Privacy Policy

1 Overview of the Application

MathsCoin is a free educational mobile application designed to strengthen mathematical ability through interactive quizzes, a Spin Wheel, Scratch Card, and Number Guessing mini-games. Users earn virtual Gold Coins as a reward for correct answers and participation.

The App is intended for users aged 13 and above. All coin balances are virtual and hold no monetary value. The App contains no gambling mechanics and no real-money transactions. MathsCoin is supported by in-app advertising displayed through third-party ad networks; the App does not otherwise sell in-app purchases of any kind. Daily earning limits are enforced server-side to maintain platform integrity.

2 Information We Collect

2.1 — Provided by You

• Google Sign-In Data: Display name, email address, and Google User ID are received via Firebase Authentication when you sign in. We never access or store your Google password.
• Support Communications: If you contact us for assistance, any information you voluntarily provide is used solely to resolve your request.

2.2 — Collected Automatically

• Game Activity & Balances: Gold Coin balance, quiz responses, spin history, scratch card and number-guess usage are stored in Firebase Firestore, linked to your User ID.
• Daily Activity Timestamps: Date-based records used exclusively to enforce fair daily limits per feature.
• Referral & Share Counters: A lifetime count of "Share & Earn" actions is maintained to enforce the reward cap.
• Notification Preference: Your opt-in or opt-out status for daily reminders, stored in Firebase and locally via AsyncStorage.
• Local Device Cache: A lightweight coin balance cache stored via AsyncStorage to reduce network calls. Automatically cleared on logout or date change.
• Device & Crash Data: Firebase may collect device type, OS version, and app version for crash reporting and performance monitoring only.
• Advertising Identifiers: To display and measure in-app ads, our advertising partner(s) (e.g., Google AdMob) may collect your device's advertising ID, IP address, general device information, and ad interaction data (impressions, clicks). This data is used to serve ads, cap ad frequency, and measure ad performance.

2.3 — Information We Do Not Collect

• Phone number, postal address, or government-issued identifiers
• GPS, precise location, or geolocation data of any kind
• Camera, microphone, or contact list access
• Payment, banking, or financial account details

Note: our advertising partner(s) may independently use device-level identifiers (such as the advertising ID) to serve and measure ads in accordance with their own privacy policies — see Section 5 and Section 10.

3 How We Use Your Information

Data is used exclusively for the purposes listed above, including supporting the App through in-app advertising. We do not conduct behavioural profiling beyond what is required for standard ad serving described in Sections 5 and 10.

4 Virtual Coin System

Gold Coins are earned through legitimate gameplay only. All reward calculations are performed and verified server-side via Firebase Firestore atomic transactions. Client-side manipulation of coin balances is architecturally prevented.

Daily Earning Limits

• Quiz Questions: 9 per day · 10 coins each
• Spin Wheel: 3 spins per day
• Scratch Card: 3 cards per day
• Number Guess: 3 attempts per day
• Daily Cap: 500 coins maximum

MathsCoin does not involve real-money wagering, gambling, lotteries, or any feature that could constitute a regulated financial activity. All rewards are virtual and non-transferable, and are unrelated to in-app advertising.

5 Data Sharing & Disclosure

We do not sell, rent, or trade your personal information. Data is shared only in the following limited circumstances:

• Google Firebase: Our infrastructure provider for authentication, database, and analytics. Subject to Firebase's Privacy Policy.
• Advertising Partners: We work with third-party ad networks (e.g., Google AdMob) to display in-app ads. These partners may receive advertising identifiers and ad interaction data to serve and measure ads, and process this data under their own privacy policies.
• Legal Compliance: We may disclose information when required by applicable law, regulation, or valid legal process.
• Business Continuity: In the event of a merger, acquisition, or asset transfer, user data may be transferred subject to equivalent privacy protections and advance user notice.

Aside from our advertising partner(s), no analytics reseller, data broker, or marketing partner receives personal data from MathsCoin.

6 Data Retention & Deletion

• User Firestore documents are retained for the duration your account remains active.
• Activity logs are retained for up to 12 months for fraud prevention purposes.
• Local device cache is cleared automatically upon logout or date change.
• Advertising data is retained by our ad partner(s) in accordance with their own retention policies.

Upon a verified account deletion request, all personal data will be permanently removed within 30 days. To request deletion, email us at the address in Section 12 with the subject line: "Account Deletion Request – MathsCoin".

7 Children's Privacy

MathsCoin does not knowingly collect personal information from children under the age of 13. The App is appropriate for users aged 13 and above. If you have reason to believe a child under 13 has registered an account, please contact us immediately and we will promptly delete the account and all associated data without charge or delay.

8 Security Measures

• Firebase Security Rules: Each user may only read and write their own data; cross-user access is prohibited at the database rule level.
• Atomic Transactions: All coin updates use Firestore server-side transactions, eliminating race conditions or double-credit exploitation.
• Field-Level Write Restrictions: Firestore rules enforce strict field validation so clients can only update explicitly permitted fields.
• Deterministic Reward Hashing: Scratch card rewards are computed via a server-side hash; rooted or emulated devices cannot alter reward outcomes.
• OAuth 2.0 Authentication: We never store, transmit, or have access to user passwords.

9 Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request permanent deletion of your account and all associated data.
• Right to Withdraw Consent: Disable push notifications at any time through the App's Settings screen.
• Right to Restriction: Request that we limit processing of your data in certain circumstances.
• Ad Personalisation Choices: You may limit ad tracking or reset your advertising ID through your device's operating system settings (Android Settings → Privacy → Ads).

All requests will be acknowledged and actioned within 30 days of receipt.

10 Third-Party Services

• Google Firebase Authentication — firebase.google.com/support/privacy
• Google Firebase Firestore — Encrypted cloud database storage
• Google Firebase Analytics — Anonymised app performance data
• Google Sign-In (OAuth 2.0) — Secure authentication only
• Google AdMob (or equivalent ad network) — Serves in-app advertisements; may collect the advertising ID, IP address, and ad interaction data. See Google's Ads Policy.

MathsCoin displays advertisements through the third-party ad network(s) listed above. We do not integrate data brokers or marketing platforms beyond what is necessary to serve these ads.

11 Policy Updates

We reserve the right to update this Privacy Policy as the App evolves or as required by applicable law. Material changes will be reflected via an updated "Effective Date" at the top of this document and, where practicable, notified through an in-app notice. Continued use of MathsCoin following any update constitutes acceptance of the revised terms.

We recommend reviewing this policy periodically. Archived versions are available upon request.

12 Contact & Data Requests