Your child's work stays your child's

• No account. No sign-up, no email, no password. Profiles live on the device.
• No ads, no tracking. There is no advertising and no analytics or tracking code in the app. None.
• The work stays on the device. Progress, levels, and every handwritten page are stored on the device itself, so you can review them. They are not stored on our servers.
• Handwriting leaves the device only to be graded. When your child submits work, an image of the handwritten page is sent for grading and the feedback comes back. The image itself is never kept: it is handled in memory, never written to disk and never written to a log. To write the feedback, the app then sends what was read from the page back to the server, as text, with the question. It goes the same way: handled in memory and never stored.
• Anonymous learning counts, no data about your child. So the app can improve, we keep numbers about the material itself: which skill was practised, whether the answer was right, and for which year group. They carry no names, no device identifiers and no text written by the child, so they cannot be traced back to any child. We learn from the population, never from the child.
• A scrambled code for fair use, not an identity. So that one device cannot use up everyone's grading, the server tells devices apart by a code made from a random number the app creates when it is installed. The code is scrambled with a secret key and changes every month. It recognises one installation of the app for one month and nothing else: it cannot be traced back to your child, and a new month gives a new code. It is used only for usage limits and to count how many devices use the app each day, and it is kept only as long as that month's limits and the server's short-lived logs need it.
• Registering interest on the website. On the Try it page parents can register interest. We keep only the answers themselves (children's age ranges, how many, why, how the child would write, where you heard of us, and an optional comment) and the day. No name and no IP address is kept. An email address is kept only if you give one and tick that we may contact you about Next Level Math; it is never passed to anyone else. The answers are stored with Upstash in Europe and delete themselves within six months. The code you receive is not stored with your answers. If you choose Android, you join our testing group on Google Groups and the test on Google Play with your own Google account. Google runs both under its own terms; we see the account's email address in the group's member list and use it only to run the test.
• What the AI provider does. The grading is done by Claude, made by Anthropic. Anthropic does not use the data to train AI models and deletes it automatically within 30 days. Content its safety systems flag as misuse may be kept for up to two years.
• Who is responsible. Björn Orri Guðmundsson, who makes Next Level Math, is the controller for this processing. Write to personuvernd@naestastig.app with any question or request.
• Withdrawing consent and deleting data. In the app, Settings > Admin > Withdraw consent stops marking at once. Deleting a child's profile in Settings, or deleting the app, removes everything stored on the device. There is nothing about your child on our servers to delete; the monthly code expires on its own.

For the skeptical parent: a technical appendix

• On iPad and iPhone, input is captured with Apple's PencilKit; on Android, the app draws the strokes itself. All app data lives in on-device storage inside the app's own container.
• Grading requests go from the app to our server, which forwards the page image to Anthropic's API in memory and returns the verdict. The image is never written to disk. What the server does keep is anonymous learning counts: skill, right or wrong, year group, and week. Nothing in them links to a child or a device, neither a name nor an identifier. For usage limits the server also keeps the monthly scrambled code described above, how much grading it used, and each day's list of codes by platform (iPad, iPhone, Android tablet, Android phone), read from each request and not stored, to count devices. None of this carries a name or anything the child wrote.
• If your child joins a teacher's class (optional, using a class code), the server stores that seat's progress: the seat label the teacher chose, year group, level, and how many problems were solved. Pupils' names never reach the server; the teacher matches seat to name on their own device. A teacher can delete the class, and the data goes with it.
• The app contains no third-party SDKs: no analytics, no crash-reporting trackers, no ad frameworks, no social embeds.
• There is no login system, hence no password or email database to breach.
• The website you are reading sets no cookies and runs no analytics. If you email us, we see your email address; apart from the interest form above, that is the entire data flow.
• Questions? Email personuvernd@naestastig.app and the developer answers personally.

This page also serves as the privacy notice for the website itself. The only thing the website collects is the interest form described above.