Information Security Program

A written summary of the safeguards we maintain for personal information, including children's personal information. Have your own counsel review before relying on it.

Scope & responsible person

This program covers the personal information Math Generators processes, including children's personal information (masked login/security data and non-identifying classroom data). The person responsible for this program is the operator of Math Genius, reachable at support@mathgenerators.com. The safeguards are proportionate to the sensitivity and small volume of the data we hold.

Safeguards we maintain

Encryption in transit. All traffic is served over HTTPS.
Data minimization. We do not ask for students' full names; we store only a masked IP address (never a full IP in account records); we collect login/security data solely to operate and secure the Service.
Bounded retention. Login/security data is automatically deleted after 30 days; see our Data Retention Policy.
Access control. Administrative views of security data are restricted to administrators; the database is reached with a least-privilege application login, not a superuser.
No secondary use. We never sell personal information or use it for advertising, profiling, or any purpose beyond operating and securing the Service.
Vetted processors. Payments are handled by Stripe (PCI-compliant); we do not store card numbers. Hosting is on a dedicated cloud instance we control.

Risk assessment

We review the risks to personal information — unauthorized access, accidental disclosure, and loss — at least annually and when we make a material change to how data is collected or stored, and we adjust the safeguards above accordingly. Because we minimize what we collect and retain, the residual risk to children's data is low.

Incident response

If we become aware of a security incident affecting personal information, we investigate promptly, contain and remediate it, and notify affected users and any required authorities consistent with applicable breach-notification laws.

Review

This program is reviewed at least annually. Contact: support@mathgenerators.com.