Skip to content
Language: English
Sign in
Menu

Privacy policy

Updated

At a glance

Dyscalculia.io ("we", "us") provides a free online dyscalculia screening test and a paid web program of number-sense exercises. The operator is based in Türkiye. For any privacy question, write to [email protected].

  • The free test runs in your browser and needs no account. Your answers are not sent to us unless you create an account.
  • We do not sell or rent personal data, we do not show advertisements and we do not use advertising or cross-site tracking.
  • We do not ask for a child's name, email, photo or contact details.
  • You can delete your account and its data yourself, from the parent area of the dashboard.

The free test: nothing leaves your browser

The screening test runs entirely in your browser. Your answers and the resulting profile are kept in your browser's session storage and are not sent to our servers unless you create an account. Closing the tab clears them.

Data we collect when you create an account

If you create an account to use the program, we process:

  • Account data: email address, the name you enter (optional) and, if you use Google sign-in, the basic profile Google shares (name, email).
  • Test result: the five skill scores and the age group you selected, if you took the test before creating the account.
  • Program data: levels played, stars, accuracy, session dates and duration, used to adapt the exercises and show your progress.
  • Parent area settings: the daily goal, the daily time limit and the age world you choose.
  • Subscription status: plan, status and renewal date received from our payment provider. We never receive or store card details.
  • How you found us: the referring website or search engine, campaign tags in the link (utm parameters), whether you arrived from an ad (only the ad network's name, not the click identifier), the page you first landed on and the pages you viewed before signing up. Your browser keeps this in its own storage on our site and it is saved to your account when you sign up, so we can see which channels bring people to the program.
  • Technical data needed to run the service, such as sign-in timestamps, time zone and error logs.

What we do not collect

  • Photos, contacts, location, microphone or camera access.
  • Voice recordings — the exercises do not record audio.
  • Card or bank details. Creem handles payment and we only receive the subscription status.
  • Advertising identifiers or data for cross-site or cross-app tracking.

Why we use your data

  • To provide the program you signed up for, choose the starting level and adapt the difficulty (performance of a contract).
  • To show progress in the parent area and apply the daily goal and time limit you set (performance of a contract).
  • To manage your subscription and billing (performance of a contract, legal obligations).
  • To keep the service secure, prevent abuse and fix errors (legitimate interests).
  • To understand in aggregate which pages, channels and steps help people (legitimate interests, and consent for analytics cookies).
  • To respond to requests and comply with the law (legal obligations).

Children

Dyscalculia.io is an educational practice tool that children use, but accounts are for adults: a parent or carer creates the account and lets a child play inside it, or an adult uses it for themselves. We do not ask for a child's name, email, photo or contact details, we do not knowingly create accounts for children, and we never use children's data for profiling or advertising. The parent area, including purchases, is behind a parent check so a child cannot reach it with one tap.

United States (COPPA): we do not knowingly collect personal information from children under 13. European Economic Area and United Kingdom: children's play data is processed on the parent's or carer's account to provide the program they chose. If you believe a child has created an account or given us personal information, contact us and we will delete it.

Parents and carers can at any time review the child's progress in the parent area, ask us for a copy of the stored data, and delete the account and all its data.

Service providers

We use a small number of processors who act on our instructions:

  • Google Firebase (Google LLC) — sign-in, database and server functions, hosted in the United States.
  • Google Analytics (Google LLC) — aggregate site measurement; see "Cookies and similar storage".
  • Creem — our merchant of record. Creem processes your payment, handles taxes and sends receipts under its own privacy policy.
  • Our hosting provider, to serve the website. It does not receive your account or program data.

Emails

We only send emails you trigger, such as a password reset link. Creem sends payment receipts and subscription notices. We do not send marketing emails, and we never share your email address with advertisers.

International transfers

The operator is based in Türkiye and some processors store data in the United States or the European Union. Where the law requires it, transfers rely on appropriate safeguards such as the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep data

  • Account, program and parent area data: while your account exists. When you delete your account we delete it within 30 days.
  • Analytics data: up to 14 months, in aggregate form.
  • Error and server logs: up to 90 days.
  • Payment and tax records: kept by Creem, and by us where the law requires, even after the account is deleted.

Security

All traffic between your browser and our servers is encrypted with TLS. Data at rest is encrypted by our providers, and access to production systems is limited to a small number of authorised people using two-factor authentication. No method of transmission is completely secure, but we work to protect your data and will tell you if a breach affects it.

Your rights

Depending on where you live — for example under the GDPR, the UK GDPR, California's CCPA/CPRA, Brazil's LGPD or Canada's PIPEDA — you can ask to access, correct, delete or export your data, object to or restrict certain processing, and withdraw consent at any time without affecting earlier processing. We do not sell or share personal information as those laws define it.

You can delete your account yourself in the parent area of the dashboard. For any other request, write to [email protected] with the subject "Privacy request" from the email address of your account. You can also complain to your local data protection authority.

Cookies and similar storage

We use your browser's storage for things the site needs: remembering your language, keeping your test result during the session, keeping you signed in and remembering how you first arrived on the site (see above). We use Google Analytics to understand in aggregate which pages and steps help people. Its cookies are only set if you accept analytics; if you decline, no analytics cookies are set and Google receives only cookieless, aggregated signals (for example that a page was viewed) without an identifier for you.

Not a medical service

Dyscalculia.io is educational software, not a medical device. The test is a screening and does not diagnose dyscalculia or any other condition, and the program does not treat or cure anything. For an assessment, consult a qualified professional.

Changes

If we change this policy, we update the date at the top and, for significant changes, tell signed-in users before the change takes effect.