Privacy policy

Last updated: 23 October 2026

Who we are

The Shimsy Maths app and this website are run by Shimsy Maths Ltd, a company registered in England and Wales (company number 17467830), with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. For the personal information described on this page, which is what you choose to send us, the sale records Google Play and the App Store pass to us, and the connection details our host handles, we are the data controller. Cloudflare, Inc. hosts this website and our server and processes those connection details on our behalf.

You can contact us about privacy, including our data protection officer, at privacy@shimsymaths.com.

What stays on your device

Everything you do in the app is stored only on your phone or tablet:

• your answers, scores, mistakes and starred topics;
• papers you're partway through;
• your course, level, display and reminder settings;
• which courses you've unlocked.

We can't see any of it. There's no account to create and no sign-in. The only things the app ever sends us are described under Weekly Challenge and Reporting a question below.

What the app doesn't do

• It shows no advertising.
• It includes no analytics, crash-reporting or tracking tools.
• It doesn't use advertising identifiers or track you across other apps or websites.
• It doesn't share your progress with anyone, including schools or parents.
• It doesn't ask for your name, email address, age or location.

Weekly Challenge

The Weekly Challenge question comes from our server at api.shimsymaths.com, which runs on Cloudflare. When you answer, the app sends only whether you got it right. It doesn't send your answer, your name or any ID.

The server keeps two totals for each week, how many people answered and how many got it right, so it can show the share who got it right. It stores nothing about you and no IP address. Everything travels over HTTPS. Nothing is sent unless you open the Weekly Challenge, or turn on its notification. The app then asks the server up to once a day whether a new challenge is up (on iPhone and iPad, when iOS allows it), and that request sends nothing about you. The two totals are kept for as long as that week's challenge is shown in the app.

Reporting a question

If you think a question is wrong, you can tap Something wrong? and pick one of four reasons. The app sends that to the same server, with the question it's about, the app's version number and, from version 1.1.1, whether it's the Android or iPhone app. There's no ID and no box to type in.

If the reason you pick is that your answer should have been marked right, the report also includes the answer you entered, but only if you entered it with the app's maths keyboard, its answer boxes or by choosing an option. Anything typed on your device's own keyboard is never sent.

The server keeps a count of each report. It stores nothing about who sent it, and no IP address or time. Nothing is sent unless you pick a reason. If you're offline, the report waits on your device and is sent the next time you open the app. A waiting report is never included in a backup. We keep a report's count until the question has been checked and any fix has reached the app, then clear it.

Purchases

Courses are bought through Google Play on Android and through the App Store on iPhone and iPad. Google or Apple processes the payment under its own terms and privacy policy (Google's, Apple's), and we never see your card or payment details.

To check which courses you own, the app asks Google Play or the App Store on your device. That check goes to Google or Apple, not to us. Google gives us limited information about each sale, such as an order number, the course bought, the price, the date and the country, so that we can handle refunds and keep our accounts. Apple's sales reports show the course, the price, the date and the country or region, and nothing about who bought it. We don't use any of this to identify or contact you. We keep it for as long as UK tax and company law require, which is a legal obligation on us.

Google, Apple and Cloudflare can process the sale records and connection details described on this page outside the UK, including in the United States. Where that happens it is under the safeguards UK data protection law allows for international transfers, such as an adequacy decision or the UK's approved transfer agreement.

Backups

If you choose to export a backup from Settings, the app saves a file wherever you pick. The file stays under your control and is never uploaded by us.

If your device's own backup is switched on, it may include the app's data: your Google account backup on Android, your iCloud or computer backup on iPhone and iPad. You control that in your device settings. The courses you've unlocked are always restored from Google Play or the App Store, not from a backup.

If you contact us

If you email us from the app, the email ends with the app's version, your device's system version and its model, to help us look into problems. You can delete them before sending.

If you email us, we use your email address and message only to reply and to fix any problem you report. The legal basis is our legitimate interest in answering you. We keep support emails for up to 24 months after the conversation ends, then delete them, unless we need them to deal with a refund or a complaint.

Children

Shimsy Maths is made for students, including children under 13. Because the app collects no personal information, it collects none from children either. If a child emails us, we use their message only to reply. A parent can ask us to delete it at any time.

Google Play's parental controls and Family Link, and Apple's Ask to Buy and Screen Time, let parents approve or block purchases.

This website and our server

This website uses no cookies, no analytics and no third-party fonts or scripts. The website and the server the app talks to are both hosted on Cloudflare. Like most web hosts, Cloudflare processes the IP address of each browser and phone that connects, so that it can reply and protect both from abuse, as described in Cloudflare's privacy policy. We rely on our legitimate interest in running a working, secure website and server for this, and we never see a list of who connected.

Your rights

Under UK data protection law, you can ask us for a copy of any personal information we hold about you. You can also ask us to correct or delete it, to restrict or object to how we use it, or to pass it to you or to someone else in a usable format. Email privacy@shimsymaths.com and we'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Changes to this policy

If the app ever starts handling information differently, we'll update this page before the change reaches the app, and change the date at the top.