Matheia · matimenti
Privacy Policy
Last updated: May 2025
1. Data Controller
The controller of your personal data is matimenti (operating the Matheia platform). Contact: privacy@matheia.app.
2. Personal Data We Collect
We collect: account data (first name, last name, email address, encrypted password); profile data (phone number, preferred language, timezone, sender display name); usage data (login timestamps, IP address, browser and device type); student data entered by tutors (names, contact details, billing information, session notes, uploaded files); payment data (card details are processed directly by Stripe — Matheia stores only transaction status and Stripe account identifiers).
3. Purposes and Legal Bases
We process your data to: provide and operate the platform (contract performance, Art. 6(1)(b) GDPR); maintain account security (legitimate interests, Art. 6(1)(f) GDPR); send service notifications (contract performance, Art. 6(1)(b) GDPR); send marketing communications if opted in (consent, Art. 6(1)(a) GDPR); comply with legal obligations such as accounting and tax law (legal obligation, Art. 6(1)(c) GDPR).
4. Data Recipients
We share data only where necessary: Stripe Inc. (payment processing); Google LLC (Calendar and Drive integrations, where connected by you); our hosting and infrastructure provider; and configured platform invoicing providers where required for Matheia billing. We do not sell, rent, or otherwise disclose personal data to third parties for their own use.
5. International Data Transfers
Some third-party providers are located outside the EEA. Where personal data is transferred to third countries (including the United States), transfers are protected by appropriate safeguards: Standard Contractual Clauses approved by the European Commission, or transfers to countries covered by an adequacy decision.
6. Data Retention
Account data is retained for the duration of your account plus a 30-day grace period after deletion to allow recovery. Financial records are retained for 5 years from the end of the accounting year, in accordance with Polish accounting law (Ustawa o rachunkowości).
7. Your Rights
Under the GDPR you have the right to: access a copy of your data (Art. 15); rectification of inaccurate data (Art. 16); erasure where the data is no longer necessary (Art. 17); restriction of processing (Art. 18); data portability (Art. 20); object to processing based on legitimate interests (Art. 21); withdraw consent at any time without affecting prior processing. To exercise these rights, contact privacy@matheia.app.
8. Cookies
Matheia uses strictly necessary session cookies for authentication and security. No consent is required for these cookies. We do not use advertising, tracking, or third-party analytics cookies.
9. Security
matimenti implements appropriate technical and organisational measures to protect personal data, including encrypted data transmission (HTTPS), password hashing, and access controls.
10. Children
Matheia accounts are intended for users aged 16 and over. Where a tutor registers a student under 16, the tutor is responsible for obtaining appropriate parental or guardian consent before entering that student's personal data.
11. Changes to This Policy
We may update this Privacy Policy at any time. Material changes will be communicated by email or by a notice within the platform. The current version is always available at this page.
12. Contact and Complaints
For privacy questions or to exercise your rights: privacy@matheia.app. You may also lodge a complaint with the Polish Data Protection Authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl.