Trust Center
What we hold, who sees it, and when it goes.
Everything a school’s privacy review asks, on one page, read from the rules the product runs on.
- Fields in a child’s record
- 9
- Service providers, each named
- 5
- Longest wait for a deletion you ask for
- 30 days
- Advertising, analytics or tracking
- None
Privacy
What we collect, and why.
A child’s record holds nine fields and no others, enforced in the code.
- Refused outright: any field whose name looks like personal information.
- Also kept: their answers and what the engine works out from them. It cannot teach what comes next without them.
- Used for: choosing what to teach next, and showing their own parent and teacher how they are getting on.
- Never used for: advertising, analytics or tracking. Never sold, never used to train a model.
- Never held: an email address, a date of birth, an address, a telephone number, a photograph, a voice, a location. There is nowhere to put one.
- A parent can see everything, download it, stop collection and delete it, from their own account page. A school directs the same.
The privacy page in plain words, and the Privacy Policy in full.
A child’s record, field by field
- An internal identifier. Not derived from anything about the child, and meaningless outside RodriMath.
- The name shown on screen. A first name is what we ask for.
- What they type to sign in. Chosen by the adult who set the account up.
- The year group they are in — not their age, and not their date of birth.
- Their character and colour, their companion and the name they picked for it from a list, and their own world: the house and place they chose, what they have planted, baked, built, worn and arranged there, the drawn card classmates see when they visit, and their best runs in its games.
- Their own settings for how RodriMath looks and sounds, such as larger text, reading aloud, the language they read in and how loud the sounds are.
- When the account was created.
- When they finished the starting assessment, if they have.
- Which of the one-time introductions they have already been shown, so the app does not greet them as new twice. Four dates and nothing else — it does not record how long anything took, how often they sign in, or how long they have been away.
Security
Encrypted, access-controlled, and on the record.
Encrypted
In transit and at rest. Credentials are stored only as hashes; a child’s PIN is hashed inside the database.
Access decided in code
A permission matrix enforced in code decides who sees which record. Every teacher account is checked by a person; a parent sees only their own children.
An audit log nobody can edit
Every administrative action — unlocks, role changes, consent, exports, deletions — lands in an append-only log. The school may inspect it and download it.
No third-party script can load
The security policy sent with every page permits no outside origin, so a tracker added by a dependency has nowhere to load from. Anyone can check the headers.
Nobody writes what a child knows
No role, ours included, can mark a skill mastered. A teacher can unlock a chapter, recorded against their name with a reason.
If something goes wrong
The school is told within 72 hours of our confirming it, and never later than the 10 days Florida allows, with what it needs for its own notices.
A written information security programme, reviewed at least annually, and a written incident-response procedure. Both are available to a district on request.
Service providers
Who receives what. Nobody else.
Each receives only its own kind. Supabase, Resend and Stripe act on our instructions under data-processing agreements; Vercel runs the software under its standard terms. No ad network, analytics, session replay or support widget.
A child’s learning record
Supabase. Everything the product stores: a child’s record and work, adult accounts, the audit log.
United States, OhioVercel. Requests as they pass through. Nothing stored beyond short-lived operational logs.
United States, Ohio
Adults’ email addresses
Resend. An adult’s email address and the message. No child has an email address.
United States
Payments
Stripe. The paying adult’s email address, card and amount; for a school, its billing details. Never a child’s name.
United States
Read-aloud
Your own device’s speech engine. The words being read. Never a child’s name, an identifier or an account.
On the device, or the browser maker’s voice service where the device has none
Every entry in full, and what is deliberately absent: the Service Providers register. Schools are told before it changes.
Accessibility
Designed for every learner.
Built to WCAG 2.1 Level AA. Every setting is in the child’s own Settings, and works at once, with no adult’s approval.
Read aloud
Any question, lesson step or recommendation, spoken by the device.
Text size
From 70% to 200%, and the whole layout scales with it, not the words alone.
High contrast
Stronger contrast between the words, the pictures and the page.
Reduced motion
Stops every animation.
Dyslexia-friendly type
A dyslexia-friendly typeface, with looser letter and line spacing.
Simplified visuals
Removes decoration so only the mathematics is on screen.
No rush
Removes every timer, the clock a few games use for fun included. No lesson, check or test is timed in any case.
Number keys
Answer with the keyboard’s number keys, or turn them off if they get in the way.
Language
English or Spanish, whichever the child reads in.
Sound
Off, quiet or loud. Read aloud works whichever is chosen.
Light or dark
Light, dark, or follow the device, on the Grade 4 and 5 boards.
Keyboard, with focus you can see
Every control works from the keyboard, and focus is always visible.
Pictures described
Every mathematical picture carries a description for a screen reader.
Never colour alone
Right and wrong always carry a word and a shape as well, and the answer is announced.
Where we fall short: a child can read RodriMath in English or Spanish, but the grown-ups’ pages are in English only, and anything newly added to a child’s page is in English until its Spanish is written. A conformance report for the whole product is available on request. The Accessibility Statement.
Compliance
Written to the law it answers to, and plain about the rest.
FERPA
RodriMath acts as a school official: under the school’s direct control, for the educational purpose it authorised, and it does not redisclose. The school owns the records.
COPPA
A child’s record is active only with verifiable parental consent or a school’s written authorisation, recorded with who gave it. A parent’s withdrawal outranks the school’s.
State law: Florida
The School and District Terms carry each provision Florida requires of a contract, and cite it. A Florida child’s record is deleted 90 days after their school tells us they have left, unless a parent asks to keep it.
Where a district’s own agreement governs
California, Illinois and New York require the district’s own agreement. Ours is the base it sits on, and theirs governs. Elsewhere the federal commitments apply, and a district’s own form governs wherever it has one.
ADA Title II
WCAG 2.1 Level AA, the standard the Department of Justice’s rule sets for the web content a public school provides, including through a vendor.
Standards
Every lesson is mapped to Florida’s B.E.S.T. Standards, and every K–5 benchmark is taught. Skills are also mapped to the Common Core, and both mappings are visible on every skill and lesson. Neither the Florida Department of Education nor the Common Core’s authors endorse RodriMath.
This is a summary; the School and District Terms are the commitment.
Data retention
Exactly when things are deleted.
The figures the nightly deletion job runs on.
730 days
A child’s whole record
After this long without activity: two school years, so a child back after a summer keeps their progress.
400 days
Each answer a child gave
Deleted after this long, active or not. The summary of what they understand stays.
30 days
A deletion you ask for
The outside limit. In practice it happens at once.
90 days
A Florida child who leaves
After their school tells us they have left, unless a parent asks to keep the record.
365 days
A school’s settled enquiry
Then the whole record goes, including anything typed in the last box.
7+ years
The audit log
At least this long. Nothing prunes it, and nobody, us included, can edit or delete an entry.
Documents
Every document, in full.
Each opens as a page to print or save. The security programme, the incident-response procedure and the conformance report come with our first reply.
Privacy Policy
What RodriMath holds about a child and about you, why, for how long, who else sees it, and what you can do about it.
Terms of Service
The agreement between RodriMath and the adults who use it.
School and District Terms
The data-protection commitments RodriMath makes to a school or district, including those Florida rule 6A-1.09550 and section 1006.1494 ask of a vendor.
Notice to Parents
The short notice a parent is shown before a child’s account is created, and what a school passes on to its families.
Accessibility Statement
What RodriMath conforms to, what every child can turn on, and how to tell us when it falls short.
Service Providers
Every third party that receives any information, what it receives, and where it is.
RodriMath, on one page
For a principal: what it is, what it costs, what it holds about a child, how it rolls out.
Who runs RodriMath
RodriMath has not yet published the legal entity name, a postal address and a telephone number. The Privacy Policy says so rather than leaving it quietly unmet, and they will appear there before RodriMath is offered beyond its current pilot. In the meantime, email reaches a person: hello@rodrimath.com.
Next
Something here your review still needs? Ask.
A person answers in one working day, with the security programme, incident procedure and terms.