Privacy Policy

Last updated: 2026-06-11

1. Who We Are

Outlean AB is a limited company registered in Sweden (Aktiebolag). We operate the educational game Math with Magic. As a company established in the EU, we act as a data controller under the General Data Protection Regulation (GDPR).

Privacy contact: hello@mathwithmagic.com

2. What Data We Collect and Why

We collect only the minimum personal data necessary to provide our service. The game is designed for children ages 6–8, but children play without accounts and provide no personal data. All account data is provided by a parent or guardian.

Data	Purpose	Legal Basis (GDPR)	Stored by
Apple user identifier	Account access and identification (via Sign in with Apple)	Art. 6(1)(b) — Contract	Supabase
Session token	Authentication after login	Art. 6(1)(b) — Contract	Browser localStorage (persists across sessions to keep you signed in)
Game progress data	Cross-device save, gameplay continuity	Art. 6(1)(b) — Contract	Supabase
Client error logs	Automatically detect and fix bugs (error message, stack trace, URL path, browser version, screen resolution)	Not personal data (anonymous, tab-scoped session token, not linkable to any person)	Supabase
Anonymous gameplay telemetry	Understand where the game is confusing or unfair (adventure completion, encounter difficulty, where players give up, parent-gate success rate) so we can improve it	Not personal data (random per-install identifier, cleared when the app is deleted, never linked to your account or any other identifier)	Supabase

About the per-install identifier. The first time you launch the app, the game generates a random identifier for that installation. This identifier is stored on the device, used only to group anonymous gameplay records that come from the same install, and cleared when the app is uninstalled. It is never linked to your Apple Sign In, your account, your device identifier, or any advertising identifier. It is not sent to any third party.

3. What We Do NOT Collect

No personal data from children — children play without accounts.
No device fingerprints; no identifiers shared with or readable by other apps.
No advertising identifiers (e.g. Facebook Pixel, Google Ads).
No cross-site tracking of any kind.
No data is sold, rented, or shared with third parties for commercial purposes.
No behavioural advertising — there are no advertisements in the game.

4. Children's Privacy (COPPA)

Math with Magic is designed for children ages 6–8. However, children play the game without creating accounts. We do not knowingly collect personal information from children under the age of 13.

Accounts are for parents or guardians only. You must be 18 or older to create an account.
Children play anonymously — they are never prompted for personal information.
There are no behavioural advertisements in the game.

If you believe a child has provided personal information to us, please contact us at hello@mathwithmagic.com and we will promptly delete it.

5. Third-Party Data Processors

We use the following third-party processors, each bound by a GDPR-compliant data processing agreement:

Supabase — authentication and database hosting. We use an EU region to keep data within the European Economic Area. Supabase's handling of this data is governed by its own privacy policy.
Apple — Sign in with Apple identity provider. Apple issues a stable identifier we use to authenticate you. Apple's handling of this data is governed by its own privacy policy.

None of these processors sell or re-share your data.

Purchases. Premium content is sold through Apple's App Store. Apple is the seller of record and processes all payments — Outlean AB never receives or stores your card details, billing address, or any other payment information. Apple's handling of your purchase data is governed by Apple's own privacy policy.

6. Cookies and Browser Storage

We do not use tracking cookies. Specifically:

Supabase stores a session token in your device's local storage. This token persists across sessions so you remain signed in and can continue your saved game.
No third-party analytics or advertising cookies are used.

7. Data Retention

Account data (Apple identifier, game progress): Retained until you delete your account.
Client error logs: May be retained indefinitely. Because the session tokens are tab-scoped and cleared on tab close, they cannot be linked to any person and are not considered personal data under GDPR.
Anonymous gameplay telemetry: May be retained indefinitely. Records use a random per-install identifier that is never linked to your account or to any other identifier, so they are not considered personal data under GDPR.
Purchase records: We do not store entitlement, transaction, or payment data on our servers. Your premium unlock is determined on your device from Apple's own purchase records, and Apple retains those records under its own retention policy.

8. No Data Sales

We do not sell, rent, or trade your personal data. There is nothing to opt out of because we do not engage in data sales or sharing for commercial purposes.

9. Your Rights Under GDPR

If you are located in the EU/EEA (or the United Kingdom), you have the following rights regarding your personal data:

Right of access: Request a copy of the data we hold about you.
Right to rectification: Ask us to correct inaccurate data.
Right to erasure: Delete your account at any time via the in-app account settings. This removes all personal data associated with your account.
Right to data portability: Request your data in a machine-readable format (JSON/CSV) by emailing hello@mathwithmagic.com.
Right to lodge a complaint: You may lodge a complaint with the Swedish data protection authority, IMY (Integritetsskyddsmyndigheten), at imy.se, or with your local supervisory authority.

To exercise any of these rights, email us at hello@mathwithmagic.com. We will respond within 30 days as required by GDPR.

10. Account Deletion

You can delete your account directly from the account settings within the game. Deleting your account will permanently remove:

Your Sign in with Apple identifier (Supabase auth record)
All game progress data (adventure completion, companion levels)

Client error logs and anonymous gameplay telemetry are not deleted because they were never linked to your account. Client error logs use tab-scoped session tokens that cannot be linked back to you. Anonymous gameplay telemetry uses a random per-install identifier that is cleared when the app is deleted and was never associated with your Apple Sign In or any other identifier. Neither dataset constitutes personal data under GDPR.

11. Changes to This Policy

We may update this Privacy Policy when our practices change. Material changes will be communicated before they take effect. The "Last updated" date at the top of this document reflects when the policy was last revised.

12. Contact Us

For any privacy-related questions or to exercise your rights, contact us at:
hello@mathwithmagic.com

Outlean AB, Sweden