Privacy Policy

Kākā Math is built and operated by Molehill Creations, based in Wellington, New Zealand. We ("we", "us", or "our") are committed to protecting the privacy of our users, including children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Kākā Math application and website (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account, we collect:

• Parent/guardian name and email address
• Password (stored securely using industry-standard hashing)
• Family name

Child Profiles

When a parent adds a child to their family, we collect:

• Child's first name (or nickname)
• Year level
• Date of birth (optional, used only to suggest the right year level)
• An email address (optional, only if the parent chooses to give the child their own sign-in; if not supplied, we generate an internal placeholder that is never used to contact anyone)

We do not collect any other personally identifiable information about children beyond what is listed above. Child accounts are created and managed entirely by the parent/guardian.

Learning Data

As students use the Service, we collect:

• Lesson progress and completion status
• Answers to practice questions and accuracy scores
• Time spent on lessons

This data is used solely to provide personalised learning experiences, track progress, and generate reports for parents.

Uploaded Images

When students use the Cheeky Check feature to scan their maths work, we collect:

• Photos of handwritten or printed maths problems uploaded by the student
• The analysis results generated from those images (extracted questions, solutions, and step-by-step workings)

Uploaded images are stored to allow students and parents to review past submissions. Images can be deleted by the student at any time.

Device and Usage Information

We may automatically collect:

• Device type and operating system version
• App version
• General usage patterns (e.g. features used, session duration)

The app requests camera and photo library access to enable the Cheeky Check feature. The camera is used solely for capturing images of maths work and is not accessed for any other purpose.

Analytics

We measure how the website and app are used with Umami, an analytics tool we run ourselves on our own server. Nothing is sent to Google Analytics, Facebook, an advertising network, or any other third party. The data never leaves infrastructure we control.

What is recorded for a website visit:

• The page visited, and the site that linked you to it (if any)
• Browser, operating system, device type and screen size
• An approximate country, worked out from your IP address at the moment of the visit. Your IP address itself is not stored

What is recorded from the app:

• That a milestone happened: an account was created, a child profile was added, a lesson was finished, a Cheeky Check was submitted, a subscription started
• A small amount of context alongside it, limited to year level, an accuracy band (for example "75–90"), and counts

Session recordings and heatmaps (website only):

On the website we also record the shape of a visit: scrolling, mouse movement, taps and clicks, and which parts of a page get read. We play these back anonymously to find the places where the site confuses people. They run on the same Umami server we host ourselves, and go nowhere else. Nothing like this happens inside the app.

Anything you type into a form is masked before a recording is stored, so we see that a field was filled in, not what went into it. The pages where you sign in or pay are left out of recording altogether.

Analytics never includes a student's name, nickname, email address, their answers, or the content of their work, and it never includes what you or they have typed. It does not identify individual people or accounts, it is not linked back to a profile, and it is not used to build a profile of anyone. There is no cross-site tracking, no advertising cookies, and no data sold or shared. Umami sets no tracking cookies at all.

Crash and Error Reports

To find and fix bugs, the app sends crash and error reports to Sentry, a third-party diagnostics provider. These reports include the type of error, the app version and device model, and an internal account identifier so we can tell whether one person hit the same bug repeatedly. They do not include your name or email address, and the app does not attach screenshots to crash reports in the released version.

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain the Service
• Personalise learning content to each student's level and progress
• Generate progress reports for parents/guardians
• Improve and develop new features
• Communicate with parents about their account (e.g. password resets)
• Ensure the security and integrity of the Service

3. AI and Data Processing

Kākā Math uses artificial intelligence to analyse uploaded images of maths work and to generate personalised learning content. When students upload an image for checking:

• The image is sent to our AI service provider, Google (Gemini), for analysis (extracting questions, checking answers, and generating step-by-step solutions). We also use Anthropic (Claude) to generate lesson and question content, which does not involve student data.
• We do not use student data or uploaded images to train AI models
• Analysis results are stored so students and parents can review them later

4. Data Sharing

We do not sell, trade, or rent personal information to third parties. We may share information with:

• Service providers: Third-party services that help us operate the Service (e.g. hosting, AI processing). These providers are contractually obligated to protect your data.
• Legal requirements: When required by law, regulation, or legal process.
• Safety: When we believe disclosure is necessary to protect the safety of our users.

5. Data Storage and Security

Your data is stored on secure servers. We implement appropriate technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, or destruction.

Passwords are hashed using industry-standard algorithms and are never stored in plain text.

6. Children's Privacy

Kākā Math is designed to be used by children under the supervision of a parent or guardian. We take children's privacy seriously:

• Child accounts can only be created by a parent/guardian
• We collect minimal personal information from children
• Parents can review, modify, or delete their child's information at any time
• We do not display advertising to children
• We do not allow children to make purchases
• We do not run third-party analytics or advertising trackers. Our analytics are self-hosted and, as described above, contain nothing that identifies a child

7. Your Rights

Under the New Zealand Privacy Act 2020, you have the right to:

• Access the personal information we hold about you and your children
• Request correction of inaccurate information
• Request deletion of your account and associated data

You can delete your account yourself at any time, without contacting us: in the app, go to the Parent tab, then Delete Account. This permanently removes your account, every child profile in your family, and all associated progress and uploaded work.

To exercise any of these rights, or if you would rather we handled the deletion for you, contact us at hello@kakamath.nz.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, your account, your children's profiles, their learning data and your uploaded images are deleted immediately and permanently. There is no recovery period, so please be certain before confirming. Backups taken before the deletion are overwritten on their normal rotation, and we may retain limited records where the law requires it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of any material changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@kakamath.nz