Privacy Policy

In brief

Axiom8 helps students practice competitive math and take part in math club sessions. We use account and learning information to provide those features, show progress, and protect the service.

Axiom8 is operated by Axiom Academy. For privacy questions or requests, contact [email protected].

Information we collect

• Accounts: student usernames and display names, parent or guardian email addresses, account roles, and family connections. A parent can add a student's first name. We do not ask for a student's birth date or email address. Passwords are handled by our authentication provider and we cannot read them.
• Practice: answers, results, practice sessions, skill estimates, progress, activity dates, streaks, rewards, and settings such as time zone and target exam date.
• Math club: club IDs, session participation, selected answers, completion times, and results. Club records are stored separately from individual practice accounts.
• Technical information: sign-in cookies, preferences such as sound settings, and request details handled by our hosting, analytics, and security providers. These can include IP address and browser or device type.

Please do not use a full name, school name, birth date, or contact details in a username.

How we use information

We use information to create and secure accounts, connect parents with their students, send account emails, adapt practice to each student, save results, run club sessions, understand how the site is used, and investigate misuse or technical problems. Short-lived security counters limit repeated signup attempts.

We do not sell personal information, and Axiom8 does not show advertising. We do not use student information to train AI models.

Who receives information

A connected parent or guardian account can see its students' progress, see their usernames, and reset their passwords. Authorized administrators and math club staff can access the information they need for their role. A club ID is not a private password.

These service providers process information so the app can run:

• Supabase: sign-in, account emails, and the application database.
• Vercel: hosting and website analytics.
• Upstash: short-lived, pseudonymous signup security counters.
• Cloudflare Turnstile: the human-verification check on signup. It receives the verification token, not the email address or password typed into the form.

These providers may process information outside your home country. We may also disclose information when the law requires it or when needed to respond to a security incident.

Children and parent choices

Students should create an account only with a parent or guardian's permission. When a student signs up, we email the parent or guardian address they give us so that adult can set up their own account, follow the student's progress, and manage the student's login.

We are still finalizing our consent process for children under 13. If you are a parent or guardian and did not approve an account, contact [email protected] and we will remove it.

Parents and guardians can ask to review, correct, or delete their child's information, or ask us to stop collecting it, at [email protected]. We confirm that a request comes from the child's parent or guardian before acting on it. Please do not send passwords or identity documents in your first message.

Retention and deletion

We keep account and practice information while an account is in use. We do not yet delete inactive accounts automatically. When a parent or guardian asks us to delete an account, we aim to finish within 30 days of confirming the request; copies in provider backups can take longer to expire.

Signup security counters expire within one hour. Family connection codes stop working after seven days.

Changes

We will update this page when our practices change and show the date of the latest update at the top.