Privacy Policy
1. Who we are
Lisbon Math is operated by Descobrilança Unipessoal LDA, NIPC 516940503, R. 2 da Matinha, 5D, 1950-326 Lisboa, Portugal. We are the data controller for the personal data described here. For anything about your data, write to info@lisbonmath.one.
2. You can use Lisbon Math without an account
Browsing the site, opening cards and answering them, and chatting with the assistant need no account. An account is only needed if a parent wants to save a child's progress over time.
3. What we collect
| Data | Details |
|---|---|
| Parent account | Name, email address and a hash of your password, held by our authentication provider (Supabase). If you sign in with Google, we receive your email address and name from your Google profile instead of a password. |
| Child profiles | The name and colour a parent types in. Nothing else — no age, no school, no contact details. |
| Answers | For each attempt: the problem id, the level, whether the answer was right or wrong, and the time. |
| Assistant messages | The text you send to the assistant, its replies, and a random session id stored in your browser. |
| Contact form | Your name, email address and the message you write. |
| Site statistics | Event name, page path, UTM campaign tags and a random session id. No IP address is stored and no cookie is used for this. |
| Analytics cookies | Google Analytics (Google Ireland Limited) places the cookies _ga and _ga_* on every visit to measure our audience. |
| Advertising cookies | The Meta Pixel (Meta Platforms Ireland Limited) places the cookie _fbp on every visit to measure and deliver our advertising. See the cookie policy. |
4. Why, and on what legal basis
| Purpose | Basis (GDPR Art. 6) |
|---|---|
| Creating your account and saving progress | Performance of a contract |
| Audience measurement and advertising (Google Analytics, Meta Pixel) | Google Analytics and Meta Pixel load on every visit. Google Ireland Limited places the cookies _ga and _ga_*, and Meta Platforms Ireland Limited places the cookie _fbp. The legal basis for this processing is being reviewed and this section will be updated. |
| Site security and anonymous visit statistics | Legitimate interest |
| Answering your message from the contact form | Handling your request |
| Answering your questions in the assistant | Handling your request |
5. Who processes your data
| Recipient | Role |
|---|---|
| Lovable (Lovable Labs Incorporated) | Hosting of the application |
| Supabase | Database and authentication: accounts, child profiles, answers, assistant messages, contact-form records |
| Lovable email service | Queues and delivers the emails sent from the contact form and authentication emails. Messages are sent from the Lovable-managed sending subdomain notify.lisbonmath.one; the visible sender address is noreply@notify.lisbonmath.one. |
| Lovable AI Gateway | Passes your assistant messages to the language model |
| Google (Gemini model via the gateway) | Generates the assistant's replies. Google also handles sign-in with Google; Google Ireland Limited provides Google Analytics for audience measurement |
| Meta Platforms Ireland Limited | Meta Pixel, for audience measurement and advertising; loads on every visit |
Assistant conversations and children's data are never sent to advertising platforms. We do not sell or rent personal data.
6. Transfers outside the EEA
Some of these providers may process data outside the European Economic Area — this includes Google and Meta, which may transfer analytics and advertising data outside the EEA. Where that happens, it is covered by the European Commission's Standard Contractual Clauses (SCC).
7. How long we keep it
| Data | Retention |
|---|---|
| Account, child profiles and answers | Until you delete your account |
| Assistant conversations | 90 days |
| Anonymous site statistics | 24 months |
| Contact-form emails | 12 months |
8. Children
Only an adult (18+) may create an account. A child's name and colour are entered by the parent, and the parent can delete them at any time from the dashboard. We do not show advertising to children, do not build profiles of children, and never use children's data for marketing.
9. Your rights
You have the right to access, correct, delete, restrict and port your data, to object to processing, and to withdraw consent at any time. In the dashboard, "Download my data" gives you a JSON copy of your account, children and answers, and "Delete my account" removes everything permanently. For anything else, write to info@lisbonmath.one.
You may also complain to the Portuguese supervisory authority, CNPD — Comissão Nacional de Proteção de Dados, Lisboa.
Telegram Mini App
When the app is opened in Telegram, we receive the Telegram user ID, first name and username from Telegram to create the account. The learner's first name and a colour are entered in the app. No email is collected and no emails are sent to Telegram accounts. This data can be deleted on request via the contact details above.
10. Changes to this policy
We update this page when the app changes. The date below always shows the current version.