Privacy & Data Notice

Who operates MathVista

MathVista is an educational service operated in the United States. For privacy or support questions, email info@mathvista.app.

Who should use the experience

MathVista covers mathematics in Grades 3–8. The current assessment setup is for adults evaluating the experience with invented answers; do not submit a child’s responses through that evaluation flow. Reviewing a sample report does not require an assessment. The setup checkbox is a self-declaration, not identity verification or verifiable parental consent.

Quick check and full diagnostic

The Quick Math Check ends after eight saved answers or skips and offers a preliminary Starter Snapshot. Continuing into the full diagnostic is optional and uses the same saved run and responses. The same access, deletion, and retention rules apply to both experiences.

Information used in a diagnostic

To select questions and prepare a report, MathVista processes the selected grade, answers or skips, response timing, assessment progress, findings and recommendations, and the content and engine versions used for that run. A random ownership token in an essential, HTTP-only cookie helps the same browser reopen a saved assessment. Assessment and ownership identifiers, responses, and findings can be personal information even without a child’s name. They are separate from the grouped analytics described below.

Information the child is not asked to provide

The diagnostic does not ask a child for a name, email address, birth date, school, postal address, photo, voice recording, or free-text response. Read-aloud uses the browser’s speech-synthesis feature; MathVista does not request microphone access. Available voices and any speech processing are controlled by the browser or operating-system provider.

How information is used

Assessment information is used to choose the next question, save progress, create the family report, troubleshoot the service, and protect it from misuse. MathVista does not sell or rent assessment information or use it for advertising or behavioral ad targeting. Email delivery and the optional survey are not conditions for receiving findings. The experience has no public profiles, chat, or answer feed.

Hosting, storage, and service providers

Vercel hosts the website and provides Web Analytics and Speed Insights. Neon provides the hosted PostgreSQL database. When report email is enabled, Resend delivers the copy requested by an adult. These providers may process technical request information, such as IP address, browser details, timestamps, and security logs, to operate and protect their services. For abuse prevention, MathVista briefly uses network information to apply request limits. It stores a protected value derived from the IP address instead of the address itself in its rate-limit records; those records expire when the limit window ends. The essential ownership cookie lasts up to 7 days and is renewed when a new run starts; each run still expires 7 days after its own creation. Browser storage remembers choices such as the avatar, route, and audio preference until it is cleared. Blocking the ownership cookie can prevent saved-session access. Clearing browser data can remove access to a saved run, but does not itself delete the server record.

Website analytics

Vercel Web Analytics measures page views and broad traffic sources on selected public pages. The application excludes assessment, results, report, My overview, and internal engagement pages from page-view tracking, and removes URL query strings and fragments. MathVista does not send answer choices, child identifiers, or custom child-activity events to Vercel. Vercel describes its Web Analytics as cookie-free and says its request-derived visitor hash expires after 24 hours. It can provide aggregated page views, referrers, country and other location estimates, device type, operating system, and browser details. See Vercel’s Web Analytics privacy information.

MathVista also counts selected page views, links, grade selections, diagnostic starts, question checkpoints, completions, report views, and PDF downloads. These records are stored as grouped daily totals by page, event, broad source category, or grade; they do not contain a child’s answers, name, email, IP address, or device identifier. An optional report survey is counted by question and response, separately from assessment records. If optional PostHog measurement is enabled, MathVista sends the event name, selected grade, and a new random identifier for that event. It does not send answers, report contents, email addresses, or IP addresses to PostHog, and it does not create a browser tracker or persistent person profile. Question checkpoints stay in MathVista’s grouped totals. Speed Insights measures page performance; assessment and report URLs are replaced with generic route names before measurement, and API, internal, and private shared-report routes are excluded. See Vercel’s Speed Insights privacy information.

When configured, the private engagement dashboard reads grouped country and visitor totals from Vercel’s Web Analytics API. MathVista receives aggregate country rows, not individual IP addresses or visitor records, and does not store those totals in the assessment database. Vercel’s visitor figure is an estimate based on its own deduplication method; it is not a count of raw IP addresses or distinct people across the selected date range. Aggregate MathVista analytics records are kept for up to 13 months.

Assessment progress measurement

MathVista counts when an assessment starts and when a participant has answered or skipped 1, 4, 8, 12, 16, 20, 24, 28, or 32 questions. A successful early finish counts as completed at later checkpoints. The internal dashboard receives grouped totals by date, grade, checkpoint, and completion position. It does not receive answer choices, right-or-wrong outcomes, report contents, or assessment identifiers through these progress totals. Assessment answers are retained only as needed to operate the diagnostic and provide its report, with access available for up to 7 days from the run’s creation.

Reports and sharing

An ordinary live report is protected by the originating browser’s ownership cookie; its URL alone does not provide access. An emailed shared-report link works differently: anyone who has that link can open the report while it is valid. An adult may download a one-page PDF and share it with people they choose. Anyone who receives the PDF can read and keep a copy, so share it thoughtfully.

Optional report email

No email is needed to start or finish a diagnostic. When email delivery is enabled, an adult viewing their report may request a one-time email containing a private report link and one-page PDF. The link expires within 24 hours or sooner if the assessment expires. MathVista sends the recipient address and report to Resend for delivery; the email address is not added to an account or marketing list and is not stored with the assessment. The adult must enter their own email address twice and affirmatively request delivery. This requests only that email; it is not consent to marketing or a substitute for parental consent to collecting a child’s assessment data. Delivery is immediate and inbox ownership is not verified first. Anyone with the shared link or attachment can read the report, so check the address carefully. Resend states that standard retention for email data and logs is 30 days on its Free, Pro, and Scale plans; provider settings and terms apply. See Resend’s security and retention information. A mailbox or forwarded copy may be kept longer. Report delivery is not a subscription to marketing.

Retention and deletion

Assessment responses, progress, and findings are kept to support pause/resume and the family report. Access expires 7 days after creation, whether or not the assessment is complete; starting another run does not extend the original run. Family and shared-link access is then denied. The scheduled daily cleanup deletes expired assessment rows in batches. Short-lived rate-limit records help prevent abuse and expire after windows of 1 minute to 7 days, depending on the action; the same cleanup removes expired records. Survey-saving acknowledgements help prevent duplicate counts; they do not store survey answers or a raw assessment identifier and expire after 7 days. Grouped usage and survey totals are kept for up to 395 days (approximately 13 months) to compare trends. Provider logs and backups follow the applicable provider retention settings and are not erased immediately by an in-product deletion. Parents can delete a saved assessment sooner through My overview. Deleting browser cookies alone may remove access without deleting the server record, so use the in-product delete control. Deleting a run disables its shared link, but cannot recall a PDF already downloaded or emailed. Aggregate totals cannot be linked back to a particular assessment for individual deletion.

Children’s privacy

COPPA protects personal information collected online from children under 13. A parent checkbox, a free service, or the absence of a child’s name does not by itself remove applicable notice and consent requirements. The current adult-evaluation flow does not obtain verifiable parental consent. Parents should not use that flow to submit a child’s responses. A public notice does not replace direct parental notice or consent where required.

Your privacy choices

You may choose not to start, stop at any time, review available findings in the originating browser, or delete its saved runs from My overview. The delete control removes all runs owned by that browser and disables their shared links; future use requires a new run. Email and the survey are optional. Parents may, where applicable, review a child’s personal information, request deletion, and refuse further collection or use. To ask a question or request help with access or deletion, email info@mathvista.app. The report summarizes findings; it is not a complete copy of every stored response. Clearing the ownership cookie can prevent self-service access, and a session URL alone does not prove parental authority. A request may require a proportionate ownership and authority check. Do not send a child’s identity documents or other sensitive information in an initial inquiry. Downloaded or emailed PDFs are outside MathVista’s control once delivered.

Changes to this notice

This notice will be updated if MathVista materially changes the information it collects, the purposes for using it, or its sharing practices. Where the law requires direct notice or fresh consent, an updated page or continued use will not replace that requirement. The effective date above identifies the current version.

Location and legal rights

MathVista is operated in the United States. Service providers may process information in the United States or other locations. This notice does not limit any privacy or consumer rights that apply to you.

Security and required disclosures

The service uses HTTPS, restricted report access, and request limits. No online service can guarantee perfect security. Information may be disclosed when legally required or reasonably necessary to investigate misuse or protect the service and its users; that is not permission for unrelated advertising. See the Terms of Service for the rules governing use of MathVista.