Privacy Policy

ReinMaths is an online maths learning platform operated by ReinMaths Limited, a company registered in England and Wales under company number 17426840, with its registered office at 38 Whalley Road, Clitheroe, BB7 1AW, Lancashire, England. In this policy, “we”, “us” and “our” mean ReinMaths Limited.

We are the data controller for the personal information described here. That means we decide what is collected and what it is used for, and we are the organisation answerable to you and to the regulator for it. We are registered with the Information Commissioner’s Office (ICO) under registration number ZC235194.

This policy is written to meet our obligations under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where a school or tutoring organisation has bought ReinMaths for its pupils, that organisation may be the controller for some of the information instead of us; if so, we will tell you and their own privacy notice will apply alongside this one.

Questions about anything in this policy go to info@reinmaths.co.uk.

The full policy is below and it is what governs our use of your information. This summary is here because a policy nobody reads protects nobody. It does not replace the detail that follows.

• We collect what the service needs to work — who you are, what the placement quiz found, the answers you give and how you are progressing.
• We do not sell your personal information, and we do not share it with advertisers or data brokers.
• We do not use your schoolwork to train anyone else’s AI models. Our suppliers are contractually barred from doing so.
• Public leaderboards are off unless you turn them on. You choose a display name and you can leave at any time.
• Analytics cookies are only set if you agree. Nothing non-essential is set before you choose.
• You can see, correct, export or delete your information, and you can complain to the ICO if we get it wrong.

Account and identity information

Your name, email address, password (stored only as a cryptographic hash — we never hold it in a form we can read), the year group or level you are working at, and your country. If a parent or guardian sets up or supervises the account, we also collect their name and email address and the link between the two accounts.

Learning information

The results of your placement quiz, the workbooks generated for you, the answers you submit, the marks and feedback given, how long you spend on questions, which topics you find difficult, and your progress over time. This is the substance of the service and the largest category of information we hold about you.

Uploads

Photographs or scans of handwritten working that you upload for conversion into typeset maths. Please upload only your working. Images may incidentally capture surroundings, faces or other content in the frame; we ask you not to include anything you would not want us to process, and we delete the original image once the answer has been converted and marked.

Payment information

Your billing name, billing address, the subscription tier you are on, the status and dates of your subscription, and a record of payments taken. Card numbers are entered directly with our payment provider and never reach our servers; we receive only a token, the card type and the last four digits so you can tell your cards apart.

Technical and usage information

Your IP address, browser type and version, device type, operating system, screen size, the pages you visit, the time and date of your visit, and the site you arrived from. Some of this is collected through cookies — see our Cookies Policy .

Communications

The content of emails and support messages you send us, and our replies. For marketing emails, whether the message was delivered and whether you opened it or followed a link.

Information we do not want

We do not ask for special category data — information about health, ethnicity, religion, sex life, political opinions, trade union membership, genetics or biometrics — and you should not send it to us. If you choose to tell us about a special educational need or a disability so that we can adjust the service for you, we will treat that as given with your explicit consent under Article 9(2)(a) UK GDPR, use it only for that adjustment, and delete it when you ask us to.

• Directly from you — when you register, take the quiz, answer questions, upload working, subscribe, change a setting or contact us.
• From a parent, guardian, school or tutor — where they have set up or are supervising an account on a learner’s behalf.
• Automatically as you use the site — technical and usage information, as described above, and cookies where you have agreed to them.
• From our payment provider — confirmation that a payment succeeded or failed, and the limited card details described above.

Under UK GDPR we have to have a specific lawful basis for every use we make of your information, and to tell you what it is. The table below does that purpose by purpose.

If we ever want to use your information for a purpose that is not listed above and is not compatible with one that is, we will tell you first and, where the law requires it, ask for your consent.

We follow the ICO’s Age Appropriate Design Code (the Children’s Code), which applies to online services likely to be accessed by children in the UK.

Age requirements

ReinMaths is built for learners aged 6 to 18, so most of the people using it are children and we treat the whole service that way.

In the UK, a child aged 13 or over can consent to an online service on their own behalf. If you are under 13, a parent or guardian must set up and hold the account for you and give consent on your behalf, and we may ask them to confirm it. If you are under 18, you need a parent or guardian’s permission before you enter into a paid subscription, because they will be the one contracting with us and paying.

What we do differently for children

• High privacy by default. Public leaderboards, a visible display name and any other sharing feature start switched off.
• No behavioural advertising, and no selling or sharing of children’s information for marketing by anyone else. We do not run advertising on ReinMaths at all.
• No geolocation tracking, and no collection of a precise location.
• No nudge techniques designed to push a child towards weaker privacy settings or towards spending more time on the service than they meant to.
• We collect the minimum needed to teach maths, and we explain settings in language a child can follow at the point they have to choose.

Parents and guardians

A linked parent or guardian can see the learner’s progress, workbooks and results, manage the subscription, change privacy settings, and ask us to correct or delete the account. A child also has rights of their own over their information, and where a child is old enough to understand them, we will take their views into account before acting on a request. If you believe a child has given us information without the consent you needed to give, contact info@reinmaths.co.uk and we will delete it.

ReinMaths offers private leaderboards, for a group you create with family or friends, and public leaderboards open to learners generally. Both are optional.

• You are not on any leaderboard unless you join one. The setting is off by default on every account.
• You choose a display name. It does not have to be your real name, and we recommend that under-18s do not use one. Do not use a name that gives away your school, your address or your age.
• Other people see only your display name, your position and your score. Your real name, email address, year group, the answers you gave and your progress history are never shown.
• You can leave at any time in your account settings. Your entry is removed from the board.

For a public leaderboard we rely on your consent. For a private one that you or a linked parent has set up, we rely on performance of our contract with you, because sharing within that group is the point of the feature.

ReinMaths uses automated processing in three places, and you should know what each one does.

Placement and difficulty

Your placement quiz and your subsequent answers are used to estimate the level you are working at, and to choose which questions you see next. This is profiling in the UK GDPR sense: it is an automated evaluation of your performance in order to predict what you can do. It is also the core of what ReinMaths is for.

Marking

Answers are marked automatically. The mark affects the questions you are given next and what your progress charts show.

Handwriting conversion

Photographs of handwritten working are processed by an AI service that converts them into typeset maths. That conversion can misread what you wrote — a stray mark read as a minus sign, an ambiguous digit — and you should check the typeset version before you submit it.

Even so, you can always ask a person to look at it. If you think a question was marked wrongly, or that your level has been set wrongly, contact info@reinmaths.co.uk and a member of our team will review it, explain the outcome and correct it where we agree with you.

We do not use your work to train third-party AI models. Our AI suppliers act as our processors and are contractually prohibited from using content we send them to train or improve their own models. Where we improve our own question bank and marking accuracy, we do so on aggregated or de-identified data wherever that is possible.

We use cookies and similar technologies such as local storage. Strictly necessary cookies — the ones that keep you signed in and keep the service secure — are set because the service cannot work without them. Everything else, including analytics, is set only if you agree, and you can change your mind at any time.

Our Cookies Policy lists every cookie we use, what it does, who sets it and how long it lasts, and explains how to withdraw your consent.

Service messages — receipts, renewal and trial-ending reminders, password resets, security alerts and notices about changes to these policies — are part of providing the service. We send them for as long as you hold an account and they cannot be unsubscribed from, because you need them.

Marketing messages are different. We send them only where you have asked for them, or where you are already a customer and the message is about something similar to what you already have — the “soft opt-in” permitted by the Privacy and Electronic Communications Regulations 2003. Every marketing email carries an unsubscribe link that works, and you can also turn marketing off in your account settings or by emailing us. We do not send marketing to accounts we know belong to a child.

We do not sell your personal information, we do not rent it, and we do not share it with advertisers or data brokers. We share it only with the categories of recipient below, only where they need it, and only under a written contract that requires them to protect it and to act on our instructions.

We will also disclose information if we are required to by law, by a court order or by a regulator, and we may transfer it as part of a sale, merger or reorganisation of our business — in which case the buyer would be bound by this policy until you were told otherwise.

You can ask us for the current list of the specific suppliers we use, and the countries they operate in, by emailing info@reinmaths.co.uk.

Some of our suppliers are based outside the United Kingdom, so your information may be transferred to, stored in or accessed from another country. Whenever that happens we make sure one of the safeguards required by Chapter V of the UK GDPR is in place:

• the country has been found by the UK government to provide an adequate level of protection (UK adequacy regulations), including the UK Extension to the EU–US Data Privacy Framework where the supplier is certified under it; or
• the transfer is covered by the ICO’s International Data Transfer Agreement (IDTA), or by the EU Standard Contractual Clauses together with the ICO’s UK Addendum, supported by a transfer risk assessment; or
• another exception permitted by the UK GDPR applies.

You can ask us for a copy of the safeguard we rely on for a particular transfer by emailing info@reinmaths.co.uk.

We keep personal information only for as long as we need it for the purpose we collected it for, or for as long as the law requires. When a period ends we delete the information or irreversibly anonymise it, so that what remains can no longer be linked to you.

Where information is held in encrypted backups it may persist for a short further period until those backups expire on their normal cycle. It is not used for anything during that time, and it is deleted when the backup is.

We take appropriate technical and organisational measures to protect personal information against loss, misuse, unauthorised access, disclosure and alteration, as Article 32 UK GDPR requires. These include:

• encryption of traffic in transit (HTTPS/TLS) and of data at rest;
• passwords stored only as salted cryptographic hashes, never in a readable form;
• access to personal information restricted to staff who need it for their role, under individual accounts;
• written data processing agreements with every supplier that handles personal information for us;
• logging, monitoring and regular review of our systems;
• a documented procedure for handling personal data breaches.

No system is completely secure, and we cannot guarantee the security of information you send us over the internet. You can help by choosing a strong, unique password and not sharing it. If we suffer a personal data breach that is likely to result in a risk to your rights and freedoms, we will report it to the ICO within 72 hours of becoming aware of it, and tell you directly without undue delay where the risk to you is high.

Under the UK GDPR you have the following rights. They are free to exercise, and we will respond within one month. If your request is complex we may extend that by up to two further months, and we will tell you within the first month if we need to.

• Be informed — to know what we do with your information. This policy is how we meet it.
• Access — to get a copy of the personal information we hold about you, and to be told how we use it.
• Rectification — to have inaccurate information corrected and incomplete information completed. Most of it you can edit yourself in your account settings.
• Erasure — to have your information deleted where we no longer need it, where you withdraw consent we relied on, or where you object and we have no overriding grounds. This right is stronger for children’s information, and for information collected when you were a child.
• Restriction — to have us pause our use of your information, for example while we check whether it is accurate.
• Portability — to receive the information you gave us in a structured, commonly used, machine-readable format, and to have it sent to another provider where that is technically feasible.
• Object — to object to processing we base on legitimate interests. You can object to direct marketing at any time and we must stop, with no exceptions.
• Withdraw consent — at any time, where consent is what we relied on.
• Automated decision-making — not to be subject to a decision based solely on automated processing that produces a legal or similarly significant effect. See Marking, AI and personalisation for how this applies here.

How to exercise them

Email info@reinmaths.co.uk and tell us which right you want to use and what you want us to do. We may ask you to confirm your identity before we act, so that we do not hand your information to somebody else. A parent or guardian can make a request on behalf of a child they are responsible for.

Some rights are qualified rather than absolute, and we may not be able to act on a request in full — for example, we cannot delete billing records we are legally required to keep. If we refuse a request, we will explain why and tell you how to challenge it.

If you are unhappy with how we have handled your information, please tell us first at info@reinmaths.co.uk. We would rather put it right ourselves.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. Complaining to us first is not a condition of going to them.

• Website: ico.org.uk/make-a-complaint
• Helpline: 0303 123 1113
• Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We may update this policy — because the service changes, because the law changes, or because we have found a clearer way to say something. The date at the top of this page always shows when it was last revised.

If a change materially affects your rights or how we use your information, we will tell you before it takes effect, by email or by a notice in the service, and give you a reasonable period to consider it. Where a change requires your consent, we will ask for it rather than assume it. Previous versions are available on request.

For anything about this policy, about your information, or to exercise any of your rights:

• Email:info@reinmaths.co.uk
• Company: ReinMaths Limited, registered in England and Wales, company number 17426840
• Registered office: 38 Whalley Road, Clitheroe, BB7 1AW, Lancashire, England
• ICO registration: ZC235194

We have considered whether we are required to appoint a Data Protection Officer under Article 37 UK GDPR. Where one is appointed, their contact details will be published here. In the meantime, data protection enquiries are handled by our team at the address above.