Privacy Policy
Last updated: 9 October 2026
Who we are
Math with Haziq is a tutoring service run by Haziq Nadeem, based in Madrid, Spain. It includes live lessons, the website mathwithhaziq.com and this app, app.mathwithhaziq.com. Haziq Nadeem is the data controller for the personal data described here. For anything about your data, email mathwithhaziq@gmail.com.
What we collect, and why
| What | Examples | Why | Legal basis (GDPR) |
|---|---|---|---|
| Account | Name, email, password (stored only as a secure hash), time zone | To sign you in and show times in your zone | Contract |
| Learning activity | Your answers, time per question, confidence, mistakes, practice progress, vocabulary reviews | To adapt practice to you and show your progress | Contract |
| Diagnostic test | Answers, exam date, goal. If you take it without signing in, it is not linked to your name | To find your level and build a plan | Contract / steps before a contract |
| Homework | Homework set for you, what you submit (text, photos, PDFs), marks and feedback | To set, collect and mark homework | Contract |
| Lessons and syllabus | Lesson dates, topics covered, your tutor's notes, next steps | So every lesson builds on the last | Contract |
| Class hours and payments | Class times, hours used, payments (amount and date). We never see or store card details | To keep track of paid and used hours | Contract; legal obligation (tax records) |
| WhatsApp reminders (optional) | Phone number of the student or parent, name, the date you agreed, messages sent | To send class and homework reminders | Consent, which you can withdraw at any time |
| Notifications (optional) | A technical address for your device's browser notifications | To send reminders to your device | Consent (your browser asks you) |
We do not sell your data, show adverts in the app, or use advertising trackers.
Children
Many of our students are under 18. In Spain, children under 14 need a parent or guardian to agree to the use of their data, and we ask the parent or guardian for this when lessons start. Parents can see their child's progress, and can ask us at any time what we hold and to correct or delete it.
Who else handles the data
We use a small number of trusted providers to run the service. They process data only on our instructions:
| Provider | What for | Where |
|---|---|---|
| Supabase (on Amazon Web Services) | Database, sign-in and file storage | Singapore |
| Vercel | Runs the app | Singapore (served worldwide) |
| Meta (WhatsApp Business) | Sending WhatsApp reminders, only if you turned them on | Meta's servers |
| The tutor's calendar (class times) and lesson video links (Google Meet) | Google's servers | |
| Desmos | The graphing calculator inside practice questions (loaded by your browser) | Desmos's servers |
| YouTube (privacy-enhanced mode) | Short videos inside some lessons | Google's servers |
| Apple / Google / Mozilla | Delivering browser notifications to your device | Their servers |
| Cloudflare | Hosting the website mathwithhaziq.com | Worldwide |
Some providers are outside the European Economic Area. Where data leaves the EEA, it is protected by the European Commission's Standard Contractual Clauses in each provider's data-processing terms.
How we keep it safe
- Everything travels over encrypted connections (HTTPS) and is encrypted where it's stored.
- Each student can only ever see their own data. This is enforced inside the database itself, and tested automatically whenever anything changes.
- Homework and notes are kept in private storage and opened only through short-lived links.
- Only the tutor's account can see all students, and access can be revoked at any time.
- Backups are kept so data isn't lost, and are stored securely.
How long we keep it
- While you're a student, and for 12 months after your last lesson, so you can come back and pick up where you left off. After that we delete it or make it anonymous.
- Diagnostic tests taken without an account: 12 months.
- Payment records: as long as Spanish tax law requires.
- WhatsApp numbers: until you turn reminders off or ask us to delete them.
Your rights
You (or your parent or guardian) can ask us to see, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent (for example, turn WhatsApp reminders off in Settings). Email mathwithhaziq@gmail.com and we'll reply within one month. If you're unhappy with how we handle your data, you can complain to the Spanish data-protection authority, the Agencia Española de Protección de Datos.
Cookies
The app uses only the cookies needed to keep you signed in. It uses no tracking or advertising cookies, and loads its fonts from its own servers.
Changes
If we change this policy, we'll update the date above, and tell students in the app if the change is important.