Privacy Policy

This Privacy Policy applies to schools, school districts, and institutions (collectively, “Institution”) that purchase and deploy Modmath Enterprise through Apple School Manager, Managed Google Play, or a direct enterprise agreement with Modmath for Students, Inc. (“Modmath,” “we,” “us,” or “our”). It describes how we collect, use, store, and protect information in connection with the Enterprise version of our application.

If you are an individual user who downloaded Modmath directly from the App Store or Google Play, please refer to our Direct-to-Consumer Privacy Policy.

1. Scope

This policy governs data collected from:

• School and district administrators who manage licenses through the Modmath Admin Portal.
• Teachers and other staff who are granted access to the Modmath Admin Portal within an Institution’s license.
• Students who use the Modmath application under a license managed by an Institution. Students do not have access to the Admin Portal.

In this context, the Institution acts as the data controller for its users. Modmath acts as a data processor, processing data solely on behalf of and under the instructions of the Institution, in accordance with any applicable Data Processing Agreement (“DPA”).

2. Data Processing Agreement

Modmath offers a Data Processing Agreement to all Enterprise customers. The DPA governs the terms under which Modmath processes personal data on behalf of the Institution and forms part of the agreement between Modmath and the Institution. Institutions may request a DPA by contacting us at support@modmath.zendesk.com.

3. Information We Collect

The information we collect depends on the type of user.

Administrators. When an Institution sets up a Modmath Admin account, we collect the following information from the primary organization administrator: first name, last name, email address, name of the school or district, address of the school or district, and phone number. When an administrator creates an Admin account, we also derive and store limited account-identity metadata to secure the account and support administrator account recovery: the email domain of the creating administrator, a coarse classification of whether the account is an institution or an individual, and a billing contact name and email. This metadata is used only for account security, recovery, and billing. This information is used to establish the account, manage the license, and communicate about billing and support.

Staff. When an administrator adds other staff members to the Admin Portal, we collect their first name, last name, and email address. Staff members have access to the Admin Portal to manage student seats and other functions permitted by the administrator. We do not collect additional personal information from staff beyond these fields. We never store plaintext passwords. Where an additional staff admin signs in with a password it is stored only as a salted cryptographic hash, and staff admins who sign in through their school’s identity provider (Google or Apple) have no password stored with us.

Students. Students access Modmath through the application and do not have access to the Admin Portal. How a student signs in depends on how the Institution deploys the application.

For institutions using a managed device program, Modmath is distributed as a web clip to Apple devices through a mobile device management platform such as Jamf, or as a URL through Google Admin for Chromebook and Android devices. Students on managed devices sign in using their institutional Google or Apple account via OAuth. In this case, we receive the student’s managed email address from the identity provider at the time of sign in.

For institutions or students accessing Modmath directly at app.modmath.com without a managed device program, students sign in using their email address. In this case, we collect that email address to authenticate the user and associate them with the correct institutional license.

In all cases, the student email address is used solely for authentication and license association. We do not collect student names, dates of birth, grades, assessment results, or any other personal information beyond the email address used to sign in. We never store plaintext passwords. Where a student signs in with a password it is stored only as a salted cryptographic hash, and students who sign in through their school’s identity provider (Google or Apple) have no password stored with us.

Anonymous usage analytics. We collect anonymized, aggregated usage data from the Modmath application to understand how the product is used and to improve its functionality and performance. This data cannot be used to identify individual users. It is never linked to email addresses or any other personal information, and is never used for advertising or marketing purposes.

4. How We Use Information

Personal information collected through the Admin Portal and application is used solely to:

• Create and manage user accounts within the Modmath Admin Portal.
• Authenticate students and associate them with the correct institutional license.
• Send transactional communications related to license management, account access, and product updates.
• Respond to support requests submitted by administrators or staff.

We do not use any personal information collected in the Enterprise context for advertising, third party marketing, or any purpose unrelated to the administration of the Enterprise license.

5. How We Share Information

Modmath does not sell personal information. We do not share personal information with third parties except in the following limited circumstances:

• Service providers. We use a limited set of trusted providers, each bound by confidentiality and data-protection obligations and permitted to process personal information only to provide services to us. We do not sell personal information and do not permit providers to use it for their own advertising or marketing. These providers include:
  • Amazon Web Services (AWS) - hosting, storage, and transactional email (Amazon SES); data stored in the AWS US East region.
  • Stripe, Inc. - payment processing for Enterprise license purchases via the Admin Portal (billing contact name/email, billing address, phone, payment method; customer/subscription identifiers). No full card numbers stored.
  • MailerLite - handling inquiries from our Enterprise contact / distribution form (name, email, school or district).
  • Cloudflare, Inc. (Turnstile) - bot/abuse prevention on the Enterprise contact form (IP address and browser characteristics).
  • Apple and Google - single sign-on for administrators, staff, and students.
  • Mixpanel - anonymous, device-level product analytics in the Admin Portal only (not the student experience); not linked to a named individual.
  • HubSpot (CRM) - communications and relationships with account administrators, subscribers, and prospects, including setup reminders, renewal reminders, and messages to users who have not renewed. Shared data limited to contact and account details (name, email, organization, subscription status). No student data shared; for minors, only the adult account holder is contacted.
• Legal obligations. We may disclose information if required to do so by law or in response to a valid legal process, such as a court order or government request.
• Business transfers. In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected Institutions in advance of any such transfer.

Anonymous usage analytics may be shared with or processed by analytics service providers in aggregated, non-identifiable form.

6. FERPA Compliance

Modmath is committed to compliance with the Family Educational Rights and Privacy Act (“FERPA”). We do not collect education records as defined by FERPA beyond what is described in Section 3. To the extent that an Institution provides or makes accessible any education records in connection with the use of Modmath Enterprise, Modmath agrees to:

• Use such records only for the purpose of providing the contracted services to the Institution.
• Not disclose education records to any third party without the Institution’s prior written consent, except as permitted by FERPA.
• Return or destroy education records upon termination of the agreement, as directed by the Institution.

7. COPPA Compliance

The Children’s Online Privacy Protection Act (“COPPA”) applies to the online collection of personal information from children under 13. In the Enterprise context, the only personal information we collect from students is the email address used to sign in, as described in Section 3. We do not collect any additional personal information from students, including those under 13.

Schools and districts that deploy Modmath Enterprise under a valid license agreement are acting in a school official capacity and take responsibility for ensuring that deployment is consistent with applicable parental consent requirements under COPPA and applicable state laws.

8. GDPR and International Users

If your Institution is located in the European Union, European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (“GDPR”) or equivalent legislation may apply to the processing of personal data.

In this context:

• The Institution is the data controller for personal data relating to its administrators, staff, and students.
• Modmath is the data processor, processing personal data only on documented instructions from the Institution.
• Our legal basis for processing administrator and staff personal information is the performance of a contract between Modmath and the Institution.

Personal data is stored and processed in the United States on Amazon Web Services infrastructure located in the AWS US East region. Where required, Modmath will implement appropriate safeguards for cross-border data transfers, such as standard contractual clauses. Please contact us to request a copy of applicable transfer mechanisms.

Administrators and staff whose personal data we process have the right to access, rectify, erase, restrict, or object to the processing of their data, and the right to data portability. To exercise these rights, please contact your Institution administrator or reach us directly at support@modmath.zendesk.com.

9. Data Retention

We retain administrator and staff personal information for as long as the Institution’s license is active and for a reasonable period thereafter to fulfill legal and contractual obligations. Upon termination of the license agreement, Institutions may request deletion of their data by contacting us at support@modmath.zendesk.com.

A student’s sign-in email address may be retained beyond the end of a single license as part of the student’s durable account identity, so the student can be re-added to a license without losing their work; we delete it on the Institution’s request or after a defined period of inactivity.

10. Data Security

Modmath maintains reasonable and appropriate technical and organizational measures to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data storage, access controls, and secure transmission protocols.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. In the event of a data breach affecting personal information, we will notify affected Institutions in accordance with applicable law.

11. Children’s Privacy

Modmath Enterprise is designed for use in educational settings and may be used by students under the age of 13. As described in Section 3, the only personal information we collect from students is the email address used to sign in. We do not collect any other personal information from students. Please refer to Section 7 for our COPPA compliance commitments.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify Institutions by email or through the Admin Portal prior to the changes taking effect. Continued use of Modmath Enterprise following notification constitutes acceptance of the updated policy.

13. Website Cookies

The Modmath marketing website (modmath.com) uses only strictly necessary cookies by default and asks for your consent before setting anything optional. The optional categories are Functional (our support widget, which sets its own cookies) and Analytics (none are in use today, reserved for the future). We do not use advertising or cross-site tracking cookies. To remember your choices and to show our newsletter invite no more than once a day, we store a small amount of information in your browser’s local storage on this site. You can review or change your cookie choices at any time using the Manage cookies link in the website footer.

14. Contact Us

If you have questions about this Privacy Policy, our data practices, or to request a Data Processing Agreement, please contact us at:

Modmath for Students, Inc.
support@modmath.zendesk.com

This Privacy Policy applies to individuals who download and use Modmath directly through the Apple App Store or Google Play Store, or who access Modmath at get.modmath.com, including students, parents, caregivers, and educators using a personal or professional subscription (collectively, “you” or “your”). It describes how Modmath for Students, Inc. (“Modmath,” “we,” “us,” or “our”) collects, uses, stores, and protects your information.

If you are accessing Modmath through a school or district that has purchased an Enterprise license, please refer to our Enterprise Privacy Policy.

1. Scope

This policy applies to all users of the Modmath application who access the product directly, including:

• Users who have not created an account and are using Modmath as a guest.
• Users who have created an account using Apple, Google, or an email address.
• Users who have purchased a subscription through the Apple App Store or Google Play Store.

2. Information We Collect

The information we collect depends on whether you are using Modmath as a guest or with an account.

Guest users. If you use Modmath without creating an account, we do not collect any personally identifiable information. We do collect the following non-personal information to operate and improve the application:

• A device identifier generated by the application.
• App version and platform (iOS, Android, or web).
• Anonymous usage analytics, such as features used, session duration, and general interaction patterns.

Users who create an account. When you create an account, we collect information depending on the method you choose.

If you sign in with Apple, we receive your name and an email address from Apple. Apple may provide a private relay email address if you choose to hide your real email. We store the information Apple provides at the time of sign in.

If you sign in with Google, we receive your name, email address, and profile photo from Google.

If you sign up with an email address, we collect your email address and a hashed version of your password. We never store your password in plain text.

In all cases, your account information is stored in our database on Amazon Web Services infrastructure located in the AWS US East region.

Onboarding information. During onboarding, we ask two questions to understand how you intend to use Modmath: why you downloaded the app, and how you would describe yourself as a user. Your responses are stored as part of your account profile and are used to personalize your experience. They are not shared with third parties for advertising purposes.

Subscription information. If you purchase a subscription, we use RevenueCat to manage your subscription. RevenueCat collects a device identifier to validate your purchase and manage your entitlement. We do not store your payment information directly. Payment processing is handled by Apple or Google through their respective app stores.

Analytics. We use Mixpanel to collect analytics data linked to your account. This includes your onboarding responses, behavioral data (such as which features you use, how frequently you use them, and how long you spend in the app), and subscription events (such as trial starts, conversions, renewals, and cancellations). This data is associated with your account identifier and is used to understand how you interact with Modmath, improve the product, and present you with personalized subscription offers and paywalls based on your usage. We do not share this data with third parties for advertising purposes outside of Modmath.

For accounts created by a parent or guardian on behalf of a child under 16, behavioral analytics and personalized subscription targeting are enabled only where the parent or guardian has given explicit consent during account setup, as described in Section 3.

3. Children and Parental Consent

Modmath is designed for use by students of all ages, including children under 13. We comply with the Children’s Online Privacy Protection Act (“COPPA”) and, where applicable, the General Data Protection Regulation (“GDPR”) Article 8, as follows.

During onboarding, we ask users whether they are 16 or older. If a user indicates they are under 16, we direct them to have a parent or guardian complete the account setup on their behalf. The parent or guardian provides their own email address and creates the account. We do not collect personal information directly from the child during this process.

During account setup, the parent or guardian is presented with a consent form that describes, in plain language, the behavioral data we collect while a child uses the app and how that data is used, including to personalize the in-app experience and present subscription offers. The parent or guardian must actively check a consent checkbox to enable behavioral tracking and personalized subscription targeting for that account. This checkbox is not pre-checked. Declining does not prevent the child from using Modmath.

We log the consent event with a timestamp and store it against the account record. If a parent or guardian consents and later wishes to withdraw that consent, they may do so at any time by contacting us at support@modmath.zendesk.com. Upon withdrawal of consent, previously collected behavioral data associated with the account will be deleted upon request.

For guest users, we collect only the non-personal device and usage information described in Section 2, which does not identify the user.

Parents and guardians may contact us at support@modmath.zendesk.com to review, update, or request deletion of any information associated with an account created on behalf of a child. A parent or guardian who set up the account can also delete it and all of its information at any time by signing in and following the account deletion steps in Section 6.

4. How We Use Information

We use the information we collect to:

• Create and manage your account.
• Authenticate you when you sign in.
• Manage your subscription and validate your entitlement to paid features.
• Personalize your in-app experience based on your onboarding responses and usage patterns.
• Present you with subscription offers and paywalls tailored to how you use the app, including timing and messaging based on your behavioral data. For accounts created on behalf of a child under 16, this use is subject to parental consent as described in Section 3.
• Send transactional communications related to your account and subscription, such as confirmation emails and renewal notices.
• Analyze how users interact with Modmath in order to improve the product.
• Respond to support requests.

We do not sell your personal information or share it with third parties for their own advertising purposes.

5. How We Share Information

Modmath does not sell your personal information. We share information only in the following limited circumstances:

• RevenueCat. We share your device identifier with RevenueCat to manage your subscription. RevenueCat’s privacy policy is available at revenuecat.com.
• Mixpanel. We share analytics data with Mixpanel as described in Section 2. Mixpanel’s privacy policy is available at mixpanel.com.
• Service providers. We may share information with trusted third party service providers who assist in operating our platform, subject to confidentiality obligations and only to the extent necessary to perform their functions.
• Legal obligations. We may disclose information if required to do so by law or in response to a valid legal process, such as a court order or government request.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you in advance of any such transfer.

6. Your Privacy Choices

Analytics opt out. You can limit analytics data collection by adjusting your device settings. On iOS, you can enable “Limit Ad Tracking” in your device privacy settings. On Android, you can opt out of personalization in your Google account settings.

Account deletion. You can delete your Modmath account and the personal information associated with it at any time from within the app. Open Settings, choose Security, and select Delete account. We will email a confirmation link to the address on your account. After you confirm, your account is scheduled for deletion and you are signed out on all of your devices. If you change your mind, sign back in within 14 days and choose Cancel deletion. Once the 14 days have passed, your account and all of your workbooks are permanently deleted, and any records we are required to keep are retained only in de-identified form.

You can also request deletion by email. Write to us at support@modmath.zendesk.com from the email address associated with your account and include the words “Delete my account” in the subject line. If you cannot email us from that address, tell us the email address on the account so we can verify your request. We complete verified email requests within 30 days.

Deleting your account stops your subscription from renewing. If you subscribed through the Apple App Store or Google Play Store, you must also cancel the subscription in your App Store or Google Play account settings, because those stores control the subscription and we cannot cancel it for you. We do not refund time that has already been paid. Canceling a subscription on its own stops future charges but does not delete your account. To delete your account, follow the steps above.

We may retain a limited amount of information after deletion where the law requires it or for legitimate business purposes, such as records of transactions and security or audit logs, which we keep in de-identified form where possible. Payments are handled by our payment providers, and those providers may retain transaction records under their own policies and legal obligations, separate from our deletion of your Modmath account.

Email communications. You may opt out of non-transactional email communications by following the unsubscribe instructions in any marketing email, or by contacting us directly.

7. GDPR and International Users

If you are located in the European Union, European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (“GDPR”) or equivalent legislation may apply to the processing of your personal data.

Our legal bases for processing your personal data are:

• Performance of a contract for account creation, authentication, and subscription management.
• Legitimate interests for behavioral analytics, product improvement, and presenting you with personalized subscription offers, where those interests are not overridden by your rights.
• Consent where we have asked for and received your consent, such as for parental consent to behavioral tracking for accounts created on behalf of a child under 16.

Your personal data is stored in the United States on Amazon Web Services infrastructure in the AWS US East region. Where required, Modmath will implement appropriate safeguards for cross-border data transfers, such as standard contractual clauses. Please contact us to request a copy of applicable transfer mechanisms.

You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. To exercise these rights, please contact us at support@modmath.zendesk.com.

8. Data Retention

We retain your account information for as long as your account is active. If you request deletion of your account, we will delete your personal information within a reasonable period, except where we are required to retain it for legal or contractual reasons.

Anonymous usage analytics are retained in aggregated form and are not subject to deletion requests. Subscription records may be retained for the period required by applicable tax and financial regulations.

9. Data Security

Modmath maintains reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include encrypted data storage, access controls, and secure transmission protocols.

While we take data security seriously, no method of transmission over the internet or electronic storage is completely secure. In the event of a data breach affecting your personal information, we will notify you in accordance with applicable law.

10. Third Party Links and Services

The Modmath application and website may contain links to third party websites or services. This policy applies only to Modmath. We are not responsible for the privacy practices of any third party, and we encourage you to review their privacy policies before providing any personal information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through the application prior to the changes taking effect. Your continued use of Modmath following notification constitutes acceptance of the updated policy.

12. Website Cookies

The Modmath marketing website (modmath.com) uses only strictly necessary cookies by default and asks for your consent before setting anything optional. The optional categories are Functional (our support widget, which sets its own cookies) and Analytics (none are in use today, reserved for the future). We do not use advertising or cross-site tracking cookies. To remember your choices and to show our newsletter invite no more than once a day, we store a small amount of information in your browser’s local storage on this site. You can review or change your cookie choices at any time using the Manage cookies link in the website footer.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Modmath for Students, Inc.
support@modmath.zendesk.com