Updated: 24 October 2026. This product-specific notice covers the learning service at amymath.online. Purchases through this shop are also covered by the shop privacy notice.
SIA Platinium, registration 40203106117, VAT LV40203106117.
Registered office: Meža prospekts 62–8, Jūrmala, LV-2010, Latvia.
Privacy requests: contact@platinium.tech; general enquiries: info@platinium.tech; telephone +371 2022 0929.
In simple words
We save your chosen login name, language, school grade and answers so that you can learn and see your progress. Use a nickname instead of your full name. Your results are not shown on a public leaderboard. Staff who support the service can access learning records. Ask a parent or guardian for help with an account or purchase. You or your parent can ask us to correct or delete your information.
Accounts, learning and security
AmyMath processes login names, password hashes, account roles, selected courses, language, grade, question count, answers, assessments, learning points and review dates. Email and a verified telephone number are processed where supplied for the relevant account or recovery function. Security logs include login events, timestamps, IP addresses and browser identifiers; the application provides for removal of authentication activity older than 90 days.
The purposes are providing the requested learning account and progress features, support and preventing abuse. Article 6(1)(b) GDPR applies where processing is necessary for a valid service contract, Article 6(1)(f) to proportionate security, and Article 6(1)(c) to statutory records. These grounds do not replace any consent or authorisation required for a child.
Children, parents and schools
AmyMath is aimed at school grades 5–10. Buying a learning package and consenting to optional data processing are separate matters. Where Article 8 GDPR applies because an online service is offered directly to a child and relies on consent, the age threshold depends on the applicable national law; in Latvia it is 13. Below the applicable threshold, parental or guardian authorisation must be obtained and reasonably verified. Schools must establish the controller/processor responsibilities and lawful basis before managed accounts are activated. Contact us before creating an account for a child who cannot provide the required authorisation.
No advertising profile or public personal ranking is part of the reviewed learning service. Automated marking supports learning and is not an official school grade or a solely automated decision with legal or similarly significant effects.
Providers and optional functions
The service uses a JustHost web gateway and the company’s VPS. Requests and account/learning data can be processed outside the EEA; this is not an EEA-only hosting promise. The hosting providers and authorised technical staff receive data needed for operation and support. Ask contact@platinium.tech for the recipients and transfer safeguards relevant to your records. SMS invitations and recovery send the destination number and message to seven.io. Invitation PINs last 48 hours; recovery codes last 10 minutes and reset links 15 minutes. Mollie receives the information needed for a selected purchase; see Mollie’s notice.
Ordinary exercises are marked by the application rather than sent to an AI provider. A separate administrative document feature can send selected passages and references to the configured OpenAI API only when an administrator selects that mode. Child-identifying documents must not be uploaded without the appropriate permission and processing basis.
Cookies and retention
Functional cookies support sign-in, CSRF protection and language. The reviewed sign-in session is limited to one hour; the CSRF cookie can last up to a year. No advertising or usage-analytics script is part of the reviewed application. Accounts and learning records remain while needed for access; deletion is handled administratively on request. Logging out does not delete the account. Invoices and legally required purchase records follow statutory retention periods; backup copies expire through their backup cycle.
Your rights and contact
Subject to the GDPR conditions, you can request access, correction, erasure, restriction, portability and information about recipients; object to processing based on legitimate interests; and withdraw consent for future processing. Account deletion does not automatically erase invoices that must be retained by law. Contact contact@platinium.tech. We normally respond within one month and explain any lawful extension. You may complain to Latvia’s Data State Inspectorate or your competent local authority.