Privacy

Privacy Policy

Last updated: August 29, 2026

This privacy policy describes how the Numea Math application (hereafter "the application") collects, uses and protects user data. It applies to all versions of the application, available on Google Play and the App Store.

This policy is written to comply with the General Data Protection Regulation (GDPR) applicable in the European Union, as well as the requirements of Google Play (Data Safety) and Apple (App Privacy). It also takes into account the main rights recognized by similar laws outside the EU (see section 1a below). Lire cette page en français.

1. Data Controller

1a. Geographic Scope of This Policy

As Numea Math is available in several countries, this policy applies to all users of the application, regardless of their place of residence. The GDPR serves as the primary reference framework for this document, as it is the most protective regime among those that concern us. We also comply with applicable laws in other jurisdictions, in particular:

• California (United States) — the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA) grant you rights similar to those under the GDPR (access, deletion, opt-out of the sale of data). We do not sell or share your personal data for advertising purposes — this policy therefore applies in the same way to California residents.
• Other jurisdictions — if your country has a specific data protection law, you may exercise your rights by contacting us at the address listed in section 1; we will handle your request in accordance with whichever is more protective between the GDPR and your local legislation.

2. Data We Collect

We only collect the data necessary for the application to function and to be improved.

2.1 Account data (if you choose to sign in) — the application remains fully usable without an account, in guest mode:

• your email address;
• your name, if you sign in via a Google account;
• a unique user identifier generated by Firebase Authentication.

2.2 Subscription and purchase data:

• your subscription status (active or not, expiration date);
• if you use a promo code, the code and the timestamp of its use;
• the transactions themselves are entirely handled by Google Play or the App Store — we never have access to your banking details.

2.3 Technical and diagnostic data:

• Firebase Crashlytics: crash reports (technical information, device model, OS version);
• Firebase Analytics: usage data (features used, quizzes completed, in-app interactions).

2.4 Duel data (multiplayer mode) — if you use the duel-with-a-friend feature:

• your in-app display name is visible to the person you're playing against for the duration of the match;
• the content of the match (questions, answers, scores) is temporarily stored in the Firebase database (Firestore) for the duration of the duel;
• a Firebase identifier (anonymous if you're not signed into an account) is used only to distinguish the two players during the match.

Joining a duel requires a 6-character code that you choose to share yourself with the person of your choice — no matchmaking with strangers is offered at this time.

3. Why We Collect This Data

Only to operate the application's features (account, subscription, duels with friends), ensure its technical stability, and understand general usage in order to improve it. We never use your data for resale, advertising profiling, or commercial solicitation.

4. Legal Basis for Processing (GDPR)

• Performance of a contract for account and subscription features (Article 6.1.b);
• Legitimate interest for technical stability and improvement of the application (Article 6.1.f);
• Consent, where required (sign-in via a third-party account).

5. Data Recipients

Provider	Role	Data involved
Google Firebase (Google LLC)	Authentication, database, analytics, crash reports	Account, subscription, usage, diagnostics
Google Play Billing / Apple (StoreKit)	In-app purchase processing	Purchase history (handled by the store)

If you use duel mode, your display name and score are also visible to the other player for the duration of the match — this is the only case where data is shared with another user rather than with a technical provider. We do not sell or share your data with third parties for commercial or advertising purposes.

6. International Transfers

The Firebase services we use are operated by Google, which may process data on servers located outside the European Union (notably in the United States), governed by the European Commission's standard contractual clauses.

7. Data Retention Period

• Account data: for as long as the account is active, then deleted within a reasonable time.
• Diagnostic data (Crashlytics): ~90 days (Firebase default policy).
• Aggregated usage data (Analytics): ~14 months (Firebase default policy).
• Duel data: kept for the duration of the match; a duel that no one joins is deleted if its creator cancels it, otherwise finished matches currently remain stored with no automatic cleanup — an automatic deletion policy is planned.

8. Your Rights

Under the GDPR, you have the rights to access, rectification, erasure, portability, objection, and withdrawal of consent. If you reside in California, the CCPA/CPRA grants you equivalent rights, including the right to know what data is collected and the right to opt out of its sale — we do not sell any data, so this right is already respected by default. To exercise any of these rights, contact us at the address listed in section 1. You may also file a complaint with the French data protection authority, the CNIL (www.cnil.fr), or the competent authority in your own country.

9. Deleting Your Account and Data

If you are signed in with Google or an email account, you can delete your account yourself, directly in the app: Profile → your account → Delete my account. This immediately and permanently deletes your authentication account and associated subscription data (Firestore). This action cannot be undone.

Your local progress (level, statistics, training history) is stored only on your device and is not tied to your account: it is not automatically deleted when the account is deleted. You can erase it separately by uninstalling the app, or via your device settings.

You may also contact us at numea.math.contact@gmail.com for any deletion request you cannot carry out yourself (for example if you no longer have access to the app). Your request will then be processed within a reasonable time, except where a longer legal retention obligation applies.

10. Minors

Numea Math is not specifically designed or marketed for users under the age of 13. If you are under 13 (or the applicable digital age of consent in your country), you should only use the application with the consent and under the supervision of a parent or legal guardian.

11. Data Security

We implement reasonable technical measures to protect your data, including encryption in transit (HTTPS/TLS) via the Firebase infrastructure.

12. Changes to This Policy

We may update this policy to reflect changes in the application or in applicable regulations. The date of the last update appears at the top of this document.

13. Contact

For any questions: numea.math.contact@gmail.com