Mentoric — Privacy Policy

Last updated: August 19, 2026 · Effective date: August 19, 2026

1. Who We Are

This game and service ("Mentoric," the "Game," the "Service") is operated by Mentoric LLC ("we," "us," "our"), located in Tel Aviv, Israel.

If you have any questions about this Privacy Policy or your information, contact us at:

• Privacy & data requests: [email protected]
• Postal address: Tel Aviv, Israel
• Online: mentoric.io/privacy
• Data Protection Officer / EU–UK Representative (if applicable): Not appointed

This Privacy Policy explains what personal information we collect from and about players, how we use it, who we share it with, and the choices and rights you and your parents or guardians have. It is written to comply with the U.S. Children's Online Privacy Protection Act (COPPA) and its 2025 amendments, the EU and UK General Data Protection Regulation (GDPR/UK GDPR) including child-specific rules and the UK Age Appropriate Design Code ("Children's Code"), Israel's Protection of Privacy Law, and other applicable privacy laws. Where laws differ, we apply the standard most protective of children.

Two surfaces, two sets of practices. This Policy covers both the Game (play.mentoric.io and the Mentoric app, which children use) and our marketing website (mentoric.io — the home, guides, lessons, worksheets, teacher, and contact pages, which are aimed at parents and teachers). The Game contains no advertising technology of any kind. The marketing website uses a measurement tool from Meta so we can tell which of our ads bring visitors, as described in §4.4 and §7. Where this Policy describes different practices for the two, the difference is deliberate.

2. Mentoric Is Designed for Children

Mentoric is an educational math game intended for K–12 learners, including children under the age of 13 (and under 16 in some countries). Because the Game is directed to children, we take extra care:

• We collect the minimum information needed to run the Game and save progress ("data minimization").
• Privacy-protective settings are on by default.
• We do not serve behavioral or targeted advertising to children.
• We do not sell children's personal information or share it for cross-context behavioral advertising.
• We do not use children's personal information to build advertising profiles or for any purpose unrelated to running and improving the Game.
• We do not condition a child's participation in any game activity on disclosing more personal information than is reasonably necessary.

3. Parental Consent

Before a child under the applicable age of consent (13 under COPPA; 13–16 under the GDPR depending on country) creates an account or provides personal information, we require verifiable parental consent from a parent or legal guardian.

How consent works. During sign-up, an account intended for a child must be created or approved by a parent or guardian, who:

1. Reviews this Privacy Policy and our direct notice of what we collect, how we use it, and who we share it with;
2. Confirms they are the parent or guardian and consents to our collection and use of the child's information for the purposes described here; and
3. May choose to consent to core gameplay data collection without consenting to any optional sharing with third parties (we will not share with third parties for non-integral purposes without separate, specific consent).

Anonymous play. Mentoric also supports anonymous play (no email or name), which lets a child use the Game while collecting only the limited technical and gameplay data described below. Anonymous play does not sync progress to a personal account.

Withdrawing consent. A parent may withdraw consent at any time by contacting us at [email protected]. We will stop collecting and using the child's personal information, and may need to close the account because some information is necessary to operate the Game.

4. Information We Collect

We collect only what we need to run the Game, save progress, keep accounts secure, and improve learning. We do not ask children for more personal information than is reasonably necessary.

4.1 Information you give us

We do not require a child's real name, home address, phone number, photograph, or precise location to play.

4.2 Information we collect automatically through gameplay

Some of this information (such as a persistent identifier) is treated as personal information under COPPA and the GDPR even when it is not tied to a real-world name.

4.3 Payment information (future feature)

Mentoric does not currently process payments. When paid features are introduced, payments will be handled by a third-party payment processor (e.g. Stripe). We will not collect or store full payment-card numbers ourselves; the processor handles card data directly under its own privacy terms. We may store a limited transaction record (e.g. that a purchase was made, the amount, and a processor reference) to provide the service, support, and refunds. Because the Game is used by children, any purchase flow will be designed to require a parent or account holder to authorize payment. This Policy will be updated before any payment feature goes live.

4.4 Information collected on our marketing website

Our marketing website (mentoric.io) is intended for parents and teachers rather than for children. Those pages carry the Meta Pixel, a measurement tool provided by Meta Platforms, Inc. (Facebook, Instagram). Where a visitor's browser allows it, the Pixel sets a cookie and sends Meta information about that visit: the page address, the referring page, browser and device type, IP address, and a small number of standard interaction events — that a page was loaded, that the visitor read a page rather than leaving immediately, and that the visitor clicked a link through to the Game. Meta uses this to report how our ads perform and to show Mentoric ads to adults who may be interested.

The Meta Pixel is not present in the Game. It does not run on play.mentoric.io, it is not in the app, it sets no cookie on a child's device, and it never receives learning data, progress data, account identifiers, or anything else about a child's play.

One measurement is reported back, from our server. When a child who arrived from one of our ads solves their first problem, our server tells Meta that the click it sent us led to someone starting to learn. That message carries Meta's own click identifiers from the earlier visit to our website, and nothing else: no name, no account identifier, no IP address, no device or browser information, and nothing about the child's play or progress. It is sent from our server, never from the child's device, and no cookie or tracking script is involved. Those click identifiers are kept in the browser's local storage on the device until they are used. If the visitor declined the cookie banner, or never came from one of our ads, there are no click identifiers and nothing is sent at all.

We do not knowingly collect personal information from children through the marketing website. If you believe a child used those pages and you would like the associated data removed, contact [email protected] and we will make the deletion request to Meta. You can also limit this collection yourself — see §7.

5. How We Use Information

We use the information above only for the following purposes:

• To run the Game — authenticate accounts, save and sync progress, load the correct level/skins/topics.
• To personalize learning — our adaptive engine uses progress and accuracy data to serve problems at the right difficulty, schedule spaced review, and adjust mastery levels. This helps each child learn, not to profile them for advertising.
• To keep accounts and data secure — detect, prevent, and investigate fraud, abuse, cheating, and technical problems.
• To improve the Game — understand which features and lessons work, fix bugs, and develop new educational content (using aggregated or de-identified data wherever possible).
• To support you — respond to questions and parental requests.
• To comply with the law — meet legal obligations and enforce our Terms & Conditions.
• To process payments — only if and when paid features are added (see §4.3).
• To measure our own marketing — understand which ads and pages bring parents and teachers to Mentoric. This happens on our marketing website only (see §4.4), never in the Game and never with children's information.

We do not use children's personal information for targeted advertising, to sell to data brokers, or for any purpose incompatible with the purposes above.

Legal bases (GDPR / UK GDPR). Where the GDPR applies, we rely on: consent (including verifiable parental consent for children below the age of digital consent); performance of a contract (providing the Game you signed up for); our legitimate interests in keeping the Game secure and improving it, balanced against children's rights and only where appropriate for a child-directed service; and legal obligation where we must process data to comply with law.

6. How We Share Information

We do not sell children's personal information, and we do not share it for targeted advertising. We share information only in these limited cases:

• Service providers ("processors") who help us run the Game under contract and may only use the data on our instructions, including:
  • Google Firebase (Authentication, Firestore database, and Storage) — hosting, accounts, and saving game data.
  • Analytics providers (e.g. Google Analytics 4 and, where enabled, PostHog) — to understand product usage. These are configured for a child-directed service, without using the data for advertising.
  • Error monitoring (e.g. Sentry) — to detect and fix crashes.
  • Payment processor (e.g. Stripe) — only when paid features launch, to process transactions.
  • Meta Platforms, Inc. — receives page-view, page-engagement, and link-click events from our marketing website through the Meta Pixel, and one server-to-server message when an advertising click later leads to a first solved problem (both described in §4.4). Meta never receives a child's learning, progress, or account data, and no Meta software runs in the Game.
• Legal and safety reasons — to comply with applicable law, a lawful request, or to protect the rights, safety, and property of players, the public, or us.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, information may be transferred subject to this Policy and applicable law; we will notify parents of any material change.

We require any third party with whom we share children's personal information to maintain confidentiality and security and to use the data only for the limited purpose for which it was shared. A current list of the third parties that receive children's personal information is available on request at [email protected].

7. Cookies and Similar Technologies

We use cookies, local storage, and similar technologies that are strictly necessary to operate the Game — for example, to keep a player logged in, remember language and tutorial state, and maintain a session. We do not use advertising or cross-site tracking cookies in the children's experience. Because these technologies are essential to the Game, disabling them may prevent the Game from working.

On our marketing website (mentoric.io), the Meta Pixel described in §4.4 sets its own cookie (commonly named _fbp) and may read a Meta cookie already present in your browser, for advertising measurement. These are not necessary to read the site. If you are visiting from Europe or the UK, we ask first: a banner appears on your first visit, nothing is requested from Meta and no cookie is set until you accept, and choosing "No thanks" means the Pixel never loads at all. Your choice is remembered on your device; clearing your browser's site data for mentoric.io makes us ask again. Everywhere else the Pixel loads on page load, and you can still refuse it by blocking or clearing cookies in your browser, by using its tracking-protection or private-browsing mode, or through Meta's own ad settings at facebook.com/adpreferences. Declining also means the server-side measurement in §4.4 never happens, because it depends on the same identifiers. None of this affects the Game, which sets no such cookies in the first place.

8. International Data Transfers

We and our service providers may process information in countries other than where you live, including the United States and Israel. Where we transfer personal data out of the EEA, the UK, or another region with transfer restrictions, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (or the UK Addendum/IDTA) and rely on providers with appropriate certifications. You may request a copy of the relevant safeguards at [email protected].

9. Data Retention

We keep children's personal information only as long as reasonably necessary to provide the Game and the purposes described in this Policy, and we do not retain it indefinitely.

When the retention period ends, we delete, anonymize, or aggregate the information so it can no longer be linked to a child. Our full data-retention schedule is summarized here and updated as our practices change.

10. How We Protect Information

We maintain a written information security program with administrative, technical, and physical safeguards appropriate to the sensitivity of children's data. These include encryption of data in transit, access controls and authentication, least-privilege access for our team, secured cloud infrastructure (Firebase/Google Cloud), monitoring and logging, and regular review of our security measures. No system is perfectly secure, but we work to protect personal information against loss, misuse, and unauthorized access, and we maintain procedures to address any data security incident in line with applicable law.

11. Your Rights and Parental Choices

Parents and guardians of a child user have the right to:

• Review the personal information we have collected from their child;
• Request deletion of their child's personal information;
• Refuse to permit further collection or use of their child's information (note this may require us to close the account); and
• Withdraw consent at any time.

Depending on where you live, you (or your child, where age-appropriate) may also have rights under the GDPR/UK GDPR, Israeli law, and U.S. state privacy laws, including the right to access, correct, delete, restrict or object to processing, data portability, and to withdraw consent. We do not use automated decision-making that produces legal or similarly significant effects on a child.

How to exercise rights. Contact [email protected] with your request. To protect children, we will take reasonable steps to verify that the requester is the child's parent/guardian or the account holder before acting. We respond within the timeframes required by applicable law (generally within 30 days; we may extend where the law allows and will tell you if so). These requests are free unless a request is excessive or repetitive.

Complaints. If you are in the EEA or UK and believe we have mishandled your data, you may complain to your local data protection authority (in the UK, the Information Commissioner's Office). In Israel, you may contact the Privacy Protection Authority. We'd appreciate the chance to address your concern first at [email protected].

12. No Advertising or Sale of Children's Data

We do not display third-party advertising to children, do not sell children's personal information, and do not share it for cross-context behavioral advertising or to build advertising profiles. We do not knowingly allow third parties to collect personal information from children through the Game for these purposes.

We do advertise Mentoric itself — for example on Facebook and Instagram — to reach parents and teachers. That advertising is measured on our marketing website only, using the Meta Pixel described in §4.4. No advertising technology runs inside the Game. The single server-side measurement described in §4.4 reports that an ad click eventually produced a learner; it carries no information about the child, and no child's personal information is used to target or build any advertisement or advertising profile.

13. Changes to This Policy

We may update this Privacy Policy as the Game evolves (for example, when paid features launch) or as the law changes. If we make a material change to how we collect, use, or share children's personal information, we will obtain renewed parental consent where required and provide notice (for example, by email to the account holder and/or a prominent notice in the Game) before the change takes effect. The "Last updated" date at the top shows the latest version.

14. Contact Us

Mentoric LLC
Tel Aviv, Israel
Privacy & data requests: [email protected]
General contact: [email protected]