Last updated: 15 June 2026
Who we are
MathedUp (“we”, “us”) provides maths self-study tools at mathedup.co.uk. We are the data controller for the personal data described in this notice. You can contact us at mathedup01@gmail.com (a postal address is available on request).
Who this is for
MathedUp is used by students (those in Year 9 and above can sign up themselves; under-13s are signed up by a parent or guardian), parents/guardians, and teachers.
What we collect and why
| Data | Why | Lawful basis |
|---|---|---|
| Email & password | create and secure your account, sign you in | Contract |
| First name + last initial | so a teacher or parent can recognise you; we do not store full surnames | Contract |
| Year group | to choose the right content and to know whether a parent needs to register the account | Contract |
| Your self-evaluation (RAG) and quiz scores | to show your progress and let a linked teacher or parent see how you are getting on | Contract |
| A parent’s children’s year groups | to set up and manage their children’s accounts | Consent (parental) |
| Marketing opt-in | only if you tick the box, to send updates and offers | Consent |
We do not collect special-category data (such as health, additional learning needs, or ethnicity). We do not use your data for advertising profiling and we do not sell it.
Children and parental consent
In the UK, the age at which a child can agree to an online service is 13. If a student is under 13, a parent or guardian creates and manages the account and provides consent on the child’s behalf. Students in Year 9 and above can register themselves. We ask for the minimum information needed, and we never show a student’s real name publicly — on leaderboards and shared areas a student is identified only by a gamer tag they choose.
Teachers and classes
A teacher can create a class and share a class code. A student (or their parent) chooses to join by entering that code, which shares the student’s first name, last initial and progress with that class’s teacher(s) — and only with them. Teachers do not see a student’s email address or their data in other classes. A student or parent can leave a class at any time, which stops that sharing.
Who we share it with
We use a small number of service providers who process data on our behalf:
- Supabase — secure database and hosting for accounts and progress. Where data is processed outside the UK/EEA, it is protected by appropriate safeguards such as UK/EU Standard Contractual Clauses.
- Google — we keep a summary of sign-ups (name, role, year group) in our own Google account.
- DreamHost — website hosting.
- Our email provider — to send account emails and, if you have opted in, update emails.
We do not share your data with anyone else except where required by law.
How long we keep it
We keep your data for as long as your account is active. If you ask us to delete it, we will. We also delete accounts that have been inactive for three years.
Your rights
You can ask us to: see a copy of your data, correct it, delete it, export it, or stop sending you marketing. You can do much of this in your account settings, or by emailing mathedup01@gmail.com. You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ico.org.uk).
Cookies and storage
We use a small amount of browser storage to keep you signed in. We do not use advertising or third-party tracking cookies.
Changes to this notice
We may update this notice as the service grows, and we will post the date of the latest version at the top.