Back to home

Privacy Policy

Last updated: November 1, 2026

This Privacy Policy explains what personal data MathMe (“we”, “us”, “the App”) collects in its iOS, Android and web versions and on the website math-me.com, why, on what legal basis, how long we keep it, who receives it, and what rights you have. See also our Terms of Service and the Children and Teens page.

In short: you can play as a guest without giving us anything; an account needs your email address; analytics, crash reports and the measurement of our advertising with Meta run only if you allow them; ads in the free version are non-personalised for everyone; we never see your password or payment details; and you can delete everything in the App at any time.

1. Who We Are

The controller of your personal data is MTNT Solutions FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

Contact for all privacy questions and requests, from any country: mathme@mtnt-solutions.com. We have not appointed a data protection officer; this address reaches the people responsible for data protection at MTNT Solutions FZE.

2. What We Collect and Why

You can use Practice and Swipe as a guest, without an account; a guest’s game data stays on the device. The course, Arcade, Survival, Time Attack, duels and leaderboards require a free account (Google or Apple sign-in). The table lists every category of personal data, where it comes from, why we use it, the legal basis, how long we keep it and who receives it. The legal bases are named as in the EU and UK GDPR — Art. 6(1)(a) consent, (b) performance of our contract with you, (c) legal obligation, (f) legitimate interests; section 6 explains how they map to the law of the UAE and other countries.

We do not ask for your phone number, postal address, date of birth, photos, contacts or precise location. The App has no chat or messaging between users. Payments are processed entirely by Apple or Google; neither we nor RevenueCat receive your card or bank details.

Account data is needed only for the features that require an account; everything else is optional. Without signing in you can still use Practice and Swipe.

How measuring with Meta works. The Meta SDK starts with the App, with its automatic events and advertising-identifier collection switched off. Until you press “Allow”, it only fetches the App’s settings from Meta; it logs no events and collects no identifiers. RevenueCat passes Meta no advertising identifier and no IP address of yours. On iOS, if you do not allow tracking, the advertising identifier is unavailable; Meta says it restricts the use of such events and uses privacy-preserving methods to measure ads, and campaign results also come from Apple’s SKAdNetwork. For events sent by the Meta SDK and the Meta Pixel we turn on Meta’s Limited Data Use option: for people in the US states where Meta offers it, which Meta determines from their location, Meta processes these events as our service provider under its state-specific terms. The web version does not contain the Meta SDK.

On iOS, subscription events reach Meta only if you allowed both analytics in the App and tracking in the App Tracking Transparency prompt.

Links to the stores. If you accepted cookies and press the Google Play button on the website, the link carries mm_vid and the campaign labels in its referrer parameter. Google Play keeps them and returns them to the App at first launch (Install Referrer), so Google receives this identifier as part of the link. If you did not accept cookies, the link carries only the campaign labels. The App Store link carries only a short campaign label, never an identifier.

3. Service Providers

We use the following providers. Each processes personal data on our behalf or, where its own terms say so, as an independent controller under its own privacy policy:

• Supabase — accounts, database, real-time duels, and the measurement data described in section 2. Our project is hosted in Supabase’s eu-central-2 region (Zurich, Switzerland). Privacy policy
• Google Firebase — Analytics, Crashlytics (crash reports, iOS and Android), Remote Config (feature settings), Cloud Messaging (push notifications). Privacy information
• Google AdMob — non-personalised ads in the free version on iOS and Android, with Google’s consent form for the EU/EEA, the UK and Switzerland. Google Privacy Policy
• Google Sign-In and Sign in with Apple — sign-in. Google Privacy Policy, Apple Privacy Policy
• RevenueCat — subscription management for MathMe Pro; receives purchase information from the App Store or Google Play. Privacy policy
• Apple App Store and Google Play — distribution of the App and all purchases. Apple Privacy Policy, Google Privacy Policy
• DigitalOcean — hosting of the website math-me.com and the web version app.math-me.com. Privacy policy
• GoDaddy — domain name and DNS of math-me.com; it receives no data about our users. Privacy policy
• Google Analytics — website analytics after you accept cookies. Google Privacy Policy
• Meta Platforms — measuring and delivering our advertising on Meta’s platforms: the Meta SDK in the App and the Meta Pixel on the website, only after you allow them. Meta Privacy Policy

Web version (app.math-me.com). When you open the web version, your browser also loads parts of the app engine and fonts from Google (www.gstatic.com, fonts.gstatic.com) and, for Google sign-in, a script from accounts.google.com. These providers receive technical data from your browser such as your IP address and browser information. MathMe does not sell subscriptions on the web and no payment is made there. The web version shows no ads and sets no advertising cookies; it keeps your session and settings in your browser’s local storage. If you accepted cookies on math-me.com, the web version also reads the mm_vid cookie (see Cookies on This Website).

We do not sell personal data, and we do not give it to anyone not listed in this policy except where the law requires it, for example under a valid order of a court or authority.

4. International Transfers

Wherever you live, your data is processed outside your country: our main database is in Switzerland, and Google, Apple, Meta, RevenueCat and DigitalOcean process data in the United States and other countries. We transfer data only to providers that commit, in their data processing terms, to protect it to a standard equivalent to the law that applies to you:

• EU/EEA, UK, Switzerland: where data goes to a country without an adequacy decision, the transfer relies on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or the provider’s certification under the EU-U.S. Data Privacy Framework and its UK and Swiss extensions.
• United Arab Emirates: transfers outside the UAE rely on the provider’s contractual commitments to protect the data to the standard of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, for Switzerland and the EU, on the level of protection their law provides.
• Other countries: the same contractual safeguards; where your law requires your consent for an international transfer, your use of the App after reading this policy is how you give it, and you can withdraw it by deleting your account.

You can ask us for more information about these safeguards at mathme@mtnt-solutions.com.

5. Your Rights

Whoever you are and wherever you live, you have the right to:

• access your personal data and receive a copy;
• rectification of inaccurate data — you can also change your nickname in the App;
• erasure of your data;
• restriction of processing;
• object to processing based on legitimate interests;
• data portability — receive the data you gave us in a machine-readable format;
• withdraw consent at any time, without affecting processing that happened before;
• lodge a complaint with the data protection authority of the country where you live or work — section 6 names them.

We handle requests from every country in the same way; where the law of your country gives you further rights, you have those too.

How to use them:

• Analytics, crash reports, measuring our advertising with Meta and the install source: Settings → Privacy & Data, on or off at any time. When you switch this off, the App stops logging events to Meta and sends us nothing further for these purposes, and Meta’s anonymous identifier is removed from RevenueCat, so later subscription events no longer go to Meta. On the website: “Cookie settings” in the footer.
• Ads: ads are non-personalised for everyone. In the EU/EEA, the UK and Switzerland, Settings → Privacy & Data → Ad privacy choices opens Google’s consent form again, where you can change or withdraw your choice at any time. On iOS, you can also allow or deny tracking in Settings → Privacy & Security → Tracking; on Android, you can delete or reset the advertising ID in the device settings. MathMe Pro shows no ads.
• Notifications: Settings in the App, or the system settings of the device.
• Delete your account: in the App, Profile → Settings → Delete Account; or, without the App, write to mathme@mtnt-solutions.com from the email address of your account with the subject “Delete my account”. The account and the data linked to it — profile, game data, coins, invitations, analytics events, the install-source record, notification tokens and privacy choices — are deleted permanently 30 days after the request; until then the deletion is pending and signing in again cancels it. Kept after deletion: nothing linked to you in our systems and nothing at RevenueCat — its record of the account is deleted in the same step. The website events connected to your install are deleted with it. What Meta has already received stays with Meta under its own terms. Apple or Google keep their own purchase records under their policies. Deleting the account does not cancel a subscription — cancel it in the store.
• Everything else — access, a copy, portability, restriction, objection: write to mathme@mtnt-solutions.com from the email address of your account, so that we can confirm it is you. We answer within one month; if a request is complex, we may extend this by up to two further months and will tell you why. We never charge for a request unless the law allows it for a manifestly unfounded or excessive one.

6. Your Country

This policy is written once for everyone. The following paragraphs add what the law of particular countries requires.

United Arab Emirates. MTNT Solutions FZE is established in the UAE, and the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, “PDPL”) applies to our processing. Under the PDPL we process your data on the basis of your consent — analytics, crash reports, measuring our advertising, notifications, website cookies — or because the processing is necessary to provide the service you asked for (the account, game data, subscriptions), to keep it secure (server logs, fraud prevention) or to answer you, or because the law requires it. Where this policy mentions “legitimate interests”, that processing is necessary for one of these purposes. You have the rights listed in section 5; you can also complain to the UAE Data Office. If a breach of your data is likely to harm your privacy, we notify the UAE Data Office and you without undue delay.

EU/EEA, UK and Switzerland. The EU GDPR, the UK GDPR and the Swiss FADP apply; the legal bases in the table are those of these laws. You can complain to the supervisory authority of your country — in the UK, the Information Commissioner’s Office (ICO); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC). Where we rely on consent, you can withdraw it at any time in Settings → Privacy & Data.

Brazil. The Lei Geral de Proteção de Dados (LGPD) applies. In addition to the rights above, you can ask which public and private entities we have shared your data with (listed in section 3) and complain to the Autoridade Nacional de Proteção de Dados (ANPD). Ads are non-personalised for everyone.

Türkiye. The Law on the Protection of Personal Data (KVKK, Law No. 6698) applies. You can complain to the Personal Data Protection Authority (KVKK Kurumu). We answer requests within 30 days.

South Korea. The Personal Information Protection Act (PIPA) applies. Analytics, crash reports and measuring our advertising run only with your consent; you can complain to the Personal Information Protection Commission (PIPC).

United States. Residents of states with a consumer privacy law (such as California, Colorado, Connecticut, Virginia, Utah, Texas and others) have the rights to know, access, correct, delete and port their data and to opt out of targeted advertising, sale and profiling. We do not sell personal data for money, we do not profile you, and ads inside the App are non-personalised for everyone. With your permission we send identifiers and events to Meta to measure our own advertising and help deliver it (section 2); depending on your state, this may count as targeted advertising. It happens only after you press “Allow”, and you opt out by switching it off in Settings → Privacy & Data in the App and in “Cookie settings” on the website. The other rights are exercised as described in section 5. Californians: see section 7.

7. California Residents (CCPA/CPRA)

What we collected in the last 12 months, in the categories of the California Consumer Privacy Act: identifiers (email address, account identifier, device and advertising identifiers, IP address); commercial information (subscription purchases); internet or other electronic network activity (use of the App, interaction with ads); approximate geolocation derived from the IP address — no precise location. We do not collect sensitive personal information as defined by the CCPA and do not use personal information to infer characteristics about you. The sources, purposes and recipients of each category are in section 2; retention is in section 11.

Sale and sharing. We do not sell personal information for money. Ads in the free version are non-personalised for everyone, and Google AdMob receives identifiers only to limit how often an ad is shown, to measure ads and to prevent fraud. With your permission we disclose identifiers and events to Meta to measure our own advertising and help deliver it (section 2). We use Meta’s Limited Data Use option where section 2 says so; other disclosures to Meta may count as “sharing” under the CCPA. This happens only after you press “Allow”, and you can opt out at any time: Settings → Privacy & Data in the App, “Cookie settings” on the website. You can further limit advertising by denying tracking on iOS (Settings → Privacy & Security → Tracking) or by deleting or resetting the advertising ID on Android; MathMe Pro shows no ads at all. The website and the web version show no ads. We do not ask for your age; for consumers under 16 we rely on the same “Allow” as opt-in, and we do not sell their personal information.

Your rights: to know what personal information we collect, use and disclose; to delete it; to correct it; to opt out of sale or sharing; and to limit the use of sensitive personal information (we do not use any). To make a request, write to mathme@mtnt-solutions.com from the email address of your account; an authorized agent may write for you with your signed permission. We answer within 45 days. We will not discriminate against you for using these rights — no different prices, quality or service.

8. Children and Teens

Under 13. MathMe is not for children under 13. We do not knowingly provide the App to them or collect their personal data. If we learn that a child under 13 has an account, we delete the account and its data; parents and guardians can ask for this at mathme@mtnt-solutions.com.

13 to 17. Teens can use MathMe with the permission of a parent or guardian, which they confirm at first launch and at sign-in. They have the same privacy rights as every other user and can contact us themselves; a parent or guardian can also exercise these rights for them — ask us what data the account holds, ask for a copy, correction or deletion.

What we rely on. We rely on the confirmation given at first launch and at sign-in. We do not verify ages, we do not ask for a date of birth, and we do not check who a parent or guardian is. Where the law of your country sets an age of digital consent above 13, the confirmation of the parent or guardian covers the consent given in the App.

What is the same for everyone, whatever their age: ads in the free version are non-personalised; analytics, crash reports and measuring our advertising with Meta run only after you press “Allow”; there is no chat, no messaging and no sharing of photos, video or audio; other players see only a nickname, an avatar and scores; purchases go through the store, where parents can require approval (Ask to Buy on Apple devices, purchase approval in Google Family Link). Details: Children and Teens.

9. Cookies on This Website

This section covers the website math-me.com. The website uses Google Analytics, our own measurement cookie and the Meta Pixel only after you press “Allow” in the cookie banner. Until then, and if you press “Not now”, these scripts are not loaded and none of these cookies are set.

How to change your choice. Use “Cookie settings” in the footer of any page; the banner opens again. If you withdraw consent, analytics and measurement stop, and the Google Analytics, mm_vid and Meta cookies set on math-me.com are deleted.

The website shows no ads. After you accept, the Meta Pixel sends Meta data about your visit to measure our advertising. The store-button click counter described in section 2 uses no cookie and no identifier.

10. Security

All connections to the App, the web version and the website are encrypted with TLS (HTTPS). In the database, row-level security lets each account read and change only its own data, and server functions check who is calling them. Access to production systems is limited to the few people who need it. We do not store passwords — sign-in goes through Google or Apple. No system is perfectly secure and we cannot guarantee absolute security, but we work to protect your data and fix weaknesses we find.

11. Data Retention

• Account, profile, game data, invitations, subscription status, notification settings and privacy choices: while the account exists. When you delete the account, they are deleted permanently 30 days after the request, together with analytics events linked to the account and push tokens.
• Guest data and the age and terms confirmation: on your device only, until you delete the App or its data.
• Usage analytics: up to 14 months, then deleted or aggregated so that it no longer identifies anyone; deleted earlier together with your account.
• Crash reports: 90 days at Google (Firebase Crashlytics).
• Push tokens: deleted when you sign out on the device, at the latest with the account; an unused token expires at Google after 180 days.
• Advertising data: as set by Google (see section 3).
• Transaction records: deleted together with the account, both in our systems and at RevenueCat; Apple and Google keep the records of purchases made through them under their own policies.
• Feedback and messages to us: up to 3 years after the conversation ends; deleted earlier together with your account.
• Server logs: up to 30 days. Store-button clicks on the website: up to 14 days.
• Website measurement events and install-source records: up to 14 months, then deleted; install-source records and the website events connected to them are deleted earlier together with your account. The mm_vid cookie: 180 days.
• What Meta receives: under Meta’s own terms (see section 3).
• Website cookies: see section 9.

12. Automated Decisions

The App picks the difficulty of problems from your recent answers. This is not a decision with legal or similarly significant effects on you, and we make no such decisions by automated means.

13. Data Breaches

If a security breach affects your personal data, we will notify the competent authority without undue delay — where the GDPR applies, within 72 hours of becoming aware of it — and, where the risk to you is high, notify you as well, in the way and within the time the law of your country requires.

14. Changes to This Policy

The date of the current version is shown at the top of this page. If we make significant changes — for example, new categories of data or new purposes — we will tell you in the App before they take effect and, where the law requires, ask for your consent again. Earlier versions are available on request.

15. Contact

MTNT Solutions FZE, Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates.

Email: mathme@mtnt-solutions.com — for requests from every country.

See also our Terms of Service and the Children and Teens page.

• Terms of Service
• Children and Teens