Privacy
Huh Lab Maths is used by children, so it is built to know as little about them as possible. This page says exactly what we hold, why, and how to make us delete it.
The short version
- Playing without an account sends nothing about the player to us. Progress stays in that browser. The only thing we learn is an anonymous count that the page was opened.
- Accounts belong to a parent or guardian. Children never register and never give us an email address.
- About a child we store a nickname and a school year. No full name, no birthday, no photo, no location, no contacts.
- No advertising inside the game, and nothing about a child is ever sent to an advertiser. To measure our own adverts we use Google's advertising tag on the home page, on the page our adverts lead to (huhlab.com/maths) and at the moment a parent subscribes (see below); it is never loaded while a child plays. We do not sell or share anyone's data for marketing.
- A parent can delete the account and everything under it, at once, from the parent panel. A running subscription is cancelled first, so that nothing is charged after the account is gone.
What we store
| About | What | Why |
|---|---|---|
| The parent | Email address. When subscriptions open: country and a payment-provider customer reference (never card numbers). | To sign you in with an emailed link, send the reports you ask for, and take payment. |
| The child | A nickname you choose and the school year you select. If you set up a student sign-in: a username you choose (not their real name) and a 6-digit PIN, which we keep only as a one-way scrambled code (a salted hash), never as the digits. | So the right profile opens and the questions start at the right level, and so your child can sign in on their own device without your email. |
| Learning | For each answered question: the skill, whether it was right, which wrong option was chosen, how long it took, and the points awarded. From these we keep a per-skill mastery estimate. | This is the product: choosing the next question, showing you what your child has mastered and where they are stuck, and awarding points fairly. |
| Visits to the site | A count per day of how often each page was opened, and which site or campaign link sent the visitor. No cookie, no IP address, nothing that identifies a person or a device. | To know whether anyone is finding us, and from where. |
| Our adverts (Google Ads) | On the home page, on the page our adverts lead to (huhlab.com/maths), and on the page a parent sees when a subscription starts or is paid, Google's advertising tag sets cookies so Google can tell us which of our adverts led to that visit. For a payment it receives the amount and a payment reference. It receives nothing about your child, and it is never loaded during play. Google handles this data under its own privacy policy (policies.google.com/privacy). | To know which adverts bring families, so we do not waste money on ones that do not. |
We do not collect device identifiers for tracking, precise location, voice, images, or free text typed by a child.
Children and consent
Accounts are for adults. By creating an account and adding a child profile, you confirm you are that child's parent or legal guardian and you consent to the processing described here on their behalf. We use a child's data only to run the service for that child. It is never used for advertising or to build a profile for any other purpose.
If you believe a child has given us personal information without a parent's consent, tell us and we will delete it.
Who processes it for us
- Supabase (database and sign-in), hosted in the United States.
- Vercel (website and server functions).
- Resend (sign-in and report emails to the parent).
- Stripe (payments). Card details go to Stripe directly and never reach us.
These companies act on our instructions and may store data outside your country. We do not give your data to anyone else, unless the law requires it.
Rewards
Points are earned by learning and recorded on our servers. Any reward is released to the parent, who decides whether and how to pass it on. We do not ask for a child's gaming account name or any account belonging to a child.
How long we keep it
For as long as the account exists. Delete the account and the email address, child profiles, answers, mastery data and points are erased immediately and cannot be recovered. Payment records that the law requires us to keep are held by our payment provider.
HUHLAB Homework (classes set up by a teacher or tutor)
Some teachers and tutors use HUHLAB to set homework. This is what we store for a class, and why.
What the teacher gives us. The class name, the teacher's name, the school or centre, the term, an optional logo (only if the teacher confirms they have permission to use it), and the list of students' names. The teacher is responsible for having the right to share the class list with us.
What a student does. A student has no account and gives us no email, phone number or password. They choose their name from the class list, and we store their answers to each homework question, whether each was right, and when. We keep a random key on the student's device so the same student can carry on later. Anyone who has the homework link can see the names in that class list, so teachers should share the link only with the class.
What a parent gives us. A parent may add their own email address to receive a weekly homework report for their child. Teachers cannot add a parent's email and cannot see it. We send one first email; nothing more is sent unless the parent confirms. Every email has a link that stops them. We only send news about HUHLAB itself to parents who tick the separate box, and they can untick it at any time.
Who sees what. The teacher sees their own class: names, who has done each homework, marks, and the mistakes the class makes most. A parent sees only the child they chose. We do not show adverts to students, and nothing is sold to students inside homework.
How long we keep it. A class and everything in it (students' names, answers and parents' emails) is deleted automatically 90 days after its last homework was due. A teacher can delete a class, a student or a piece of homework at any time, and it is removed straight away.
Your choices. A parent can stop the emails from any email we send. To see or delete what we hold about a child before the 90 days are up, ask the teacher or write to privacy@huhlab.com.
Your rights
You can see your child's learning data in the app, correct a nickname or school year, and delete everything from the parent panel (Delete my account and all data). Depending on where you live you may also have rights to a copy of the data, to object, and to complain to your data-protection authority.
Contact
For any privacy question or request, write to privacy@huhlab.com. The quickest way to erase everything is still the delete button in the parent panel: it works immediately and needs no email.