Privacy Policy

App: Arithmetix | Last updated: 27 February 2026

  This policy explains what personal data Arithmetix collects, why, and your rights under
  UK GDPR. Please read it carefully before creating an account.

1. Who we are

Arithmetix is operated by Alex Ghita ("we", "us", "our"). We are the data controller responsible for personal data collected through the Arithmetix iOS app.

2. What data we collect

Parent / Guardian account

Email address (used for authentication and account recovery)
Display name (optional, used in the app UI)
Purchase status (one-time unlock, managed via Apple App Store)

Child profiles (created by parents)

First name or nickname (displayed in the app)
School year group (e.g. Year 2) — used to select appropriate content
Exercise session records: questions attempted, answers given, scores, timestamps
Progress data: topic completion levels, badge achievements, coin balance

We do not collect precise location, photos, voice recordings, device identifiers, or advertising IDs. We do not target advertising at users.

3. How we use this data

Providing the service — delivering personalised learning plans, tracking progress, and enabling the parent dashboard
Account management — authentication, subscription management, and account recovery
App improvement — understanding which topics are difficult to improve content quality (aggregated, not individually profiled)

4. Legal basis (UK GDPR)

Contract (Article 6(1)(b)) — processing your account data to deliver the service you signed up for
Legitimate interests (Article 6(1)(f)) — aggregated analytics for app improvement, where this does not override your rights
Legal obligation (Article 6(1)(c)) — where required by law

5. Children's data

Child profiles are created and managed by a parent or guardian. We do not knowingly collect personal data directly from children under the age of 13 without verified parental consent. If you believe a child has provided data without parental consent, please contact us immediately at blueflamegames@proton.me and we will delete it promptly.

We limit child profile data to the minimum necessary for the educational service. Children's session data is only accessible to their parent/guardian account.

6. Third-party processors

We share data only with processors necessary to run the service:

Google Firebase (Google LLC / Google Ireland Limited) — authentication (Firebase Auth) and data storage (Cloud Firestore). Data may be stored in the EU and/or USA. Google processes data under a Data Processing Agreement and Standard Contractual Clauses. See Firebase Privacy.
Apple Inc. — app distribution (App Store), one-time in-app purchase processing, and Apple Sign-In. Governed by Apple's own privacy policy.

We do not sell personal data to any third party.

7. Data retention

Account and child profile data: retained while your account is active, then deleted within 90 days of an account deletion request
Session logs and progress records: retained for 2 years, then automatically deleted
Purchase records: retained as required by Apple for financial compliance

8. International transfers

Firebase may store data outside the UK/EEA (including the USA). Google provides appropriate safeguards via Standard Contractual Clauses (SCCs) approved under UK GDPR.

9. Your rights (UK GDPR)

You have the right to:

Access — request a copy of your personal data
Rectification — correct inaccurate data
Erasure — request deletion of your account and all associated data
Restriction — ask us to limit how we use your data
Portability — receive your data in a machine-readable format
Objection — object to processing based on legitimate interests

To exercise any right, email us at blueflamegames@proton.me. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

10. Security

We use industry-standard measures including Firebase security rules, HTTPS encryption in transit, and role-based access controls to protect your data. No method of transmission is 100% secure; we cannot guarantee absolute security.

11. Changes to this policy

We may update this policy from time to time. Material changes will be notified within the app. Continued use after a change constitutes acceptance of the updated policy. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact

For any privacy questions or data requests:
Alex Ghita
Email: blueflamegames@proton.me