Privacy Policy

1. Introduction

This Privacy Policy informs users of the Mathflow platform (hereinafter "the Platform"), published by Mathflow AI SAS, about how their personal data is collected, processed, and protected, in accordance with the General Data Protection Regulation (GDPR) and applicable privacy laws.

2. Data Controller

3. Data Collected

We may collect the following categories of data:

• Identification data: name, surname, email address, date of birth
• Connection data: login credentials, connection logs, IP address (anonymized)
• Usage data: progress, exercise results, AI coach interactions, time spent on the app
• Technical data: device type, operating system, browser, screen resolution
• Payment data: processed exclusively by our PCI-DSS certified providers (never stored by Mathflow)

4. Purpose of Processing

The data collected is used for:

• Providing and personalizing learning services
• Tracking user progress
• Improving the quality of services and user experience
• Managing subscriptions and billing
• Communicating with the user (notifications, support, information)
• Ensuring Platform security
• Complying with legal and regulatory obligations

5. Legal Basis for Processing

Data processing is based on the following legal grounds:

• Contract performance: provision of subscribed services
• Consent: marketing communications, non-essential cookies
• Legitimate interest: service improvement, security, fraud prevention
• Legal obligation: retention of billing data

6. Anonymization and Hosting

Personal data is stored in an anonymized manner and hosted exclusively on servers located in France, ensuring protection in compliance with European legislation.

No data transfer outside the European Union is carried out without the adequate safeguards provided for by the GDPR (standard contractual clauses, adequacy decisions, etc.).

7. Data Retention

• Account data: retained during account usage, then deleted within 3 years after last activity
• Billing data: retained for 10 years in compliance with accounting obligations
• Connection logs: retained for 1 year in compliance with regulations
• Cookies: maximum duration of 13 months

8. User Rights

Under the GDPR, you have the following rights:

• Right of access: obtain a copy of your personal data
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data
• Right to portability: receive your data in a structured, readable format
• Right to object: object to the processing of your data
• Right to restriction: request restriction of processing
• Right to withdraw consent: at any time, without affecting the lawfulness of prior processing

To exercise these rights, contact our DPO at dpo@mathflow.ai. We commit to responding within 30 days.

You may also file a complaint with the CNIL (French Data Protection Authority): www.cnil.fr.

9. Cookies

The Platform uses cookies to improve user experience. To learn more about the cookies used and manage your preferences, please consult our Cookie Policy.

10. Data Security

Mathflow implements appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration, or disclosure, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Strict access control to systems and data
• Regular security monitoring and auditing
• Staff training on data protection best practices

11. Policy Changes

Mathflow reserves the right to modify this Privacy Policy at any time. Users will be informed of any substantial changes. The current version is always available on the Platform.