legal.privacy
Privacy Policy
Last updated 7 October 2026
1. Who we are
This policy explains how Mathora (“we”, “us”) handles personal information when you use Mathora, the web app for calculations with units, including its dashboard, editor, sharing and live collaboration features.
Contact: support@mathora.app.
2. Information we collect
- Account details. Your email address and a password. Passwords are never stored in readable form; our authentication provider keeps only a salted hash. You may also add a display name and an avatar colour, and upload or keep an avatar image.
- Google sign-in. If you choose to sign in with Google, we receive your email address, name and profile photo from Google.
- Your projects. The projects and folders you create, including their titles, formulas, values, units, notes, canvas layout and settings, together with sharing settings and whether a project is in the trash or starred.
- Activity. When you last opened each project, and the email addresses and roles you enter when sharing a project.
- Live collaboration. While a project is open with other people, those with access can see your display name, avatar colour, pointer position on the canvas, the items you have selected or are editing, and your access level.
- Technical data. Session cookies that keep you signed in (see our Cookie Policy), and the IP address, browser and request details that our hosting and infrastructure providers record to operate and secure the service.
- Data stored on your device. Display preferences and, if you use Mathora without an account, a copy of your guest project. This stays in your browser’s local storage and is not sent to us unless you sign in and save it.
- Messages. Anything you send us by email, such as a support request or a privacy request.
3. How we use information
- To create and run your account, and to save, sync and open your projects on any device.
- To let you share projects and collaborate, and to show other people only what your access allows.
- To send service messages, such as sign-up confirmation, password reset, and notices that a project has been shared with you.
- To keep the service secure, detect abuse, and fix faults.
- To answer your questions and handle privacy requests.
- To meet legal obligations and enforce our terms.
We do not sell your personal information, and we do not use it for targeted advertising. We do not use advertising trackers. We use Vercel Web Analytics to count page views and visits in aggregate, and Vercel Speed Insights to measure how fast pages load; neither uses cookies, and neither builds profiles of individual visitors or follow you across other sites.
4. Legal bases (UK and EEA users)
Where UK or EU data protection law applies, we rely on: performance of a contract (running your account and the features you use); legitimate interests (keeping the service secure and reliable, and preventing abuse, where these do not override your rights); consent (for anything that needs it, which you can withdraw at any time); and legal obligation.
6. Where your data is stored
Our database is hosted on Supabase's managed cloud infrastructure. Some providers may process data in other countries. Where data leaves the UK or EEA, we use recognised safeguards, such as the UK or EU standard contractual clauses or an adequacy decision, as the law requires.
7. How long we keep information
| Information | Kept for |
|---|---|
| Account and profile details | While your account exists. |
| Projects and folders | Until you delete them. Items in the trash stay there until you empty it, then are removed permanently. |
| Sharing invitations | Until the project is deleted, or the invitation is removed. |
| Backups | Up to 7 days after deletion, after which they are overwritten. |
| Support messages | As long as needed to answer you and keep records of our responses. |
When you ask us to delete your account, we delete your personal information within 30 days, except where we must keep it for legal reasons.
8. Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is inaccurate. You can edit your display name and avatar in your profile.
- Delete your personal information.
- Export a copy of your projects. Use Settings → Download backup in the dashboard to save all your projects and folders as a file.
- Restrict or object to certain processing.
- Withdraw consent where we rely on it.
- Complain to your data protection authority. In the UK this is the Information Commissioner’s Office (ico.org.uk).
To use any of these rights, email support@mathora.app from the address on your account. We will respond within one month, and may ask you to verify your identity first. There is no charge unless a request is clearly unfounded or excessive.
9. How we protect information
Connections to Mathora use HTTPS. Passwords are stored as salted hashes. Each project is protected by database rules that allow access only to its owner and the people it has been shared with. We limit staff access to personal information to what they need. No system is completely secure, so please use a strong, unique password and keep it private. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as the law requires.
10. Children
Mathora is not intended for anyone under 16 (or the minimum age in your country, if higher). If you believe a child has given us personal information, email us and we will delete it.
12. Changes to this policy
We may update this policy. For significant changes we will tell you by email or in the app before they take effect. The “Last updated” date at the top shows when it last changed.
13. Contact us
Questions or requests about this policy: support@mathora.app.