M
Math Fact Expedition
How it works Pricing FAQ Founding Access
Legal · Children's privacy

Privacy Policy

Effective September 5, 2026 · Last updated September 5, 2026

Math Fact Expedition is operated by Advant Education LLC, a New Mexico limited liability company ("Advant Education," "we," "us," or "our"). This Privacy Policy explains what information we collect through the Math Fact Expedition website (mathfactexpedition.com) and web application (the "Service"), how we use it, and the choices you have.

We built Math Fact Expedition for children in grades 1–8, which means we take children's privacy seriously. This policy is written to comply with the Children's Online Privacy Protection Act (COPPA), the Family Educational Rights and Privacy Act (FERPA), and applicable state student privacy laws. We have tried to write it in plain language. If anything is unclear, email us at hello@mathfactexpedition.com.


1. The short version

  • Children never create their own accounts. A parent, guardian, or teacher (an "Adult") creates the account and adds student profiles.
  • We collect the minimum from children: a first name, an avatar choice, an optional PIN, and math practice data. Nothing else.
  • We never sell personal information. We never show ads. We never use children's data for advertising or marketing of any kind.
  • Adults control children's data. You can view, correct, or delete a student profile at any time from your dashboard or by emailing us.
  • We use a small number of service providers to run the Service (hosting, database, payments, email). They are listed by name in Section 6 and are contractually limited to providing those services.
  • We keep children's data only as long as needed and delete it on a published schedule (Section 8).

2. Who this policy covers

This policy applies to:

  • Adults — parents, guardians, and educators who create an account and purchase or manage a plan.
  • Students — children who use the Service through a profile created by an Adult. Students may be under 13.
  • Visitors — anyone who visits mathfactexpedition.com without an account.

Math Fact Expedition is intended for use in the United States. If you use the Service from outside the U.S., your information will be processed in the U.S.


3. Information we collect from Adults

When you create an account or purchase a plan, we collect:

  • Account information: your name, email address, password (stored only as a cryptographic hash, never in plain text), and whether you are a parent/guardian or an educator.
  • Purchase information: the plan you bought, the date, the amount, and a Stripe transaction identifier. Payment card numbers are collected and stored by Stripe, not by us. We never see or store your full card number. Stripe may collect your billing address to calculate sales tax and prevent fraud.
  • Group information: the group code assigned to your family or classroom, and the student profiles you create under it.
  • Communications: emails or messages you send us, and our replies.
  • Usage information: when you sign in, which dashboard pages you view, and similar technical logs used to operate and secure the Service.

We use this information to create and secure your account, process your purchase, deliver the Service, send you progress reports and service notices, respond to your questions, and (if you opt in) send you product updates.


4. Information we collect from Students

Students access the Service only through a profile that an Adult has created. We collect only the following from or about a Student:

  • First name (entered by the Adult; a nickname or initials are fine).
  • Avatar selection (a cartoon ocean creature chosen from our list; no photos).
  • Optional PIN (if the Adult turns on PIN protection; stored only as a hash).
  • Practice and progress data: which math facts the Student has practiced, whether each answer was correct, response time, assessment results, mastery levels, and session dates and times. This is the data that makes the Service work — it's how we decide which facts to show next and how we generate progress reports.
  • Technical information incidental to using a web application: browser type, device type, approximate connection information, and error logs. We do not use this to identify or track individual Students across other websites.

We do not collect from Students: last names, email addresses, phone numbers, home addresses, photos, video, audio, precise geolocation, biometric identifiers, government identifiers, social media handles, or any information about other people. The Service has no chat, messaging, social, or public-posting features. Students cannot communicate with other users through the Service.

We do not use persistent identifiers from Students for behavioral advertising, cross-site tracking, or building marketing profiles. Any persistent identifiers (such as a session token) are used solely to support the internal operations of the Service — specifically, to keep the Student signed in during a practice session, to save their progress, and to maintain security.


5. Children's privacy and parental consent (COPPA)

Math Fact Expedition is designed for children, including children under 13. We comply with COPPA as follows.

How consent is obtained

Parent and guardian accounts. When a parent or guardian creates a Family account and adds a student profile, the parent is providing verifiable consent to the collection and use of that child's information as described in this policy. We confirm the parent's email address before the account becomes active, and the parent holds the credentials that control the child's profile.

Educator accounts. When a teacher or school creates a Classroom account and adds student profiles, the school is providing consent on behalf of parents for educational purposes, consistent with Federal Trade Commission guidance permitting schools to authorize the collection of student information for the use and benefit of the school. By creating student profiles, the educator represents that they have the authority to do so under their school's or district's policies.

What parents and schools can do

An Adult may, at any time:

  • Review all information we hold about a Student, through the Adult dashboard.
  • Correct a Student's first name, avatar, or PIN.
  • Delete a Student's profile and all associated practice data. Deletion is immediate in the live database and is purged from backups on the schedule in Section 8.
  • Refuse further collection by deleting the profile or the account. A Student cannot use the Service after their profile is deleted.
  • Request a copy of a Student's data by emailing hello@mathfactexpedition.com. We will verify that you are the Adult who controls the account before releasing anything.

Parents whose child uses the Service through a school account should contact the school first; the school controls the account. We will also honor requests directly from a parent once we've confirmed the child's identity with the school.

No disclosure to third parties for their own purposes

We do not disclose Students' personal information to any third party for that third party's own use. The only parties that ever process Student data are the service providers in Section 6, who act on our instructions and are contractually prohibited from using the data for anything else. Because we make no other disclosures, no separate consent for third-party disclosure is required or requested.

Group codes and the roster screen

To make sign-in easy for young children, Students sign in by entering a group code (one code per family or classroom) and then tapping their own first name and avatar from a list. Anyone who enters a valid group code will see the list of first names and avatars in that group. No other information is shown — not last names, not progress, not PINs.

This is the same approach used by widely adopted classroom tools. To reduce risk:

  • Adults should treat group codes like a classroom door code: share them only with Students in the group, and regenerate the code from the dashboard if it is shared more widely than intended.
  • Adults can require a PIN for every Student in the group. We recommend this for shared classroom devices.
  • Adults can see sign-in history for each Student and can end any active session.
  • The Service has no leaderboards, rankings, or public comparisons between Students, so there is little to gain by signing in as someone else.

6. Service providers (who else touches the data)

We use the following providers to run the Service. Each processes data only on our behalf and under a contract that restricts its use to providing the service to us.

Provider What it does Data it handles
Supabase, Inc. Database hosting and account authentication All account data, student profiles, and practice data. Stored in the United States.
Vercel, Inc. Website and application hosting; performance monitoring Technical request data and anonymized page-performance metrics (Vercel Speed Insights). No student names or progress data are sent to Speed Insights.
Stripe, Inc. Payment processing Adult name, email, billing address, and payment card details. Stripe's own privacy policy governs card data.
Kit (ConvertKit) Email delivery to Adults Adult name and email address, plan type, and email engagement (opens/clicks). Kit never receives any Student information.

We may add or replace providers as the Service evolves. If we do, we will update this table. If any change would involve disclosing Students' personal information to a new category of recipient, we will obtain fresh consent before doing so.

We do not sell personal information. We do not share personal information with data brokers, advertisers, or analytics companies for their own purposes. We do not use third-party advertising or tracking technologies anywhere in the Service.

We may disclose information if required by law, subpoena, or court order; to protect the rights, property, or safety of users or the public; or in connection with a merger, acquisition, or sale of assets, in which case the successor will be bound by this policy for data already collected.


7. Student data and schools (FERPA and state student privacy laws)

When an educator or school uses Math Fact Expedition, we act as a "school official" with a legitimate educational interest under FERPA, and as a service provider / operator under applicable state student privacy laws. In that role:

  • The school owns and controls its student data. We hold it on the school's behalf.
  • We use student data only to provide the Service to that school. We do not use it for any other purpose, including product marketing, and we do not build profiles of students for any purpose other than delivering and improving the educational Service for that student.
  • We do not sell student data, use it for targeted advertising, or disclose it to third parties except the service providers in Section 6.
  • We will delete student data when the school asks us to, when the school's account is closed, or according to the retention schedule in Section 8, whichever comes first.
  • We will notify the school without unreasonable delay if we become aware of a breach affecting its student data (Section 9).
  • We will make student data available to the school for review, correction, or transfer at any time on request.

Schools and districts that require a signed Data Privacy Agreement may contact us at hello@mathfactexpedition.com. We offer the Student Data Privacy Consortium's National Data Privacy Agreement (NDPA) as our standard form, and we will honor an existing NDPA on file in your state's SDPC alliance where applicable.


8. Data retention and deletion schedule

Under COPPA we are required to publish how long we keep children's personal information. Here is our schedule.

Data Retained until Then
Student profile and practice data (active account) While the Adult's account is active and the profile has not been deleted Deleted on request or on account closure
Student profile and practice data (Adult deletes the profile) Immediately removed from the live database Purged from encrypted backups within 30 days
Student profile and practice data (Adult account inactive) 24 months after the Adult's last sign-in, after two email reminders Deleted, then purged from backups within 30 days
Student profile and practice data (subscription expired, not renewed) 90 days after expiration, so a family can renew without losing progress Deleted, then purged from backups within 30 days
Adult account information While the account is active, plus 24 months of inactivity Deleted, except records we must keep for tax, accounting, or legal purposes (Section 8, below)
Purchase and payment records 7 years, as required for tax and accounting Deleted
Sign-in and security logs 90 days Deleted
Support emails 2 years Deleted

We retain children's personal information only as long as reasonably necessary to fulfill the purpose for which it was collected. We do not keep it indefinitely.

To delete a profile or account yourself, use the Adult dashboard. To request deletion by email, write to hello@mathfactexpedition.com from the email address on the account.


9. Security

We maintain a written information security program appropriate to the sensitivity of the data we hold and the size of our operation. It includes:

  • Encryption of data in transit (TLS) and at rest.
  • Passwords and PINs stored only as salted cryptographic hashes.
  • Role-based access: Students can only see their own practice screens; Adults can only see the profiles in their own group; database rules enforce these boundaries at the data layer, not just in the interface.
  • Least-privilege access for our own staff and contractors, with access logged.
  • Regular review of our service providers' security practices.
  • Automated dependency and vulnerability monitoring on our codebase.

No system is perfectly secure. If we learn of a breach affecting personal information, we will notify affected Adults (and affected schools) by email without unreasonable delay and as required by applicable law, and we will describe what happened and what we're doing about it.


10. Your choices and rights

Access, correction, and deletion. Adults can manage their own information and their Students' information from the dashboard, or by emailing us. We respond to verified requests within 30 days.

Email preferences. We send three kinds of email: (1) transactional messages you can't opt out of while you have an account (receipts, password resets, security notices); (2) progress reports about your Students, which you can turn off in the dashboard; and (3) product updates and tips, which you can unsubscribe from using the link in any such email. We never email Students.

State privacy rights. Residents of certain states (including California, Colorado, Connecticut, Virginia, and others) have rights to access, delete, correct, and port their personal information, and to opt out of sales or targeted advertising. We do not sell personal information or engage in targeted advertising, so there is nothing to opt out of. We honor access, deletion, correction, and portability requests from residents of any state, whether or not a specific law requires us to. We will not discriminate against you for exercising these rights.

California minors. If you are a California resident under 18 and have posted content on the Service, you may request its removal. The Service currently has no user-posting features, but this right applies if that changes.


11. Cookies and similar technologies

We use only the technologies needed to make the Service work:

  • Authentication tokens stored in your browser so you stay signed in. These are first-party and are deleted when you sign out or when they expire.
  • Application caching (a service worker) so the app loads quickly and works during brief connection drops. This stores application files, not personal information.
  • Vercel Speed Insights, which collects anonymized page-load performance measurements. It does not use cookies and does not identify individual users.

We do not use advertising cookies, social media pixels, or third-party analytics trackers. Because we do not track users across other websites, we do not respond differently to "Do Not Track" signals — there is no cross-site tracking to turn off.


12. Changes to this policy

If we make material changes — especially any change to how we collect, use, or disclose Students' information — we will notify Adults by email before the change takes effect and, where COPPA requires it, obtain new consent. Minor clarifications may be posted without notice. The "Last updated" date at the top tells you when this policy last changed.


13. Contact us

Advant Education LLC d/b/a Math Fact Expedition 1209 Mountain Road Pl NE #8063 Albuquerque, NM 87110 hello@mathfactexpedition.com (505) 481-3077

If you have a question or concern about privacy, email us and we will respond within 5 business days.

See also our Terms of Service.
Math Fact Expedition
A product of Advant Education
How it works Pricing FAQ Contact
© 2026 Advant Education. All rights reserved. Made in New Mexico · Privacy · Terms