Privacy notice

Mathidia Junior is operated by ASM Professional Services, KVK Number 42137630, VAT ID NL005526019B33, the Netherlands. We are the controller of the personal data described here. Contact for all privacy matters, including our data protection contact: support@mathidiajunior.com.

This notice covers mathidiajunior.com and the installable app. It applies to parents and guardians (account holders, who must be 18 or over) and to children aged 4–12 whose profiles a parent creates. Children cannot create accounts themselves. A shorter summary for families is on our children's privacy page.

We never ask a child for their real name, email, phone number, photograph, school, address or location. Children cannot chat, message, post or share anything. If you do not provide the required parent and child details we cannot provide the service.

A signed-in parent must confirm they are the child's parent or legal guardian and give consent before a child profile is created or any learning data is collected. Each consent, withdrawal and re-consent is stored as a new, dated record showing the notice version you saw. You can withdraw consent for any child at any time in the parent zone; the child's access stops immediately and no further learning data is collected until you consent again. Withdrawal does not affect processing that took place before it.

United States (COPPA): when you buy a paid plan, the card payment through Stripe is used as part of verifying that a parent is giving consent. On the Free Trial, a US parent must first click a consent link we email them, and we then send a follow-up confirmation ("email plus"). No child profile can be added until this is done. Because we never disclose children's data to third parties, this method is permitted under COPPA.

• No advertising, no ad networks, no behavioural profiling for marketing.
• No sale or rental of personal data, and no "sharing" for cross-context advertising.
• No third-party analytics or social-media pixels.
• No AI model training on your child's data, and no AI chat with children (see our AI policy).
• No automated decisions with legal or similarly significant effects. Difficulty adjustment is educational only, and you can see it in reports.
• No marketing emails to children. We email parents only about the service unless you separately opt in.

Reading aloud and spoken answers use features built into your child's browser or device. We do not receive, record or store audio. Some browsers (for example Chrome and Safari) may send speech to the browser maker (Google or Apple) to turn it into text, under that company's own privacy terms. You can simply not use the microphone button; all questions can be answered by tapping or typing.

Processors act only on our written instructions under data processing terms. We may disclose data if required by law, to protect a child's safety, or to a buyer of the business under equivalent protections, in which case we will tell you first.

Some processors are in the United States or other countries outside the EEA, UK and UAE. Transfers rely on the EU–US Data Privacy Framework where the recipient is certified, the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and, for the UAE, contractual safeguards under the Federal PDPL. You can ask us for a copy of the safeguards.

Depending on where you live, you (and your child, through you) have the right to:

• access your data and your child's data, and download a copy (in the parent zone, under Account);
• correct inaccurate data (edit any child profile at any time);
• delete a child profile or your whole account (see Delete your data);
• withdraw consent at any time, which stops the child's access and further collection immediately;
• restrict or object to processing based on legitimate interests;
• data portability (machine-readable JSON export);
• under COPPA, review your child's information, refuse further collection and have it deleted;
• under US state laws (e.g. California), know, delete and correct, and not be discriminated against for exercising these rights. We do not sell or share personal information;
• complain to a supervisory authority: Autoriteit Persoonsgegevens (NL), the ICO (UK), the UAE Data Office, the US FTC, or your local regulator.

To use a right we cannot do through the dashboard, email support@mathidiajunior.com from your account email. We verify you are the account holder before disclosing or deleting any child data and reply within one month (45 days for US requests). We never act on a request from someone who is not the account holder.

Data is encrypted in transit (HTTPS) and at rest. Access is controlled per family at the database level. Child codes are stored only in scrambled (hashed) form, and repeated wrong codes temporarily lock sign-in. New devices need a parent's approval. Staff access is limited to the owner and is logged. If a breach is likely to put you at risk, we notify the regulator within 72 hours and tell you without undue delay.

We use only strictly necessary cookies and browser storage. See our cookies & storage policy.

We will show the new version and date here. If a change affects how we use children's data, we will ask for your consent again before it applies to your child.