The short version
- Practising needs no account. Progress is saved only on the device being used, and is never sent to us.
- If you create a parent account, we keep your email address and the account ID from the service you sign in with. We do not keep your name, photo or any other details from that service.
- We never ask children for personal information. A child's profile will use a nickname, not their real name.
- We do not sell personal information, show advertising, or use tracking or advertising cookies.
- You can delete your account at any time, and everything linked to it is deleted with it.
For students
You can practise without telling us who you are. Your answers stay on the computer or tablet you are using. We never ask for your name, where you live, your school or a photo. If a grown-up makes an account for you, it uses a nickname, not your real name. If you are not sure about anything, ask a parent, carer or teacher.
Who we are
AusMathic is a maths practice website for students in Years 1 to 7, made in Australia. It is run by Cogniflow, a registered Australian business name based in Victoria (ABN 51 770 686 698). In this policy, "we" and "us" mean AusMathic and Cogniflow. We handle personal information in line with the Australian Privacy Principles in the Privacy Act 1988 (Cth).
Practising without an account
Anyone can practise without signing up. Answers, scores and settings (such as Sound and Calm) are saved in the browser's own storage on that device. They are not sent to us, and we cannot see them. Clearing the browser's data, or using another device, starts afresh.
You can always use AusMathic without telling us who you are; an account is optional. To remove all practice progress from a device, clear this website's data in the browser's settings. In Years 4 to 7, "Start section again" also clears the answers in one section.
Read-aloud
In Years 1 to 3, questions can be read aloud using the voices built into your device or browser. Some browsers use online voices run by the browser's maker, so the words being read (the question, hint or feedback) may be sent to that company. What a child types is never read aloud, and AusMathic does not receive any of it.
Parent accounts
Accounts are for parents, carers and teachers aged 18 or over. Children should not create accounts; a parent or carer creates and manages them, and by doing so gives consent for their child's profile. You sign in with Google, Microsoft or Apple, and AusMathic never sees or stores your password for those services.
How we collect it
We collect your email address and account ID from the sign-in service you choose, at the moment you sign in, and only with your permission on that service's screen. We do not buy or receive information about you from anyone else.
What we collect and keep
| Information | Why we keep it |
|---|---|
| Your email address, as shared by the sign-in service (Apple may give a private relay address instead) | To identify your account and send account and payment notices |
| Which service you signed in with, and that service's account ID for you | To recognise you when you sign in again |
| Sign-in session records: a scrambled (hashed) copy of your session code, and when it started and expires | To keep you signed in for up to 30 days, or until you sign out |
| The date your account was created | Account records |
What we do not collect
We do not collect or store your name, photo, phone number, home address, date of birth or location. Some sign-in services include your name when they confirm who you are; we do not save it.
Children's information
AusMathic is designed for children, so the parent account is in charge. Children are never asked for an email address, password, real name, photo, birthday, school or location.
When child profiles become available, each will hold only a nickname chosen by the parent, a year level and practice results (which questions were answered and whether they were right). Written answers, where a child explains their thinking in their own words, stay on the device and are not sent to us, because children might type personal details into them.
Class leaderboards, when available, will be off unless a parent or teacher switches them on. They show nicknames only, rank effort rather than marks, reset each week, and have no chat or messaging.
Payments
When subscriptions are available, payments will be handled by Stripe on Stripe's own secure page. AusMathic never sees or stores card numbers. We keep only a Stripe customer reference and whether your plan is active. Stripe's handling of payment details is covered by Stripe's privacy policy.
How we use personal information
Only to run your account: to sign you in, keep you signed in, show your account details, provide the features you use, and send account or payment notices. We do not use it for advertising, we do not sell or rent it, and we do not build marketing profiles. Progress levels such as "Secure" or "Mastered" are worked out from answers to help with practice; they are never used to make decisions about anyone outside AusMathic.
Where it is stored and how it is protected
Account information is stored in a Cloudflare database located in Cloudflare's Oceania region. All connections to AusMathic use encryption (HTTPS). Session codes are stored only in scrambled (hashed) form, so a copy of the database would not let anyone sign in as you. Access to the database is limited to the people who run AusMathic.
Visits to the website are handled by the Cloudflare data centre nearest to you, which may be outside Australia. Like most websites, Cloudflare automatically records technical details of each visit, such as the IP address, browser type and time, to keep the service working and secure. These records are kept by Cloudflare for a short time and are not used to identify you or build a profile.
Who can access it
- You. You can see your account details on your account page.
- The people who run AusMathic, only when needed to maintain the service or help you.
- Service providers that run parts of AusMathic for us, and only for that purpose: Cloudflare (hosting and database), the sign-in service you choose (Google, Microsoft or Apple), and Stripe (payments, once available).
- Others, only if the law requires it, for example a valid request from a court or regulator.
Some of these providers are based overseas, including in the United States, and may process information outside Australia. We use providers that protect personal information to a standard similar to the Australian Privacy Principles.
Cookies
We use only the cookies needed to sign in: a short-lived cookie that protects the sign-in step (it expires after 10 minutes), and a session cookie that keeps you signed in for up to 30 days. We do not use analytics, advertising or tracking cookies. Practising without an account uses browser storage on the device, not cookies.
How long we keep it, and deleting your account
We keep your account information for as long as you have an account. You can delete your account at any time from your account page. That deletes your account, your sign-in details and your sessions straight away. A copy may remain in our database backups for up to 30 days, after which it is gone. Records we must keep by law, such as payment records, are kept only for as long as the law requires.
Your rights
You can ask to see the personal information we hold about you, ask us to correct it, or ask us to delete it. Contact us at the address below and we will respond within 30 days. If you have a complaint about how we have handled personal information, email us with the details. We will acknowledge it within 7 days, look into it, and give you a written answer within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.
If something goes wrong
If a data breach is likely to cause serious harm, we will tell the people affected and the Office of the Australian Information Commissioner, as the Notifiable Data Breaches scheme requires.
Links to other websites
AusMathic links to a few other websites, such as the Victorian Curriculum and Unsplash. Those websites have their own privacy policies, and we are not responsible for how they handle information.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If a change affects how we use information you have already given us, we will tell account holders by email before it takes effect.
Contact us
For any privacy question or request, email cogniflowtech@gmail.com.