Multiply Mission
Privacy policy
Summary
Multiply Mission ("Multiply") is a long-multiplication practice game for children in grades 1 to 5. We collect as little as we can:
- Children can play without any account. Their games then stay on the device and never reach us.
- Only parents have accounts, signed in with Google or Apple. A parent may add up to 10 child profiles, each with a name chosen from our list of space names (such as Saturn) and a picture. We don't ask for children's real names, ages or photos.
- A child's game results (the problems, how they went and how long they took) are saved to the parent's account so the parent can see progress on any device.
- No ads, no tracking, no analytics, no in-app purchases, no chat. We never sell data or share it for advertising.
- Data is stored in Canada, in Montréal.
- A parent can delete a child or the whole account from inside the app at any time, and it is deleted at once.
Who we are
Multiply is made in Canada ("we", "us"). We are responsible for the personal information described here.
For any privacy question or request, email support@wehumans.net. We answer within 30 days.
What we collect
When a child plays without an account, we collect nothing. Games are saved only on the device.
When a parent signs in, we collect:
| Information | Where it comes from | Why |
|---|---|---|
| Email address | Google or Apple. Apple may give a private relay address, or none. | To show which account is signed in, and to contact you about your account |
| Name | Google; Apple on the first sign-in only | To show which account is signed in |
| Google or Apple account identifier | Google or Apple | To recognise you next time |
| Sign-in session | Created by us | To keep you signed in for up to 30 days. We store only a scrambled (hashed) copy. |
| Apple access token (Sign in with Apple only) | Apple | To end Multiply's access to your Apple ID when you delete your account, as Apple requires. We keep it encrypted and use it for nothing else. |
For each child profile a parent adds, we collect:
| Information | Where it comes from | Why |
|---|---|---|
| Name, from our list of 10 space names | Picked by the parent from our list (the app suggests one). Nothing is typed, so it can't be the child's real name. | To tell children apart |
| Picture | Chosen by the parent from 10 space pictures | To tell children apart |
| Level | Chosen in the game | To start the child at the right difficulty on any device |
| Game results: date and time, level, the two numbers multiplied, solved or timed out, number of mistakes, time taken | Produced by playing | To show progress to the child and parent, and suggest a level |
When any device talks to our server, our server records the time, the address requested (such as "/children") and the result, for operating and fixing the service. These records don't contain IP addresses, sign-in details or what was sent. To slow down abuse, the server may hold a device's IP address in memory for about a minute; it is never stored.
This website sets no cookies, has no analytics and asks for nothing.
We never collect: children's real names, ages, birthdays, schools, photos, voices or locations; contacts, camera, microphone or calendar; advertising or device identifiers; payment details. The app shows no ads, has no chat or messaging, and contains no analytics, advertising or tracking code from other companies.
How we use it
We use the information above only to:
- let parents sign in, and keep them signed in;
- keep each child's profile, level and game history in the parent's account, and show it on any device the parent signs in on;
- suggest an easier or harder level (the game only offers it; it never changes level by itself);
- run, secure and fix the service, for example spotting abuse or errors in our server records;
- reply when a parent contacts us.
We do not use it for advertising, build profiles of children, sell or rent it, or share it with anyone for their own purposes. We don't send children messages or notifications.
Children's privacy
Multiply is made for children, and this section is our notice to parents under the US Children's Online Privacy Protection Act (COPPA) and Canadian privacy law.
- Children never sign in and are never asked to type anything about themselves. Without a parent's account, a child's games stay on the device and we receive nothing about them.
- Only a parent can create a child profile. The parent signs in with their own Google or Apple account and chooses the child's name (from our list) and picture. By creating a profile, the parent consents to us collecting and keeping that child's profile name, picture, level and game results as described here, for the purposes above.
- A parent gate guards signing in, changing child profiles and deleting the account: the parent types four digits shown as words. It keeps young children out of those screens; it is not proof of age.
- Parents stay in control. A parent can see their child's information in the app at any time, change the name or picture, remove the child (which deletes their profile and games from our server at once), or delete the whole account. A parent can also ask us to do any of this, or to stop collecting their child's information, by contacting us (see "Who we are").
- We disclose children's information to no one except the service provider that hosts our server (see "Where your data is stored"), which may use it only to provide that service to us.
- We collect no more than the game needs. A child doesn't have to share anything more to play.
Where your data is stored, and who else is involved
Account data is stored in Montréal, Canada: our server, database, backups and server records all run on Google Cloud's Montréal region. On their way there, requests pass through Google's network, which may route them through a server outside Canada; nothing is stored there. On the device, game results stay in the app's own storage, and the sign-in session in the iPhone Keychain, the Android Keystore, or (on the web) the browser's storage for our site.
| Company | What it does for Multiply | What it receives |
|---|---|---|
| Google Cloud (including Firebase Hosting) | Hosts our server, database, backups, server records and this website, as our service provider | Everything stored on our server, which it may use only to provide the service to us |
| Google (Sign in with Google) | Lets a parent sign in with a Google account | That the parent signed in to Multiply. No children's information. |
| Apple (Sign in with Apple) | Lets a parent sign in with an Apple ID | That the parent signed in to Multiply; our request to end access when the account is deleted. No children's information. |
Google and Apple handle sign-in under their own privacy policies. The App Store and Google Play also collect information about downloads under their own policies.
We would share information if the law requires it, for example a court order. If Multiply is ever transferred to someone else, this policy would continue to apply to the information collected under it, and we would tell parents first.
How long we keep it, and how to delete it
| Information | Kept until |
|---|---|
| A child's profile and game results on our server | The parent removes the child or deletes the account; deleted at once. |
| The whole account: parent, sign-in identifiers, Apple token, children, games, sessions | The parent deletes the account in the app (Parents, behind the parent gate); deleted at once. With Sign in with Apple, we first ask Apple to end Multiply's access to your Apple ID. |
| Sign-in sessions | Signing out, or 30 days without use |
| Server records (time, address requested, result; no IP addresses) | 30 days |
| Database backups | About 7 days. Deleted information stays in backups until they expire, and is never restored except to recover from a failure. |
| Games on the device | A child's games leave the device when the parent signs out (after they've been saved to the account), removes the child, or deletes the account. Guest games stay until the app is deleted. The device keeps at most the latest 500. |
You can also end Multiply's access from your Google or Apple account settings; that stops future sign-ins, but delete the account in the app (or ask us) to remove what we hold.
Your rights
Wherever you live, you (and, for a child, their parent or guardian) can ask us to:
- tell you what information we hold about you or your child, and give you a copy;
- correct it;
- delete it;
- stop collecting your child's information, by withdrawing consent. The child can still play without an account, with games kept only on the device.
Most of this you can do yourself in the app. Otherwise contact us (see "Who we are"); we may ask you to confirm the request from your signed-in account so we know it's yours. We reply within 30 days and don't charge for it.
In Canada, you may also complain to the Office of the Privacy Commissioner of Canada, and in Quebec to the Commission d'accès à l'information.
In the United States, a parent has the COPPA rights above for their child.
Security
We protect your information with:
- No passwords of our own: Google and Apple handle passwords and two-step sign-in.
- Encryption: all traffic uses HTTPS; Google Cloud encrypts stored data and backups; we additionally encrypt Apple tokens with a key kept apart from the database.
- Short-lived access: a sign-in pass lasts 15 minutes and the session is replaced every time it's used; if a copied session is ever reused, the parent is signed out on every device.
- Separation: each parent can reach only their own children's information; the database isn't reachable from the internet, only from our server.
- Checks on everything we receive, including rejecting game results that couldn't come from real play.
No system is perfectly secure. If a breach puts your information at real risk, we will tell you and the regulators as the law requires.
Changes to this policy
If we change this policy, we'll post the new version here with its date. If a change affects children's information, or uses information in a new way, we'll tell parents in the app first and, where the law requires, ask for consent again.