Numica Privacy Policy

Numica is a math practice app for children in Grades 1–10, following the Ontario curriculum. A parent creates the account; children practise under it.

This policy explains what information Numica keeps, why, where it lives, who can see it, and how to erase it. It is written for Canada's federal privacy law (PIPEDA), because Numica holds personal information about children.

What we collect, and why

We collect the minimum the app needs to work, and nothing else.

From you, the parent:

• Your email address — to sign you in, and to reach you about your own account (for example, a password reset).
• Your parent PIN — the four-digit code that keeps children out of parent screens. We never store the PIN itself, only a scrambled version (a hash) that lets the app check it without knowing it.
• Feedback messages you choose to send — the message you type, plus which topic was last practised, so we can find the question you are writing about. The feedback screen tells you exactly what is attached and asks you to leave names out of the message.

About each child, entered by you:

• First name and grade — so the app can greet the child and show the right math. No last name, no birthdate, no photo, no contact details.

Created as a child practises:

• Practice records — which topics were practised, how long, how many answers were right or wrong, and progress per topic. This is what powers the child's own progress screen and your parent report.

What we never collect: location, contacts, photos, device identifiers for advertising, or anything from the child directly. A child cannot type free text anywhere in the app, and every screen with a data field sits behind the parent PIN.

Payments

A Numica subscription is bought through Apple's App Store or Google Play. Apple or Google takes the payment. Numica never sees your card or bank details.

To know whether your family has paid, Numica uses RevenueCat, a payment processor that checks store purchases for apps. RevenueCat holds:

• your Numica account number (a random code, not your email or name);
• the store's record of the purchase: which subscription, which store, the transaction numbers, and when it started, renews, ends or was refunded;
• basic technical details its software sends from the device, such as the app version and the kind of device.

RevenueCat does not receive your email address, your PIN, or anything about your children.

While your purchase is being matched to your account, Numica's own database also keeps the store transaction number the purchase sheet returned, linked to your account, so the payment reaches the right family. We keep it for up to 7 days after it is confirmed, or 1 day if it is never confirmed, then delete it.

Numica's own database keeps the matching subscription record: which store and which purchase, and the date your access is paid until. It is used only to turn access on and off.

Where your information lives

Your family's information is stored in Numica's own database, hosted on Supabase, a cloud database service. The other companies that handle any of it do so only to make the app run — delivering our emails, signing you in, and taking and checking subscription payments — and are listed under Who can see your information. No other company receives your data to analyse or use.

No ads, no tracking

• Numica contains no advertising of any kind.
• Numica contains no analytics, tracking, or advertising software — we checked every package the app is built from.
• The child-facing practice screens contain no browser, social link, or other route out of the app. A parent choosing Google or Apple sign-in may briefly see that provider's own secure sign-in page.

Public website hosting

Numica's public information and privacy pages are hosted by GitHub Pages. They contain no forms, cookies, analytics, advertising, scripts, or third-party assets. GitHub may log a visitor's IP address for security, as explained in the GitHub General Privacy Statement. This technical hosting data is not added to a Numica account.

Who can see your information

Only you. Your account can see only your own family's data — this is enforced by the database itself, on every table, not just by the app's screens. One family can never see another family's information.

We do not sell personal information, share it with advertisers, or give it to anyone else. The only companies that handle it at all are the services that make the app run:

• Supabase — hosts the database, as described above.
• An email delivery service (Resend) — carries the emails we send you (described next), the way a postal service carries a letter.
• Google or Apple — handles sign-in when you choose that provider. Numica receives the identity details needed to recognize your account; the provider does not receive your children's practice records.
• RevenueCat — a payment processor that checks App Store and Google Play subscriptions for Numica, as described under Payments.
• Apple or Google — takes the payment when you subscribe, under your own App Store or Google Play account.

These services handle data only to provide their stated service to us.

How we protect your information

The app sends account and practice data over encrypted HTTPS connections. Supabase access controls restrict each signed-in parent account to its own family records. The parent PIN is stored only as a one-way hash, and Numica does not store Google or Apple passwords. Access needed to operate or support the service is limited to authorized administration.

The emails we send

• Account emails — confirming your email, resetting your password, telling you your password changed. These exist to protect your account.

We never send marketing email to you, and never any email to a child.

Children's information, specifically

• All of it is collected through your account, entered or generated under your control — never from the child directly.
• It is minimal by design: a first name and a grade are the only facts about the child themselves.
• It is used only to run the app — showing the right questions, tracking progress, and reporting to you. Never for marketing, never for advertising, never shared.

How long we keep it

As long as your account exists, and no longer. There are no backups you would need to chase separately: deleting your account deletes everything, with one narrow exception for a subscription, described next.

After account deletion, we retain a restricted record of the purchase's app, store, environment and original transaction identifier, without the link to your Numica account or your children's data, solely to prevent reuse by another account and only for as long as necessary for that purpose.

We delete that record at least 12 months after the subscription last expired or was refunded, whichever is later. While the store subscription is still running, or the store is still trying to collect a payment, the record is kept, because the purchase could still be reused.

Deleting everything

You can erase your family's data yourself, inside the app, any time:

Settings → Delete account (behind your parent PIN).

If you cannot access the app, visit the account deletion page to request deletion from the web.

This immediately and permanently deletes your account and everything under it — your email, your PIN, every child's name and grade, all practice records, and any feedback you sent. There is no grace period and no way back; the deletion runs in the database itself and cascades through every table that holds your family's data.

Deleting your account also deletes your customer record at RevenueCat. The only thing kept is the restricted purchase record described under How long we keep it.

Deleting your Numica account does not cancel your App Store or Google Play subscription, and a new Numica account cannot restore that purchase. To stop paying, cancel the subscription in your App Store or Google Play account settings.

Your rights

You can see and change your family's information directly in the app. If you have a question about your privacy, or want to know what we hold about you, contact us:

sheray@gmail.com

If you are not satisfied with our answer, you have the right to complain to the Office of the Privacy Commissioner of Canada — www.priv.gc.ca, 1-800-282-1376.

Changes to this policy

If Numica ever collects something new or uses information differently, this policy will change first and the change will be dated. We will not quietly widen what we collect.

Last updated: 1 October 2026