Data controller
Madina Kadyrova (full details in the Legal notice). Contact: contact@mk-math.com.
Data we process
- Account: email and, if you provide it, your name. If you came to the site through a tutor's personal link, we record which tutor invited you.
- Tutor requests: curriculum, language, student's year or age, goal, preferred times, email and comments.
- Chat messages between families and tutors, and lesson bookings (date, time, task description and time zone).
- If you connect Telegram (optional): your Telegram chat ID and language, to send you notifications and receive your replies. You can disconnect it at any time from your account.
- Tutors: profile data, photo, degrees, test result, sexual-offences record certificate and, once enabled, identity verification.
- Minimal technical data needed to run and secure the site, including a log of page errors (page, error message and browser, nothing that identifies you). If you report a problem and allow it, we attach your recent actions on the site (pages opened and buttons tapped, never what you type).
- A technical device identifier (stored in your browser: local storage and a technical cookie), used only for security and fraud prevention, e.g. to detect a tutor reviewing themselves from another account, or trial lessons being used several times with different accounts from the same device or email.
- Files sent in chat (PDFs and photos up to 20 MB), visible only to the conversation participants and the admins.
- Lesson whiteboard content (drawings, formulas and images), saved so the tutor can continue the material in later lessons and both can download it; visible only to the student and tutor of that lesson.
- Tutor reports after each lesson (what was covered, homework, points to watch), sent to the student by email or Telegram, and the reasons given when a lesson did not take place.
- Approximate country, derived from your IP address when you visit, only to show your country's curricula; it is not stored.
- Anonymous visit statistics, without cookies: page viewed, approximate country, device type and referring website. Your IP address is not stored: it is used only at that moment to compute an irreversible daily code that lets us count unique visitors per day; the key for that code changes every day and is erased.
- Aggregated, anonymous visit statistics (Vercel Web Analytics), without cookies and without identifying you.
- If a tutor connects their own calendar (Google, Apple, Outlook or another), we securely store the private link and only the busy time slots (start and end), without event titles, attendees or descriptions, so that those hours are not offered to students. The tutor can disconnect it at any time; the link is erased on disconnecting.
- Emails you send to contact@mk-math.com and our replies, which we keep in our support system so we can answer you and follow up on your request.
Purposes and legal bases
- Providing the service (account, search, requests, chat): performance of a contract, Art. 6(1)(b) GDPR.
- Reviewing the sexual-offences record certificate of tutors who work with minors: legal obligation for tutors based in Spain (Art. 6(1)(c) GDPR and Art. 57 LOPIVI); for others, the tutor's consent when they provide it (Art. 6(1)(a) GDPR).
- Security, fraud prevention and chat moderation (an automatic filter — including an AI check of each message and file before it is sent and of what is written on the shared lesson whiteboard, which is not stored — hides contact details and attempts to move off the platform; admins may review conversations when there is an issue): legitimate interest, Art. 6(1)(f) GDPR.
- Automatic blocking: if the filter detects three attempts to share contact details or arrange lessons or payments outside the platform, the student's account is blocked automatically (Art. 22 GDPR; necessary to perform the contract). You have the right to have a person review the decision, to express your point of view and to contest it by writing to contact@mk-math.com; we reply within 15 days at most.
- Anonymous visit statistics to improve the site: legitimate interest, Art. 6(1)(f) GDPR.
Children
Accounts must be created by adults (18+). Lessons for minors are booked by a parent or legal guardian. Children under 14 may not register (Art. 7 LOPDGDD).
Processors
We use Supabase (database, servers in the EU, Ireland), Vercel (hosting and cookie-free visit statistics), Daily.co (video lessons on the site; not recorded or stored), Resend (sending and receiving email), Google Workspace (the contact@mk-math.com mailbox) Stripe (student payments and tutor payouts; it processes payment details and, for tutors, their identity and bank account) and Anthropic (the “Ask a question” AI assistant: if you use it, your question and the current conversation are sent to Anthropic to generate the answer; we don't store the text, only the number of questions to apply the daily limit; answers are generated by AI and may contain mistakes). Transfers outside the EEA rely on the EU-US Data Privacy Framework or standard contractual clauses. If you connect Telegram, notifications are sent through Telegram, a service you choose, which is also governed by its own privacy policy.
Retention
While your account is active and afterwards for the legal limitation periods. Invoices and their data are kept for 6 years, even if the account is closed (Art. 30 of the Spanish Commercial Code and tax rules). Requests sent without an account are kept for 12 months. Chat files and lesson reports are kept while the conversation or account exists. Support emails are kept while needed to handle your request and afterwards for the legal limitation periods.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability at contact@mk-math.com. To erase your account you can also use the “Delete account” button at the bottom of your dashboard: we email you a code; your name, email, photo and profile are erased, while invoices and payment records are kept for the legal period. You may also complain to the Spanish Data Protection Agency (aepd.es).