Privacy Policy

Last Updated: September 19, 2026

01 General Privacy Policy Information

This Privacy Policy applies to users of the Numerace platform and describes how Numerace collects, uses, shares, stores, and protects your personally identifiable information, and how you can access, update, delete, or limit the use of your information.

Numerace offers you choices regarding the collection, use, and sharing of your personal information, including the option to use certain Services without providing personal data.

By using the Numerace platform, you consent to the terms described in this Privacy Policy. Your continued use of the Numerace platform constitutes your acceptance of these terms and your consent to Numerace handling your personal information as described.

02 Protecting Students and their Personal Information

Numerace is particularly concerned about the collection and use of students’ personal information. We comply with applicable privacy laws, such as Family Educational Rights and Privacy Act (“FERPA”), the Children’s Online Privacy Protection Act (“COPPA”), the California Student Online Personal Information Protection Act (“SOPIPA”), Student Data Privacy, Accessibility & Transparency Act, Personal Information Protection and Electronic Documents Act (“PIPEDA”), Act respecting the protection of personal information in the private sector and other education privacy laws.

Safety and privacy measures on the Numerace platform:

Limited feature set and website experience for younger users
No requirement for students to submit name/contact info or create accounts
The platform does not facilitate direct messaging between students.
the Numerace platform does not accumulate personal information about any child for distribution, sharing, selling or renting.
the Numerace platform does not include any third party advertising, including any targeted advertising.

03 Parental Rights, Consents and Data Deletion

Numerace platform empowers parents and legal guardians of children younger than the age of consent to exercise their legal rights pursuant to legislation.

If we become aware, despite our intention not to gather this information, that we have collected personally identifiable information or prohibited data (e.g. SSN/SIN) from a child younger than the age of consent, we will delete this information immediately. If you believe that Numerace collected the personal information of your child, you may request that we delete it by contacting us at support@numerace.org

04 Information Collected By the Numerace Platform

4.1 Sensitive Information.

As described above, we limit data collection to what we need to provide the requested services. Numerace does not collect data considered or defined as sensitive, related to race or ethnicity, health and biometric information, or political affiliation. In addition to this, we do not collect student names, emails, birthdates, or information on free or reduced lunch eligibility.

4.2 Information You Provide to the Numerace Platform.

Students participate without creating an account, we may permit them to select a nickname from a pre-determined list of names.

Teachers are able to create accounts on the Numerace platform. Teachers are asked to provide, and we collect, the following information: first name, last name, email address, school name, role, country, state, and district name.

4.3 Information Collected Automatically.

We collect limited technical information automatically when the platform is used, solely to ensure the stability, security, and proper functioning of the service. This information is generated as part of routine operational logging and is used only for debugging, monitoring performance, and diagnosing technical issues.

The technical logs we receive use IP anonymization by default and do not contain persistent identifiers or personal information. Log data is retained for a limited period (up to 30 days) and is then automatically and permanently deleted.

Automatically collected information may include:

Operating system and browser type, used to ensure compatibility and cross-platform reliability;
Technical information about accessed server endpoints or pages (including puzzle pages), used to identify and resolve errors;
Timestamps of log events, used to investigate incidents and maintain platform stability.

We do not use this automatically collected information to identify users, build profiles, track users across services, or for any purpose unrelated to maintaining and improving the technical operation of the platform.

Numerace does not collect any audio or video information from user devices.

4.4 Analytics.

We use Google Analytics to help us understand how users engage with the service. Google Analytics is installed only on the teacher-facing application, located at numerace.org and app.numerace.org, and is used exclusively in connection with accounts created by adult users (18 years of age or older). Analytics data on the teacher application is used to understand platform usage and improve the teacher experience.

Google Analytics uses cookies to compile reports that demonstrate how the Numerace platform is being used without identifying individual visitors. You can opt out of Google Analytics at any time and continue to use the Numerace platform. To learn more about opting out, click here.

Please note, however, that Google Analytics is not installed on our student-facing application, located at numerace.run. The only information collected through the student application is limited, non-identifying gameplay data, specifically:

Puzzle opened. We use this to understand which puzzles are more or less popular and to guide future content development.
Time spent within a puzzle - we use this to assess puzzle difficulty for the average classroom experience.
Puzzle outcome (correct / incorrect / not solved) - we use this to evaluate puzzle difficulty and improve future puzzle design.

This information is collected at the session level and is not linked to persistent identifiers or individual student profiles.

4.5 Data Collected During Numerace Sessions.

Numerace does not collect personally identifiable information about Numerace Session participants. No persistent identifiers, device identifiers or other personal information are collected or linked to the session data.

You may choose not to provide specific information or to delete or modify it at any time. These actions may prevent you from engaging with specific services or features that require this information.You may be providing additional information to the Numerace platform if you communicate with our support team, participate in user research, marketing campaigns, or otherwise use the services. We only collect this type of information from adults and non-student users, and we do not permit minors, children or students to participate in user research, marketing campaigns, or otherwise use the services.

05 Cookies and Web Beacons

A cookie is a string of information that a website stores on a visitor's computer, and that the visitor's browser provides to the website each time the visitor returns. We use cookies only on the teacher-facing application, located at numerace.org and app.numerace.org to test new features and to help Numerace identify and track visitors, their usage of the website.

Users who do not wish to have cookies placed on their computers should set their browsers to refuse cookies. To learn more about “How Websites and Apps Collect and Use Your Information” including controlling cookies, please visit this link. You may also learn more about controlling flash cookies here.

06 How Numerace Uses Provided Information

6.1 Ways we Use Information.

The information we collect helps us to provide the service, maintain a consistent experience, and improve it or develop new services. Examples of how this information is used include:

Providing access to your account and saving progress over time.
Personalizing the experience based on factors such as general location and preferred language.
Assisting teachers in identifying and supporting individual students.
Analyzing engagement with specific features over time.
Identifying the most frequently used or popular activities and tasks.
Conducting quality assurance, including monitoring and resolving bugs or technical issues.
Numerace uses the data we collect about you to operate, maintain, quality control, improve and develop and enhance the services we provide, secure information, develop new services, and protect our users and the company from security breaches or other unauthorized disclosures or uses.

6.2 How We Limit All Disclosures.

Numerace limits its disclosure of both information that could on its own or in combination with other information be used to identify you. We only disclose that information in order to (i) process it on Numerace's behalf or to provide services through the Numerace platform and, (ii) with third party providers who agree not to disclose that information to others.

6.3 We Don’t Sell Any Personal Information or Data.

Numerace does not rent, sell or exchange any data, including but not limited to, personally identifying information or potentially personally identifying information to any third party.

Other than to Numerace’s employees, contractors, and affiliated organizations, as described above, Numerace discloses potentially personally identifying information only when required to do so by law such as to comply with a court order.

Numerace does not profile children for marketing purposes or in ways that lead to unfair, unethical or discriminatory treatment.
We do not share, rent or sell data originating from child-directed or child-user content or traffic.
We do not repurpose student data or use it for research without express consent, and only if and unless authorized by statute or all data anonymized.
We securely destroy or make anonymous in a timely manner all personal information that is no longer required to provide the service and they must explicitly identify retention timelines.

07 Artificial Intelligence (AI) Platforms

Numerace does NOT share or make available any personal information to third parties for AI model training, or similar purposes. Numerace does NOT use user data for developing, improving, or training generalized AI and/or ML models.

08 Information Shared with Third Parties

As described in this policy, Numerace only shares your personal information when it is necessary to offer the service, comply with law, or with your permission. All of our third-party providers adhere to strict data security standards.

8.1 Third-Party Services that May Process Your Numerace Personal Information.

In order to provide and improve the Numerace platform, a limited number of third-party services require access to your personal information. For example, your account data are saved in a data center so that you can log in from any device. Third-party services are contractually prohibited from using your information except to provide the service.

8.2 Third Party Cloud Provider: Amazon Web Services.

Numerace utilizes the services and infrastructure of outside parties to host its data. Numerace holds those providers to a standard at least as protective of student data as the measures outlined in this policy. Our main cloud provider, Amazon Web Services (AWS), is the largest data hosting company and has leading practices in security standards and personnel in place to constantly monitor this area. A link to AWS’s Privacy Center can be found here.

8.3 Third Party Cloud Provider: Google Services.

Google application programming interface (“API”) Services, including Google Sign-In, are part of an authentication and authorization framework that gives the Numerace platform the ability to connect directly with Google users by requesting access to Google user data. The Google APIs Terms of Service govern the use of Google API Services when Numerace requests access to Google user data.

Numerace commits to adhere to the Google API Services User Data Policy, including its Limited Use requirements, for any data received from Google APIs. For more details, visit Google APIs Terms of Service, Google API Services User Data Policy.

The Numerace platform may collect information from partners and integrated technologies. For example, if you choose to use Google Login, we may receive information including your name and email address from Google. Numerace does not have access to the passwords used to log into your Google accounts. Numerace confirms that Google Workspace APIs are not used to develop, improve, or train generalized AI and/or ML models. By using the Numerace platform, you further acknowledge and agree to the Google Privacy Policy.

8.4 Third Party Cloud Provider: Resend.

Numerace uses Resend to manage and deliver email communications. This service is used solely for sending messages such as account notifications, product updates, and feedback requests. Resend does not have access to any student data—only information related to adult users (e.g., teachers, parents or guardians).

If you are a registered adult user, Numerace may occasionally contact you by email (if you have provided one) to gather feedback or share updates about the platform. By registering for our services, you consent to receiving these communications. You can opt out at any time by clicking the “unsubscribe” link included in any email. For more information about how Resend handles personal data, please refer to their Privacy Policy.

A complete list of our sub-processors is available here.

8.5 Information from Other Third-Party Sources.

Depending on how you use the platform, we may also receive your personal information from another user, with a Numerace educational account, under the Numerace terms and conditions. For example, a teacher might input your email in order to share a parent report or login link.

Teachers and schools using the Numerace platform must obtain appropriate parental consent prior to entering enter student information directly into the Numerace platform or requiring students to sign up via the Google Classroom Integration, or a similar rostering functionality.

Content on the Numerace platform may contain links to other websites not affiliated with the platform. While we review the privacy and security practices of third-party companies who assist us in providing you with our site and services, we are not responsible for the privacy practices of other websites and users need to be aware of the data privacy practices of such sites should they choose to use these links.

09 Data Storage, Retention, Processing and Security.

We will retain your information only for as long as necessary for the purpose for which it was collected, unless we are required by law to maintain it for a longer period. For example, if you have an account with us, we will retain your account information until your account is deleted.. We conduct periodic reviews of accounts and may delete accounts that have been inactive for extended periods of time. You may delete your account or update your information at any time by contacting us by support@mathjams.org.

We may retain and use your information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Our security practices are governed by applicable data privacy laws. We maintain industry-standard security protocols to ensure the security and confidentiality of the data submitted to us, both during transmission and once we receive it.

Our security measures include the use of access-controlled data centers hosted in the United States, encryption of all data in transit, and the encryption of user data both in transit and at rest. We store all personal information securely in the U.S. using third-party vendors who implement industry-standard security measures. Numerace uses some outside parties to host its data and holds those providers to a standard at least as protective of student data as the measures outlined in this policy. Our main cloud provider, Amazon Web Services (AWS), is the largest data hosting company and has leading practices in security standards and personnel to constantly monitor this area.

A link to AWS Privacy Center can be found here.

10 Advertising and Marketing

The Numerace platform complies with all applicable laws and regulations regarding advertising, and specifically advertising on sites designed for and used by children. The Numerace platform does not allow or run personalized ads in its platform, make use of any third party trackers, or otherwise attempt to collect personal information from minors or on content sets as made for children.

The Numerace platform does not allow or display any third party advertising or marketing on its website or within our services.

The Numerace platform does not permit any paid ads that incite children to purchase a product or service or urge parents or others to buy the item.

The Numerace platform does not permit any paid ads that incite parents or others to purchase a third-party product or service.

11 Your Rights and Choices

In most circumstances, providing personal information to us is optional. However, if you choose not to provide personal information that is needed to use some features of our platform, you may be unable to use those features.

We strive to provide you with choices regarding the personal information you provide to us. This section describes mechanisms we provide for you to control certain uses and disclosures of your information.

Updating or correcting your information. Please contact us at the email above to request changes or corrections to your personal information.

Deleting Your personal information. We provide all of our data subjects with the

Right to be Forgotten (also known as the Right to the Deletion of your personal information ), whether or not you reside or are a citizen of a jurisdiction that provides you this right. Please contact us at the email above to request the deletion of your personal information.

Please note, however, that the Right to be Forgotten is not an absolute right. The Right to be Forgotten only applies to the following types of personal information that are held by us at the time of the request:

o personal information that was processed on the basis of consent,

o personal information that was processed on the basis of legitimate interests,

o personal information processed on a basis other than consent or legitimate interests that is no longer required for the purpose for which it was originally collected or processed,

o personal information that was processed unlawfully,

o personal information that must be deleted in order to comply with a legal obligation, or

o personal information of a child.

Third parties. We do not control third parties' collection or use of your information to serve interest-based advertising. However, these third parties may provide you with ways to choose not to have your information collected or used in this way.

For more information about the third parties that collect data through the Services, see the “Information Shared with Third Parties” section above to understand which third parties have access to your personal information through the platform. You can consult their privacy policies to see if they offer additional options for limiting collection.

Personal Information Rights: Most comprehensive consumer privacy laws provide those that they protect certain data protection rights. While the precise rights vary from jurisdiction to jurisdiction, most include all or a number of the following:

The right to confirm - You have the right to confirm whether a controller is processing your personal information.

The right to access/obtain - You have the right to request copies of your personal information. We may charge you a small fee for this service.

The right to correct/rectify - You have the right to request corrections to any personal information you believe is inaccurate and/or incomplete.

The right to be forgotten/deletion - You have the right to request that Company erase certain types of personal information (see Deleting Your personal information above).

The right to restrict processing - You have the right to request that Company restrict the processing of your personal information, under certain conditions.

The right to object to processing - You have the right to object to Company's processing of your personal information, under certain conditions, such as for targeted advertising.

The right to data portability - You have the right to request that Company transfer the personal information that we have collected to another organization, or directly to you, under certain conditions.

We are happy to provide the above rights to all of our users, regardless of their residence or location. If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please send us a request at the email address provided above.

12 Changes to Privacy Policy

Numerace reserves the right to update this Privacy Policy from time to time, so it is always in compliance with the current legal requirements and/or with industry standards or best practices. We will notify users of any significant changes by posting the new Privacy Policy on our website.

13 Data Controller

Curiosity Alliance is the entity responsible for your data. To ask questions or comment about this privacy policy and our privacy practices, you can contact us at:support@numerace.org

15 How to Contact Us

If you have questions or wish to send us comments about this Privacy Policy, please send an email to support@numerace.org, or write us at:

Numerace

1-1280 Laird Blvd,

Mont-Royal, QC, H3P2T2