Alma Math — Privacy Policy

1. Who we are

Alma Math Ltd (“Alma”, “we”, “us” or “our”) is the controller of the personal data described in this policy. We are a company registered in England and Wales under company number 16806901. Our registered office is 18 Transmere Road Transmere Road, Petts Wood, Orpington, England, BR5 1DU.

Questions or data-protection requests can be sent to benj@almamath.com.

2. Scope

This policy applies to the Alma Math iPad app, almamath.com and related support services. Alma is intended for people aged 13 and over. If you are under 18, please read this policy with a parent or guardian.

3. Information we collect

• Account and profile information: your Sign in with Apple identifier and, when Apple or you provide them, your name and email address; username; selected courses; learning goals; study preferences; confidence; and daily-study target.
• Learning and user content: questions, answers, handwriting, images, typed work, tutor conversations, feedback, progress, mastery, scores, streaks, experience points, and content you choose to put in Notes or send to Alma features.
• Voice and document input: microphone audio you submit for transcription, text submitted for speech generation, and images or handwriting submitted for recognition. Note recordings are stored locally on your device; Alma does not upload the recording itself as part of Notes cloud sync.
• Subscription information: product, entitlement, transaction and subscription-status information supplied by Apple. Alma does not receive your full payment-card details.
• Usage and technical information: app events, feature use, device and app version, performance and timing data, error information, and pseudonymous identifiers used to measure reliability, prevent duplicate events and protect the service.
• Communications: support requests, feedback, and operational email delivery records. If you optionally link Discord, we may process your linked Discord identity and eligible achievement information used by that integration.

The public website does not currently offer an account form or use advertising cookies. Standard hosting infrastructure may still process request information such as IP address, browser details and timestamps for delivery and security.

4. How and why we use information

• To create your account, save progress, provide courses, Notes, feedback, tutoring, voice features and adaptive practice, as needed to perform our contract with you.
• To verify and restore subscription access and respond to support requests, as needed to perform our contract with you.
• To keep Alma secure, diagnose failures, prevent abuse and fraud, and improve product reliability, based on our legitimate interests in operating and improving a safe service.
• To comply with legal, tax, accounting and regulatory obligations.
• To operate an optional integration, or process optional information, where we ask for your consent. You can withdraw consent without affecting processing that happened before withdrawal.

We do not sell personal data. We do not use learner content for targeted advertising. Alma may personalise questions and study suggestions, but does not make solely automated decisions that produce legal or similarly significant effects about you.

5. AI, handwriting and voice features

When you ask for tutoring, marking, recognition, transcription or speech, the content needed for that request may be sent to specialist processors. Depending on the feature, this can include OpenAI for AI, transcription and speech services; Mathpix for handwriting or document recognition; and ElevenLabs for optional voice services.

Notes AI sends only the text you deliberately select and review, not your entire notebook or library. Alma configures its Notes AI requests not to create stored application state. OpenAI API inputs and outputs are not used to train OpenAI models by default, although limited content may be retained by OpenAI for abuse monitoring under its data controls. Voice audio and speech text are sent only when needed to provide the requested feature; Alma does not store that audio or text in its product analytics.

6. Who receives information

We use providers only where needed to operate Alma, including:

• Apple for app distribution, Sign in with Apple and StoreKit;
• Google services, including Firebase Authentication, Firestore, Storage, Analytics and cloud infrastructure;
• Railway for backend hosting;
• OpenAI, Mathpix and ElevenLabs for the features described above;
• PostHog for product and reliability analytics;
• Resend for operational and support email; and
• Discord, only if you choose to use a Discord integration.

PostHog session replay and automatic screen or element capture are disabled. Alma excludes raw answers, prompts, responses, handwriting, images, audio, email addresses and StoreKit proof from PostHog product analytics. We may also disclose information when required by law, to protect rights or safety, or as part of a corporate transaction subject to appropriate safeguards.

7. International transfers

Some providers may process information outside the United Kingdom. If UK data-protection law requires a transfer safeguard, we use an applicable adequacy regulation, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful mechanism. You may contact us for information about the safeguard relevant to your data.

8. How long we keep information

We keep account and learning data while your account is active and for as long as needed to provide Alma. You can delete individual content where the app offers that control, and can request account deletion from inside the app. Current Home Alma limits retain no more than 20 content-bearing sessions, 16 messages per conversation and 20 saved memories for an active account.

On account deletion, Alma removes the account, user document trees, user storage and directly associated support or delivery records from active systems. Limited pseudonymous records may remain where needed for subscription entitlements, fraud prevention, deletion proof, analytics integrity or legal obligations. These include salted hashes, transaction ledgers, aggregate analytics and idempotency records rather than the deleted account content. Shared curriculum or quality-review material may remain after raw attribution is removed. A Discord message already published to a shared server may remain until a moderator removes it.

Operational logs, support correspondence and email records are kept only for as long as reasonably needed for security, support, dispute handling and legal obligations. Residual encrypted backups, where maintained by a provider, are isolated from ordinary use and expire under that provider's backup schedule.

9. Your choices and rights

Depending on the law that applies, you may ask for access to or a copy of your personal data; correction; deletion; restriction; portability; or object to processing based on legitimate interests. You may withdraw consent where consent is the basis used. You can delete your Alma account inside the app, manage notification permission in device settings, and manage your Apple subscription in Apple Account settings.

Email benj@almamath.com to exercise a right. We may need to verify your identity. You also have the right to complain to the UK Information Commissioner's Office through its complaints service, or to your local data-protection authority.

10. Children's privacy

Alma is not intended for children under 13. We aim to use high-privacy defaults, collect only what the selected features need, and present explanations that younger users can understand. A user under 18 should have permission from a parent or guardian. If you believe a child below the applicable minimum age has provided personal data, contact us so we can investigate and delete it where required.

11. Security and changes

We use access controls, authenticated requests, protected local storage and other technical and organisational measures designed to protect information. No system is completely secure. We will update this policy when our practices materially change and will provide additional notice in the app where appropriate.