products and services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy)
To make suggestions and recommendations to you about goods or services that may be of interest to you	(a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications	Necessary for our legitimate interests (to develop our products/services and grow our business)

Your Privacy Rights as a Subject of the EU

Subject to applicable law and reasonable steps that we may take to verify your identity with respect to your requests, you have the following rights in relation to your Personal Information:

Right to be informed: organizations must tell individuals what data of theirs is being collected, how it is being used, how long it will be kept and whether it will be shared with any third parties.
Right of access: individuals have the right to request a copy of the information that an organization holds on them.
Right of rectification: individuals have the right to correct data that is inaccurate or incomplete.
Right to be forgotten: in certain circumstances, individuals can ask organizations to erase any personal data that is stored on them.
Right of portability: individuals can request that an organization transfers any data that it holds on them to another company.
Right to restrict processing: individuals can request that an organization limits the way it uses personal data.
Right to object: individuals have the right to challenge certain types of processing, such as direct marketing.
Rights related to automated decision making, including profiling: individuals can ask organizations to provide a copy of its automated processing activities if they believe the data is being processed unlawfully. You should also remind individuals that they are free to exercise their rights and explain how they can do this.

If you have an account with us, we may instruct you to exercise some of your rights above through account settings or features, or by deleting your account.

EU Data Subjects may contact us to exercise the rights above at support@stemlins.com.

Cookies and Advertising Technologies

We use cookies to provide functionality to our Sites and also to deliver our Services to our customers. A cookie is a small text file that can be stored on your computer or device when you visit a website, view an advertisement, or interact with an online service.

Data Protection Safeguards

We take reasonable physical, administrative, and technical steps to help maintain the data we collect in a secure manner. The user information we collect is stored and processed in manners to allow only authorized individuals to access the infrastructure where this information is stored. We take great care to maintain commercially reasonable standards of data security and protection and continues to implement those measures for our infrastructure where user information is stored. We maintain strict administrative, technical, and physical measures designed to safeguard the information we process. We use industry-standard SSL encryption when collecting or transferring your information. Other safeguards include but are not limited to data encryption, firewalls, multi-factor authentication for our personnel with access to your information, and physical-access controls.

However, Mathstroverse cannot guarantee that the security measures in place will never be defeated or fail, or that those measures will always be sufficient or effective. Mathstroverse restricts access to information collected about our customers and our visitors at our Sites to our employees and others who need to know that information to provide services to our visitors or customers or in the course of conducting our normal business operations. We also advise employees about their responsibility to protect customer data and Personal Information, and we provide them with appropriate guidelines for adhering to our Company’s business ethics standards and policies that relate to information security and privacy.

Update Your Personal Information

You can update the personal information you provide to us about yourself and others by logging into our mobile application and changing the information in your profile.

Privacy Policy Changes

We may make changes to this privacy Policy. We will provide Policy of such changes via this privacy Policy. We suggest you revisit this Policy from time to time to stay informed of any changes.

Contact Us

If you have any questions regarding this privacy Policy, please contact us at (placeholder email) or by mail at:

PLACEHOLDER ADDRESS – Insert: address, email, phone number, fax