Privacy Policy

Last updated: 25 June 2026

This policy explains what personal data we collect, why we collect it, and the rights you have over it. We aim to collect as little as necessary.

1. Who is responsible for your data

Developing Maths Ltd (company number 13700723), registered at Kemp House, 152–160 City Road, London, England, EC1V 2NX, is the data controller for the personal data described in this policy. We trade as IB Maths Help.

For any privacy question or request, contact us at phil@developingmaths.co.uk.

2. What we collect

Free use: you can browse and practise the free questions without creating an account. We do not require your name or email address for this.
Account & purchase: when you create an account or buy full access, we collect your email address and a record that you have paid (so we can grant and verify your access). Your card details are entered directly with Stripe — we never see or store your full card number.
Usage data (analytics): we use Google Analytics (GA4) to collect anonymised data about how visitors use the site — pages visited, time on site, general geographic location (country/city), device type, and browser. This data does not identify you personally.
Technical data: our hosting provider (Cloudflare) processes limited technical data such as IP address and browser type to deliver and secure the site. This is standard for any website and is handled under Cloudflare's own privacy terms.

3. Cookies & similar technologies

We use the following categories of cookies and local storage on this site:

Essential (always active)

Authentication tokens — set by Supabase in your browser's local storage to keep you signed in to your account. Without these, login cannot function.
Payment session cookies — set by Stripe during the checkout process to prevent fraud and process your payment securely.

Analytics

Google Analytics (GA4) — sets cookies including _ga (expires 2 years), _ga_6XR0S2P7GM (expires 2 years), and _gid (expires 24 hours) to distinguish unique visitors and record session information. Data is sent to Google's servers, which may be located outside the UK/EEA (Google applies standard contractual clauses or equivalent safeguards). IP addresses are anonymised before storage. We use this data only to understand and improve the Service.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings. Opting out of analytics cookies will not affect your ability to use any part of the Service.

4. Why we use your data

To provide and maintain the Service, including granting paid access.
To process payments and prevent fraud (via Stripe).
To respond to your enquiries and provide support.
To understand how the site is used and improve it (via Google Analytics).
To keep the site secure and functioning properly (via Cloudflare).

Legal bases (UK GDPR / GDPR): we process account and payment data on the basis of contract (providing the Service you purchased); we process analytics and security data on the basis of our legitimate interests in running and improving a safe, effective website. Where consent is required by law (for example for certain cookies), we rely on your consent.

5. Who we share data with

We share data only with the service providers listed below, who process it on our behalf:

Supabase — authentication and database hosting.
Stripe — payment processing.
Cloudflare — website hosting and security (Cloudflare Pages).
Google — analytics (Google Analytics GA4).

We do not sell your personal data. We do not share it with any third party for their own marketing purposes.

6. International transfers

Some of our service providers (including Google and Cloudflare) may process data outside the UK and EEA. Where this happens, appropriate safeguards are in place — such as UK adequacy decisions, standard contractual clauses, or equivalent mechanisms — to ensure your data is protected to UK GDPR standards.

7. How long we keep your data

We keep your account and access records for as long as your access is active, and in any event until 1 July 2027, plus any further period required to meet legal, accounting or tax obligations. Analytics data is retained by Google in accordance with their data retention settings (default 14 months). After the applicable period, data is deleted or anonymised.

8. Your rights

Under UK and EU data protection law you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data ("right to be forgotten").
Restrict or object to certain processing.
Receive your data in a portable format.
Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email us at phil@developingmaths.co.uk. We will respond within one month. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your local data protection authority.

9. Children

The Service is aimed at students studying for the IB Diploma. If you are under 16, please use the Service with the involvement of a parent, guardian or school. We do not knowingly collect more data than necessary from young people, and we do not use analytics data to profile children.

10. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page shows the current version. We will notify registered users of any material changes.