Mind Math is a freemium, ad-free math app. The installed iOS and Android free plan includes ten regular Practice sessions shared across all learners and grades, one attempt for every other test, the first lesson in each topic, and five game plays. Learner profiles, progress, rewards, and native free-plan usage counts work locally on the device. Optional monthly or yearly Premium billing is processed by the App Store or Google Play. We do not sell personal information, show behavioral ads, or track people across apps or websites.

On supported Apple devices, Mind Math reads the App Store's signed original app version to recognize customers who bought the app before subscriptions. The app stores only a local Lifetime Premium record and its source. Existing installations may also receive that entitlement from a one-time check for prior app state. On Android, a grown-up can enter the Google Play order number from the original paid-app receipt after a reinstall. Mind Math sends it securely to Google only for purchase verification, discards the number after the check, and retains a one-way hash plus restore timestamps without attaching them to a learner, profile, device, or analytics event. Mind Math does not receive payment-card details.

A learner profile contains a nickname, grade from 1 through 10, and a bundled color avatar. Progress and downloaded reviewed lesson videos stay on the device. Mind Math does not ask for a learner photo, school, ZIP code, email address, phone number, or precise location.

We collect app-activity information so we can see which parts of Mind Math each learner uses and put our teaching time where learners are: which screens are opened, which lessons, videos and games are started, whether a practice answer was right, and how long a session ran. It is sent to our own server in the background, recorded against the learner's nickname, grade, and a random identifier the app makes for their profile — the same nickname and grade used for known-friend play. Each report also notes the country it came from, whether it was the website or the iPhone or Android app, and which app version. We do not store IP addresses and never record a town, an address, or a map location. It does not include anything a learner types or the answers they give. It is never used for advertising and never shared with advertisers or other apps. We can switch this off for every installation from our server, without an app update.

Mind Math also uses PostHog as an analytics service provider on the website and in the iPhone and Android apps. PostHog receives a smaller anonymous set of product events: the screen or feature used, lesson, practice and game activity, coarse test mode/outcome/counts and duration, feedback type/rating/safe route, subscription-flow outcomes, exact grade, platform, app version, and an optional two-letter country code supplied by Mind Math's server. Feedback text, references, question and topic details, URLs, metadata, and user IDs never go to PostHog. The country code is kept in memory only and is not based on device location or locale. With this setting on, PostHog also receives privacy-masked session replays so we can diagnose navigation and layout problems. Replay shows ordinary app text, math content, images, and interactions while hiding every text-entry control and learner nickname. Native system pickers and explicitly private regions are also hidden. It does not record console output, network requests, headers or bodies, embedded frames, or the staff-only operations screens. A new random identifier and replay-only session ID are created for each app launch and are not kept across launches; the session ID only associates events with the same masked replay. PostHog does not receive the learner's nickname, profile identifier, school, question identifier, selected answer, typed text, store receipt, transaction identifier, device advertising identifier, IP address, city, coordinates, device location, locale, timezone, precise location, or device model. PostHog location enrichment, crash capture, feature flags, and person profiles are disabled. Subscription analytics records when an available monthly or yearly offer is shown and distinguishes a cancelled checkout from an actual failure without sending price or payment information. A limited set of navigation and feature-entry taps is also counted by a fixed label; button text, screen text, touch coordinates, and the surrounding view hierarchy are removed from those product events before sending. A grown-up can turn PostHog analytics and replay off under Settings → Anonymous Product Analytics. This preference does not turn off the separate activity records described above.

Known-friend battle codes are unavailable until a verified grown-up approves them for that learner through our parental-consent provider, PRIVO. We store the consent reference, approved feature scopes, and security credentials needed to enforce that decision. A learner is never placed in an open directory or public matchmaking queue.

AI Coach is not in the current release. If it is enabled in a reviewed release, every learner requires parent or guardian permission and adult verification through Epic Kids Web Services. Mind Math sends Epic the grown-up email, the child's country or region code, and an opaque one-time request identifier—not the child's name, school, progress, voice, or transcript. Permission can be withdrawn in Profiles, which blocks new coach sessions on the server.

Spelling Bee uses keyboard entry for spelling answers and does not use the microphone or speech recognition. Typed spelling answers are hidden from session replay.

A learner may create or enter a random, single-use code shared with a friend they already know. Codes expire after 15 minutes, pending invitations after 24 hours, and completed battle results after 30 days. There is no chat, public profile search, social feed, open matchmaking, or rematch directory.

Reviewed lessons play only as MP4 files hosted at videos.mindmath.org or downloaded privately to the device. Mind Math does not embed YouTube or arbitrary web pages. Camera access is requested only to scan a Mind Math battle code. The app does not request photo-library or notification permission.

Raw audio and transcript text are not retained. Connected learner records are de-identified after 12 months of inactivity. A grown-up can delete a learner in Profiles, which removes local progress and requests deletion or de-identification of connected records. For help, contact privacy@mindmath.org.

Privacy questions: privacy@mindmath.org. Product support: support@mindmath.org. United States launch service is provided through mindmath.org/numbersense.