Children's Privacy Policy

1. Introduction

MathTestReview.com (“we,” “us,” or “our”) is an online K-12 math test review platform that helps teachers create practice reviews for their students and helps students prepare for upcoming math tests. Some of our users are children under the age of 13.

We take children's privacy seriously. This Children's Privacy Policy describes the specific practices that apply to users under 13 and is intended to comply with the Children's Online Privacy Protection Act (COPPA) and the regulations of the Federal Trade Commission (FTC).

This policy supplements our full Privacy Policy, which describes our practices for all users. In the event of a conflict between this policy and the general Privacy Policy with respect to children under 13, this policy governs.

2. Information We Collect from Children Under 13

We collect the minimum personal information necessary to provide the educational service. Specifically, for students under 13, we collect:

• Name and email address — used to create and identify the student account and to allow the student to log in.
• Quiz responses and progress data — answers submitted during practice sessions, questions attempted per topic, and percent-correct scores by math category. This data is used to display progress to the student and to their teacher.
• Class membership — which class(es) the student belongs to and which reviews have been assigned to them by their teacher.

What We Do NOT Collect from Children

We do not collect any of the following from users under 13:

• Physical location data or GPS coordinates
• Phone numbers
• Photos, videos, or audio recordings
• Social media account information
• Browsing history outside of MathTestReview.com
• Persistent identifiers used for behavioral tracking or advertising
• Any information beyond what is listed above

3. How Children's Accounts Are Created

Children under 13 can access MathTestReview.com through two paths, both of which satisfy COPPA's verifiable parental consent requirement:

Path 1 — Teacher Enrollment via Join Code

When a teacher adds students to their class using a class join code, the teacher's acceptance of our Terms of Service constitutes verifiable parental consent under COPPA, consistent with the “school official” exception recognized by the FTC. This path applies when:

• A teacher creates a class and distributes a join code to their students, or
• A teacher directly enrolls students in a class through the Platform.

Under this model, the teacher acts in a school official capacity and takes on responsibility for ensuring that their use of the Platform with students complies with applicable law, including any school or district parental notification policies.

For parents: If your child's teacher has added them to MathTestReview.com, you should be aware that your child has been enrolled in an educational platform for math practice. You may contact us at [email protected] to review, correct, or delete your child's information at any time.

Path 2 — Self-Registration Without a Teacher

If a student registers independently (without a teacher join code) and indicates during registration that they are under 13, we will:

1. Collect the student's name, email, and the parent or guardian's email address.
2. Send a consent verification email to the parent or guardian's address explaining what information we collect, how it is used, and how to provide or withhold consent.
3. Hold the student account in an inactive state until the parent or guardian completes the consent verification by clicking the link in the email.
4. If consent is not given within 7 days, the pending account and the parent email address are automatically deleted.

We will not activate a self-registered account for a child under 13 without verified parental consent.

4. How We Use Children's Information

Information collected from children under 13 is used only for the following educational purposes:

• To create and maintain the student's account and authenticate their identity at login.
• To allow the student to access and complete practice reviews assigned by their teacher.
• To display the student's progress and quiz results — including questions attempted and percent correct by category — to the student and to their teacher.
• To allow the teacher to see which reviews have been assigned to and completed by their students.

What We Do NOT Do with Children's Information

• We do not use children's data for advertising or marketing of any kind.
• We do not build behavioral profiles of children.
• We do not use children's data to train artificial intelligence models.
• We do not share children's data with any advertising network or data broker.
• We do not use children's data for any purpose beyond what is listed above.

5. How We Share Children's Information

With Their Teacher

A student's quiz responses, progress data, and class membership are visible to the teacher(s) of the class(es) the student belongs to. This is the core purpose of the educational service.

With Service Providers

We share only the minimum necessary data with the following service providers, solely to operate the educational platform. These providers are prohibited from using children's data for any purpose other than providing services to us:

• Clerk — Authentication and session management (stores email and encrypted credentials).
• Supabase — Database storage for quiz responses and progress data.
• Railway — Application hosting (processes all web traffic).

We do not use Stripe or Resend in connection with student accounts. Stripe is used only for teacher billing. Resend is used only for teacher and administrative emails.

We Never Sell Children's Data

We do not sell, rent, or trade the personal information of any user, and especially not the personal information of children under 13. We never share children's data with advertisers, data brokers, or any third party for commercial purposes.

Legal Requirements

We may disclose information if required by law, court order, or to protect the safety of a child.

6. Parental Rights

As the parent or legal guardian of a child who uses MathTestReview.com, you have the following rights under COPPA:

• Review: You may request to review the personal information we have collected from your child, including their account information and progress data.
• Correct: You may request that we correct inaccurate information about your child.
• Delete: You may request deletion of your child's account and all associated personal information. Upon a verified deletion request, we will delete your child's account and personal information within 30 days.
• Revoke Consent: If consent was provided through the self-registration path, you may revoke that consent at any time. Revoking consent will result in account deactivation and deletion of personal information.
• Refuse Further Collection: You may request that we stop collecting your child's information. Note that this will prevent your child from using the Platform, as the collection is necessary to provide the service.

How to Exercise These Rights

To exercise any of the above rights, contact us at:

Please include your child's name and the email address associated with their account. We will respond within 30 days. To protect your child's privacy, we may ask you to verify your identity as the parent or guardian before fulfilling a request.

Please note that if a child's account was created through teacher enrollment (Path 1), the teacher controls the class roster. Deleting the student account through us will remove all data we hold; the teacher's class list is also updated.

7. Data Security

Children's personal information is subject to the same security measures as all user data on the Platform:

• All data is transmitted over encrypted connections (HTTPS/TLS).
• Data at rest is encrypted by Supabase.
• Access to student data is restricted to the student, their teacher, and authorized platform staff.
• Administrative staff access to student data is limited to what is necessary to operate the Platform.
• Passwords and authentication credentials are managed by Clerk and are never stored in plaintext.

8. Data Retention

• Active student accounts: Personal information is retained for as long as the account is active and needed to provide the educational service.
• Account deletion: Upon a verified parental request for account deletion, all personal information associated with the child's account will be deleted within 30 days.
• Pending consent requests (Path 2): If a parent does not complete the consent verification within 7 days, the pending account information — including the parent's email address — is automatically and permanently deleted.
• Inactive accounts: We may delete inactive student accounts and their associated data after an extended period of inactivity. We will not send marketing emails before doing so.

9. Contact for Parents

If you have questions about this Children's Privacy Policy, wish to review your child's data, or want to request deletion of your child's account, please contact us:

Please include your child's name and account email in your request. We will respond within 30 days.

If you believe we have collected information from your child in a manner inconsistent with COPPA and have not been able to resolve the issue through the contact above, you may file a complaint with the Federal Trade Commission at www.ftc.gov or by calling 1-877-FTC-HELP (1-877-382-4357).