Privacy
Effective November 8, 2026 · Version 2
Math of Me is made by Overreach LLC ("we"). It shows the distance between the life you have and the life you want. This page explains, in plain words, what happens to what you enter. It is written to meet the GDPR, the UK GDPR, the CCPA/CPRA and the Data Protection Act of Trinidad and Tobago.
1. Using Math of Me without an account
Your income, the items you price, your spending log, your plans and your display settings are saved in your browser or app on your device. Nothing is sent to us. Clearing your browser's site data, or using Your data → Delete everything, removes it.
2. Using Math of Me with an account
If you sign in (with a link we email you, no password), we store:
| What | Why | Lawful basis | Kept until |
|---|---|---|---|
| Your email address | To sign you in and send the link | Contract (providing the account) | You delete your account |
| Your Math of Me data, as one record | So it syncs between your devices | Contract | You delete your account |
| Your plan (free or member) and renewal date | To unlock member features | Contract | You delete your account |
| A short summary of your four review numbers | To send the monthly review you asked for | Consent | You unsubscribe or delete your account |
We can't read your record in any useful way without you: it's protected by database rules that let only your signed-in session read or change it. We don't look at individual accounts except to fix a problem you ask us to fix.
3. Emails you ask for
There are two lists, and you choose each one separately with an unticked box: the monthly review (members only) and founding news about membership. After you tick a box we send one confirmation email; nothing else is sent until you tap the link in it. We keep a record of what you agreed to, the wording you saw, and when, because the law asks us to be able to show it. Every email has an unsubscribe link that works in one tap, and your email client's unsubscribe button works too. Unconfirmed sign-ups are deleted after 30 days.
4. Payments
Membership is paid through Stripe. Stripe collects your card details directly; we never see or store card numbers. Stripe tells us your email, a customer reference, that you paid, and when the year ends, which is all we need to switch membership on. Payment records are kept for seven years because tax law requires it, even after you delete your account.
5. Who processes data for us
| Processor | What they do | Where |
|---|---|---|
| Supabase | Database and sign-in links | Our project is hosted in the region named in our data region note below |
| Stripe | Card payments and subscription billing | United States, with its own EU safeguards |
| Resend | Sending the emails above | United States |
| Our web host and content network | Serving the site; standard server logs (IP address, time, page) kept for up to 30 days for security | Worldwide edge, logs in the United States |
| Google Fonts | Serving the typefaces; Google receives your IP address when it does | Worldwide |
Data region. Our database is hosted in the European Union (Frankfurt). Where a processor is outside the EU or UK, transfers rely on the European Commission's Standard Contractual Clauses or, for US companies, the EU–US Data Privacy Framework. Data is encrypted in transit and at rest.
We have data processing agreements with each processor. We don't share information with anyone else except when the law requires it.
6. Security and abuse prevention
Connections use TLS. Each person's record is isolated by row-level rules. To stop abuse of the sign-up form we keep a one-way hash of the IP address for one day; the address itself is not stored. If a breach ever affects you, we'll tell you and the relevant authority within 72 hours of learning of it.
7. Your rights
Wherever you live, you can:
- See and take your data. Display → Your data → Download gives you everything as a JSON file you can open or import elsewhere.
- Correct it. Everything is editable in the app.
- Delete it. Your data → Delete everything erases your device copy, your account record, your profile and your sign-in. It's immediate and we can't undo it.
- Withdraw consent. Tap unsubscribe in any email, or untick the box in the app.
- Object or restrict. Email us and we'll stop or pause processing while we look at it.
- Complain. In the EU or UK you can go to your data protection authority; in Trinidad and Tobago, to the Office of the Information Commissioner; in California, you have the rights in the CCPA/CPRA, and we don't sell or share personal information, so there is nothing to opt out of.
Requests go to privacy@mathofme.com. We answer within 30 days and don't charge for it. We never treat you differently for using these rights.
8. Cookies and local storage
We use no advertising or analytics cookies. Your browser's local storage holds your own numbers and, if you sign in, your session. That's it.
9. Children
Math of Me is for people 16 and older in the EU and UK, and 13 and older elsewhere. We don't knowingly collect information from anyone younger. If you think a child has given us an email address, write to us and we'll delete it.
10. Changes
If this policy changes in a way that matters, we'll update the date and version above and tell account holders by email before it takes effect.
11. Contact
Overreach LLC · privacy@mathofme.com