➕Numblewick
Log inGet started
← Numblewick home

Legal

Privacy Policy

Effective August 8, 2026 · Version 1.0

The short version

  • Children only interact with Numblewick through a profile a parent creates. Kids never enter an email, phone number, or address.
  • We collect the minimum data needed to run a math tutor: a display name and grade for each child; an email and first name for each parent.
  • We never sell child-specific data. We never build ad profiles from a child's activity.
  • Aggregated, anonymized statistics (like "grade-3 accuracy on fractions") may be shared or used commercially — but never anything that could identify a specific child or family.
  • You can delete a child profile, an uploaded worksheet, or your entire account at any time from the parent dashboard.

1. Who this policy is for

This Privacy Policy explains what Numblewick collects, why, how we protect it, and what choices you have. It applies to numblewick.com and the Numblewick apps ("Service"). It works alongside our Terms of Service; where the two documents overlap, both apply.

2. Data we collect from children

Numblewick is built for kids in grades 1–8. Because of COPPA and because it's the right thing to do, we collect only what's strictly needed to run the tutor:

  • Display name (a first name or nickname the parent enters).
  • Grade level.
  • Practice activity — problems attempted, answers, scores, hints used, session length.
  • Optional: worksheets or photos of homework a parent chooses to upload, so the AI can tailor practice to what the child is learning at school.

We do not collect a child's email, phone number, home address, photo of the child, precise location, biometric data, or contacts. We do not ask children for any personal information beyond what their parent enters into the profile.

3. Data we collect from parents

  • Email address — required for account authentication and progress reports you opt into.
  • First name.
  • Optional profile fields such as state and school name, used only to personalize content (e.g., aligning practice to your state's standards).
  • Technical usage data such as device type, browser, and IP address — used for security, debugging, and aggregated analytics.

We do not collect a parent's phone number, home address, payment card, or government ID. Numblewick is currently free during our launch phase.

4. How we use the data

  • Run the practice sessions and adjust difficulty in real time.
  • Generate hints, walkthroughs, and progress reports.
  • Authenticate parent accounts and keep them secure.
  • Send progress emails you have explicitly requested.
  • Improve our curriculum and algorithms using aggregated, de-identified statistics (see Section 6).
  • Comply with legal obligations and detect abuse or fraud.

5. How we do not use the data

  • We do not sell or rent personally identifiable information about any child or parent.
  • We do not use a child's name, grade, or performance to serve targeted advertising.
  • We do not allow third parties to track individual users across the internet from within Numblewick.
  • We do not share individual student data with schools or districts without your explicit written consent.
  • We do not use children's data to train third-party AI models beyond the transient use needed to answer the immediate request (see Section 8).

6. Aggregated & de-identified data

We may combine data across many users to produce statistics — for example, "students in grade 4 solve long-division problems with 68% accuracy on average." These aggregates cannot be traced back to any individual child, family, or account. We may use these aggregates to improve the Service, publish research, and support advertising or partnership activities as described in our Terms of Service. Individual child records are never used commercially.

Opt-out: If you'd prefer your account's anonymized usage patterns not be included in these aggregates, email support@numblewick.com with the subject "Data Opt-Out." We'll process the request within 30 days without affecting your access to the Service.

7. When we share data

We share information only in these situations:

  • Infrastructure providers that host and secure the Service, listed in Section 8.
  • Family members you invite (e.g., a second parent) — they can see the practice data for the shared child profile.
  • Legal compliance — if required by valid legal process, we may disclose information; where the law permits, we'll try to notify you first.
  • Business transfers — if Numblewick is ever acquired or merged, personal data may transfer to the successor entity, which must honor the commitments in this policy or notify you and give you a chance to delete.

We do not sell personal information to advertisers, data brokers, or any third party.

8. Third-party services we use

  • Google Firebase — authentication, database, hosting. Data is stored in Google Cloud regions and governed by Google's Privacy Policy.
  • Anthropic Claude API — powers the AI-generated hints and worksheet-derived problems. Content you upload is sent to Anthropic for the specific request; Anthropic does not retain it beyond the request per our API terms.
  • Resend — sends transactional emails (progress reports, password resets). Resend has access only to the email address and message contents.

9. Data security

Data is transmitted over TLS, stored with encryption at rest via our infrastructure providers, and access is limited by authentication and role-based controls. No system is perfectly secure — please use a strong, unique password for your parent account.

10. Data retention & deletion

  • Child profile data is retained while the profile is active. Deleting the profile from the parent dashboard removes it (and all associated practice history) from our production database within 30 days.
  • Parent account data is retained for as long as the account is open. Closing the account deletes it and all associated child profiles within 30 days.
  • Aggregated, de-identified statistics may be retained indefinitely as they cannot be tied to any individual.
  • Backup snapshots may retain data for up to 90 days before rotating out; we do not restore from backups to reintroduce deleted data except in a disaster-recovery event.

11. Your rights & choices

  • Access, update, or delete any child profile or your account from the parent dashboard.
  • Download your child's practice history by emailing support@numblewick.com.
  • Opt out of aggregated commercial data use (see Section 6).
  • Residents of California (CCPA/CPRA), Colorado (CPA), Virginia (VCDPA), the EU/UK (GDPR), and other jurisdictions with data-protection laws have additional rights, including to access, correct, delete, or port their personal data, and to lodge a complaint with a supervisory authority. Contact us to exercise any of these rights.

12. Cookies & local storage

We use browser local storage and first-party cookies to keep you logged in, remember your language preference, and cache assessment progress. We do not use third-party advertising cookies. We do not use cross-site trackers.

13. International users

Numblewick is operated from the United States. If you access the Service from another country, your data will be transferred to, stored, and processed in the U.S. and any Google Cloud region our infrastructure uses.

14. Changes to this policy

If we make material changes, we'll notify you by email and/or an in-app notice at least 14 days before the changes take effect. Continued use after the effective date constitutes acceptance.

15. Contact us

Privacy questions, data requests, or COPPA concerns: support@numblewick.com. We aim to respond within 5 business days.