Privacy policy

Information Matharoo uses

• Account information: a verified email address, Google account identifier when Google is connected, display name, optional class and chosen avatar. Google may supply your name during sign-in; you can edit your Matharoo display name.
• Practice information: chosen topics, question and skill identifiers, answers, correctness, hints, difficulty, timing, scores, session dates and progress. Team sessions also record individual answers, follow-ups and shared team results.
• Optional competitive rankings: your choice to join the Matharoo-wide leaderboard and a leaderboard nickname.
• Rewards: Roo Coin earnings and purchases, owned cosmetics, equipped items and your chosen saving goal.
• Sign-in and security information: session credentials stored as hashes, expiry times and, when email login is enabled, verified email links and request counters. Email request limiting uses a hashed network address to help prevent abuse.

Why this information is used

Matharoo uses this information to sign you in, keep your profile and practice available across devices, run multiplayer sessions, calculate rewards, and help approved teachers identify topics and students needing support. Account messages are for sign-in and account setup, not marketing.

Matharoo's application does not sell student information, use it for advertising or use it to train AI models.

Google sign-in and the email sender

Student Google sign-in requests identity information only. It does not request access to students' Gmail messages, Google Drive files or contacts. Google handles Google passwords; Matharoo does not receive them.

Email-link login is available when the administrator has connected and confirmed the sender. The Gmail sender connection is for the administrator's dedicated account, matharoo.learning@gmail.com. It uses send-only permission to send login links and setup instructions. Students will not be asked to grant Gmail sending permission.

The sender integration uses the administrator's Google authorisation credentials, encrypted on the server, to send requested emails. It does not request permission to read or delete inbox messages. Recipients' email addresses and the message contents will be processed by Google to deliver those emails. The administrator can revoke the connection through their Google Account permissions; this would stop email delivery.

The sender connection can also be removed through the protected sender setup page.

Who can see information

You can see your own saved account and practice information. Approved teachers can view account names, email addresses, classes and learning records through a restricted teacher view. They can create classes and assign accounts to them. Teacher-assigned classes cannot be overwritten from a student profile. Designated admins can grant or remove teacher access and permanently delete accounts. Class, role and deletion actions are recorded in an admin activity log; it retains opaque account identifiers, not deleted email addresses. Other players in your room can see game information such as your display name, avatar, class and the answers or results revealed by the game. A downloaded performance report can be shared by the person who downloads it.

Matharoo uses OpenAI Sites hosting and its underlying Cloudflare infrastructure to operate the app and store records. Google processes Google sign-in and, when connected, email delivery. These services may also process technical information needed to operate and secure their services, under their own privacy policies. See OpenAI's privacy policy, Cloudflare's privacy policy and Google's privacy policy.

Optional competitive rankings

Rankings are off by default. If you choose to join, signed-in students across Matharoo and approved teachers can see your leaderboard nickname, avatar, level and eligible XP. Rankings use weekly or all-time practice XP, with optional topic filters; they do not display your email, account identifier, assigned class, answers or accuracy to students. Students see a Matharoo-wide board. Only approved teachers can filter rankings by teacher-assigned class.

Students who previously joined a class-only board must choose to join again before appearing on the wider leaderboard. Students without an assigned class can also join. You can leave through the leaderboard page at any time; leaving removes you from subsequent ranking results and keeps your learning progress and rewards. Changing your class does not change participation in the Matharoo-wide board. An account role change switches participation off until you choose to join again as a student. Your nickname and participation setting are retained with your account and removed when the account is deleted. Screens already displayed to another person cannot be recalled.

Cookies, browser storage and retention

A secure sign-in cookie keeps your Matharoo account signed in for up to 30 days. Guest Solo practice and some game preferences are stored in the browser where you use them. Signing out ends the current account session but does not erase saved practice or browser-stored guest history.

Saved accounts, learning records and rewards currently have no automatic deletion schedule. They remain available for ongoing learning and teacher follow-up. Temporary rooms expire for access after their configured lifetime; this does not remove saved account practice records. Expired authentication records are cleaned up as related requests are processed.

Admins can permanently delete an account after typing its email to confirm. This removes its profile, saved learning records, Solo progress, Roo Coins, purchases and sign-in credentials. Rooms containing the account close and their shared snapshots are removed; other students retain their own saved learning records. Previously downloaded reports and browser-local data cannot be remotely recalled. Signing up again creates a fresh account. Contact the address above to request account deletion or correction. The administrator will need to confirm that the request relates to your account. Clearing browser site data removes locally stored guest history and preferences. Revoking Google access alone does not delete Matharoo's saved records.

Student and family choices

Students can use guest practice without creating a saved account. Use an appropriate display name and enter only the class information needed by your teacher. Students and parents or guardians can contact the administrator with questions about classroom use or a student's information.

Security and updates

Matharoo uses HTTPS, server-side account checks and restricted teacher access. Account login credentials are not included in public profiles. No online service can guarantee complete security; keep your account access and login links private.

Changes to these data practices will be reflected on this page with an updated date.