Privacy Policy

• We collect what we need to run an account and track learning progress, nothing we sell.
• We never sell personal information and we do not run third-party advertising or use advertising cookies.
• Some of what a learner types (a question, an answer, a tutor message) is sent to our AI provider to generate an explanation. It is not used to train our own or the provider's models.
• You can export or permanently delete an account's data at any time from Account settings.

MathPath is a service of LearnHub. Where this policy says we, us, or our, it means LearnHub as the operator of MathPath.

For individual learners who sign up on their own, we act as the data controller for their account. When a school or district provisions accounts for its students, the school is the controller and directs the purpose of the processing; we act as a service provider / data processor (a school official under FERPA — see below) and process student data only to provide the service to that school.

We group the data we hold the same way our data-subject export does, so this list matches exactly what you can download from Account settings.

Profile & account. A username and a password (stored only as a secure hash, never in plain text). If you sign in with Google, we receive your Google account identifier, email, and name so we can create and recognize the account. Optional multi-factor settings, class memberships, and, for school rosters, a school-provided identifier. We collect this to create the account, sign you in, and keep the session secure.

Learning activity. As a learner uses MathPath we record the work so the product can adapt and show progress: questions attempted, answers given, mastery and skill estimates, ability history, review schedules, study and quiz sessions, mistakes, and teaching artifacts such as classes, assignments, and course plans. This is the core purpose of the service.

Tutor & AI conversations. Messages sent to the AI tutor and the resulting replies, edit requests, and feedback on those replies. We keep the durable record of a conversation so a student can return to it and so teachers can review it.

Uploaded work & media. Photos or PDFs of work done on paper, scanned submission pages, and — only when a school opts into exam proctoring and the student consents — webcam snapshots. Media is stored as binary and is subject to age-based deletion.

Community contributions. Questions, solution methods, comments, votes, and reports a user chooses to share with the community, along with moderation outcomes.

Product analytics & telemetry. Through our analytics provider we record which pages and features are used, browser and device type, and an approximate location derived from an IP address, plus an activity-event stream and an AI-usage cost ledger (which never stores prompt text). We use this to understand usage, fix problems, and improve the product.

Depending on the account and where the user lives, we rely on one or more of these bases:

• Performance of a contract. To create an account and deliver the learning experience the user (or their school) asked for.
• Legitimate interests. To keep the service secure, prevent abuse, and improve the product with aggregated analytics, balanced against user privacy.
• Consent. For optional features that go beyond the core service, such as exam webcam proctoring, which is off unless a school enables it and the student agrees.
• Legal obligation. To meet requirements such as responding to verified data-subject requests and keeping limited compliance records.
• School authorization (FERPA).For school-provisioned accounts, processing is carried out on the school's behalf under the FERPA school-official exception.

FERPA (school-official exception). When a school or district uses MathPath, student records that we process on its behalf are education records under the school's control. We act as a school official with a legitimate educational interest: we use student data only to provide and support the service, we do not use it for our own purposes or for advertising, and we do not re-disclose it except as the school directs or the law allows. The school remains responsible for consent and for parental rights of access and correction, which we help fulfil through the export and deletion tools.

COPPA (school consent for under-13). MathPathis not directed to the general public under 13. Where a school provisions accounts for students under 13, the school provides the consent required under COPPA on behalf of parents, consistent with FTC guidance, for the limited educational purpose of using the service. We collect from those students only what is needed to run the learning experience, never for advertising, and never sell it. Parents may, through the school, review their child's information or ask that it be deleted.

MathPath uses AI to generate explanations, hints, tutor replies, and spoken audio. To do this the relevant content (for example a question, an answer, or a chat message) is sent to our AI provider, Anthropic (Claude models), and, for text-to-speech, to ElevenLabs. These providers process the content to return a result.

We do not use learner content to train our own models, and we require that our AI provider does not train on it or retain it beyond what is needed to return a result (zero-data-retention terms). AI responses can be wrong or incomplete: treat them as a learning aid, not an authoritative answer.

We use a small set of vetted vendors to run MathPath. We share only the data each needs for its purpose, and we do not permit them to use it for their own purposes. Current sub-processors:

We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the service.

We keep account and learning data for as long as the account is active so progress is there on return. Uploaded media and exam snapshots are deleted on an age-based schedule. Data export artifacts self-expire and are erased within about seven days of being generated. When an account is deleted, we remove its personal data promptly, except for a small set of append-only compliance records (for example a deletion receipt that proves the erasure happened, holding row counts but no content).

For research and product quality we keep anonymized question statistics that cannot be traced back to a person: when an account is erased, per-item results are reduced to coarse, aggregate signals (correct/incorrect with a grade-band-and-month cohort, no identifier and no fine timestamp).

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of personal information, or to object to certain processing. MathPath builds two of these in directly:

• Export. From Account settings you can request a full copy of your data; we generate a downloadable archive.
• Deletion. From the same place you can permanently delete the account behind a typed confirmation, with a short grace window and a cancel path.

For anything else, email admin@learnhub.com and we will respond as required by applicable law. For school-provisioned accounts, please make requests through your school, which controls the records. We will not discriminate against anyone for exercising these rights.

MathPath is intended for users who are at least 13 years old, or younger students whose school has provisioned an account for them under the framing above. If you are under 18, use the service only with the involvement of a parent, guardian, or school. We do not knowingly collect personal information from a child under 13 outside a school arrangement; if you believe we have, contact us at admin@learnhub.com and we will delete it. We never sell student data, never serve behavioral advertising, and never use student data to build advertising profiles.

We take reasonable measures to protect information, including hashing passwords, encrypting traffic in transit, scoping access to what a role needs, and keeping an audit trail of administrative actions. No method of storage or transmission is perfectly secure, so we cannot guarantee absolute security, but we work to protect data and to respond promptly to problems.

We operate from the United States, and information is processed and stored there and in other countries where our service providers operate (see the sub-processor table). Data-protection laws in those countries may differ from those where you live; where required we use appropriate safeguards for cross-border transfers.

We may update this policy from time to time. When we make material changes we will update the date at the top and, where appropriate, notify you in the app. Continued use after an update means you accept the revised policy.

Questions about this policy or a data request? Email admin@learnhub.com.