Privacy Policy

Socrates — Math Learning App

Effective date: March 23, 2026

Socrates ("the App") is developed by Vladi Moros ("we", "us", or "our"). This Privacy Policy explains how we collect, use, and protect information when you use the App. Because our target audience includes children, we are committed to complying with the Google Play Families policy, the US Children's Online Privacy Protection Act (COPPA), and the EU General Data Protection Regulation (GDPR) as they apply to children's data.

1. Information We Collect

Account information. When you sign up we collect your phone number for authentication via one-time SMS codes. During onboarding you may provide your name, gender, school grade, and learning goal to personalize the experience. Name and gender are optional.

Learning data. The App records your conversation history with the AI tutor, answers to math exercises, skill mastery progress, hint usage, and session summaries. This data is used to adapt difficulty, track your progress, and generate a learning profile (e.g., learning style, common mistake types, strengths, and gaps).

Photos. You may use your camera or photo library to upload images of math problems for the AI tutor to analyze. Images are compressed on-device before transmission and are used solely to provide tutoring responses.

Voice notes. The App allows you to send voice notes to the AI tutor. Voice recordings are processed to understand your questions and provide tutoring responses. Voice data is not used for any purpose other than delivering the tutoring service.

Analytics & crash data. We use Datadog to collect crash reports, HTTP request performance data, and session replays on the mobile app. Sensitive text inputs are masked in session replays. No other analytics services are used.

What we do NOT collect. We do not collect email addresses, passwords, precise location, contacts, or any data beyond what is described above.

2. How We Use Information

• To authenticate your identity via SMS one-time codes and secure your account.
• To personalize the learning experience using your name, grade, and learning goal.
• To provide adaptive math tutoring, track skill mastery, and generate learning profiles.
• To process photos and voice notes you send to the AI tutor.
• To monitor app stability, diagnose crashes, and improve performance via Datadog.

We do not sell, rent, or share personal information with third parties for marketing purposes.

3. Children's Privacy

Our App is designed for users of multiple age groups, including children. We take the following measures to protect children's privacy:

• Age-appropriate content. All content in the App that could be seen by children is appropriate for them. The App is an educational math tutor and contains no violent, sexual, or otherwise inappropriate material.
• Minimal data collection. We collect only the minimum data necessary to provide the service. We do not collect more data from children than is reasonably necessary.
• No advertising. The App does not display any advertisements.
• COPPA compliance. We comply with the US Children's Online Privacy Protection Act. We do not knowingly collect personal information from children under 13 without verifiable parental consent where required. Parents or guardians may contact us to review, delete, or refuse further collection of their child's data.
• GDPR compliance. For users in the European Economic Area, we process children's data in accordance with the EU General Data Protection Regulation. Where consent is required for data processing of a child's information, we obtain it from a parent or guardian as required by applicable law.
• APIs, SDKs, and third-party compliance. All APIs, SDKs, and third-party services integrated into the App comply with applicable laws and regulations relating to children, including COPPA and GDPR.

4. Third-Party Services

The App uses the following third-party services:

• SMS.ru — delivers one-time SMS verification codes for authentication.
• DeepSeek / OpenAI — provides the AI language model that powers the math tutor. Conversation content, photos, and voice notes are sent to the model provider to generate tutoring responses.
• Datadog — collects crash reports, performance metrics, and session replays on the mobile app for stability monitoring. Sensitive inputs are masked.

These services process data on our behalf and are bound by their respective privacy policies. We ensure all third-party services comply with applicable children's privacy regulations.

5. Data Storage & Security

Authentication tokens are stored on your device using Flutter Secure Storage (encrypted, platform-native keychain/keystore). Server-side data is stored in a PostgreSQL database with access controls. One-time passcodes are hashed with bcrypt before storage and are never stored in plain text. Refresh tokens are hashed with SHA-256 before storage.

While we implement industry-standard security measures, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention & Deletion

We retain your data for as long as your account is active or as needed to provide the service. One-time verification codes expire after 3 minutes and are deleted after successful use or 5 failed attempts. You may request deletion of your account and all associated data at any time by contacting us. Upon receiving a verified deletion request, we will delete your personal data within 30 days.

7. Parental Rights

Parents and guardians have the right to:

• Review the personal information we have collected from their child.
• Request deletion of their child's personal information.
• Refuse further collection or use of their child's information.

To exercise any of these rights, please contact us using the information below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify users through the App or other appropriate means. Continued use of the App after changes become effective constitutes acceptance of the revised policy.

9. Contact Us