Privacy Policy

Effective Date: April 1, 2026 | Last Updated: April 1, 2026

MapleMath is a product of GoAI Solutions Inc., a Canadian corporation registered in Ontario. This Privacy Policy describes how we collect, use, disclose, and protect personal information in compliance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. We are committed to protecting the privacy of all our users, including children, parents, and teachers.

1. Definitions

“MapleMath,” “we,” “us,” or “our” refers to GoAI Solutions Inc. operating the MapleMath platform at maplemath.org.
“You” or “User” refers to any person who accesses or uses the Service, including parents, teachers, and students.
“Service” refers to the MapleMath website, web application, and all related features.
“Personal Information” means information about an identifiable individual, as defined under PIPEDA.
“Student Data” means any personal information collected from or about a student user.

2. Information We Collect

2.1 Account Information
When you register, we collect your name (or nickname), email address, username, and password (stored securely using bcrypt hashing — we never store plaintext passwords). Teachers may optionally provide a school name and board.

2.2 Student Information
For student accounts created by parents or teachers, we collect the student’s display name (which may be a nickname), username, grade level, and learning progress data including answers to math questions, scores, XP earned, chapters completed, skills check results, and streak data. Student accounts do not require a personal email address — the system generates internal identifiers.

2.3 Payment Information
Payments are processed securely by Stripe. We do not store credit card numbers, CVVs, or full card details on our servers. We retain only your subscription plan type, subscription status, payment dates, and Stripe customer/subscription identifiers needed to manage your account.

2.4 Usage Data
We collect standard web analytics data to understand how our Service is used and to improve the user experience. This may include pages visited, time on site, browser type, device type, operating system, referring URL, and IP address. IP addresses are not linked to individual student accounts.

2.5 Cookies & Similar Technologies
We use the following types of cookies:

Essential cookies: Required for login sessions, security tokens (nonces), and core site functionality. These cannot be disabled.
Functional cookies: Remember your preferences such as cookie consent choices and display settings.
Analytics cookies: We may use Google Analytics or similar tools to collect aggregate usage statistics. These cookies are optional and can be declined via our cookie consent banner.

We do not use advertising cookies or tracking pixels. You can manage cookie preferences via the cookie consent banner shown on your first visit, or through your browser settings.

2.6 Feedback & Support Data
If you submit bug reports, feedback, or support requests through our platform, we may collect your message content, screenshots, and optional audio or screen recordings that you voluntarily provide. These are used solely to diagnose and resolve issues.

3. How We Use Your Information

We use personal information for the following purposes:

Provide, operate, and personalize the MapleMath learning experience
Track student progress and generate reports for parents and teachers
Process subscription payments and manage billing
Send important account-related notifications (e.g., trial expiry, payment receipts, subscription changes)
Respond to support requests, feedback, and bug reports
Improve our curriculum content and platform based on aggregate, de-identified usage data
Maintain the security and integrity of the Service
Comply with legal obligations

We do not use student data for advertising, marketing, profiling, or behavioural targeting. We do not sell, rent, or trade personal information to third parties under any circumstances.

4. Children’s Privacy

MapleMath is designed for children in Grades 1–9 (approximately ages 6–15). We take children’s privacy seriously and implement the following protections:

Student accounts are created by a parent, teacher, or guardian — not independently by children.
We collect only the minimum information necessary for the educational service (display name, username, grade, learning progress).
Student accounts do not collect personal email addresses. Login is via username and password set by the parent or teacher.
We do not display advertising to students or use their data for marketing.
We do not enable social features, public profiles, chat, or messaging between students.
Parents and teachers can view, modify, or delete their children’s data at any time through their dashboards or by contacting us.

While PIPEDA does not prescribe a specific age of consent, we follow best practices by requiring that all student accounts are created under adult supervision, and the creating adult provides meaningful consent on behalf of the child as required under PIPEDA Principle 4.3.

5. Consent

By creating an account on MapleMath, you consent to the collection and use of information as described in this policy. For student accounts, the parent, teacher, or guardian who creates the account provides consent on the child’s behalf.

Withdrawing Consent: You may withdraw consent at any time by deleting your account through your dashboard or by contacting us. Withdrawing consent may limit or prevent our ability to provide the Service. We will process your withdrawal request promptly and inform you of any consequences.

6. Disclosure of Information

We may share personal information only in the following limited circumstances:

Stripe (Payment Processor): Card details are sent directly from your browser to Stripe and never touch our servers. Stripe processes payments in compliance with PCI-DSS. See Stripe’s Privacy Policy.
Google (Authentication): If you use Google Sign-In, we receive your name and email from Google. We do not share data back with Google. See Google’s Privacy Policy.
Hosting Infrastructure: Our servers are hosted in Canada to keep data within Canadian jurisdiction.
Legal Requirements: We may disclose information if required by law, court order, subpoena, or to protect the rights, property, or safety of our users or the public.

We do not use third-party advertising networks, data brokers, or analytics companies that track individual students. We do not transfer personal information outside of Canada except as described above (Stripe and Google operate under their respective privacy frameworks with adequate safeguards).

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

Active accounts: Data is retained for the duration your account remains active.
Account deletion: Upon request, we will delete your personal information within 30 days, except where retention is required by law.
Financial records: Transaction records are retained for 7 years as required by the Canada Revenue Agency (CRA) for tax and audit purposes.
Anonymized data: De-identified, aggregated learning data may be retained indefinitely for curriculum research and improvement. This data cannot be used to identify any individual.

8. Your Rights Under PIPEDA

Under PIPEDA, you have the following rights regarding your personal information:

Right of Access: Request a copy of the personal information we hold about you or your child.
Right of Correction: Request corrections to inaccurate or incomplete information.
Right of Deletion: Request deletion of your account and all associated personal data.
Right to Withdraw Consent: Withdraw consent for data collection at any time, subject to legal or contractual restrictions.
Right to Challenge Compliance: Challenge our compliance with PIPEDA by contacting our Privacy Officer.
Right to Complain: File a complaint with the Office of the Privacy Commissioner of Canada if you are not satisfied with our response.

To exercise any of these rights, use the “My Data” section in your parent or teacher dashboard, or contact us at contact@goaisolutions.ca. We will respond to access requests within 30 days as required by PIPEDA.

9. Data Security

We implement appropriate technical and organizational safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction. These include:

Encryption in Transit: All connections use SSL/TLS (HTTPS) encryption.
Encryption at Rest: Sensitive data is encrypted in our database where applicable.
Password Security: Passwords are hashed using bcrypt. We never store or transmit plaintext passwords.
Access Controls: Administrative access to personal data is restricted to authorized personnel only.
Payment Security: Credit card information is handled entirely by Stripe (PCI-DSS Level 1 certified) and never stored on our servers.
Regular Updates: We apply security patches and monitor for vulnerabilities regularly.
Server Location: All servers and data are located in Canada.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We encourage you to use strong, unique passwords and keep your login credentials confidential.

10. Third-Party Services

Our Service integrates with the following third-party services, each subject to their own privacy policies:

Stripe — Subscription payment processing
Google — Google Sign-In authentication (optional)

We carefully vet third-party services we integrate with and only work with providers that maintain strong privacy and security standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

We will update the “Last Updated” date at the top of this page.
We will notify registered users via email for material changes.
We will post a prominent notice on our website.

We encourage you to review this policy periodically. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

12. Contact Us

Privacy Officer
GoAI Solutions Inc.
Email: contact@goaisolutions.ca
Website: goaisolutions.ca

We will acknowledge receipt of privacy-related inquiries within 5 business days and provide a substantive response within 30 days.

If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada:
30 Victoria Street, Gatineau, QC K1A 1H3
Toll-free: 1-800-282-1376
Website: www.priv.gc.ca