Privacy Policy

1. Introduction

Welcome to Summit Maths Academy ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy applies to all information collected through our website (summitmathsacademy.ie) and related services (our "Platform").

2. Information We Collect

We collect personal information that you provide to us, including:

• Account Information: Name, email address, password, school year, and maths level when you register. You may also register using Google OAuth.
• Student Data: Information related to your progress, including mock exam submissions, grades, and interactions on our discussion boards.
• Payment Information: We use Stripe to process payments for our subscriptions (Library, Academy, Platinum). We do not store full credit card details on our servers.
• Usage Data: Information about how you interact with our platform, such as video watch times and live lesson attendance.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Platform (including live lessons, video libraries, and mock grading).
• Process your transactions and send related information via Resend.
• Administer our referral system and calculate rewards.
• Improve our website, services, and educational content.
• Communicate with you for customer service and platform updates.

4. Third-Party Services

We share your information with trusted third-party service providers only as necessary to provide our services:

• Stripe: For secure payment processing.
• Bunny.net: For secure video hosting and streaming.
• Google: For authentication (OAuth) and live lesson capabilities (Google Meet).
• Resend: For sending transactional and account emails.
• Supabase: For database and authentication services.
• Vercel: For hosting the Platform.

Separately, and only where you have accepted analytics and advertising cookies, we share limited usage data with the following providers. These services are not necessary to run the Platform, and we do not use them unless you have given permission:

• Google: For site analytics (Google Analytics).
• Meta: For advertising conversion tracking (Meta Pixel).

One of these goes beyond usage data. When you create an account, and only if you have accepted analytics and advertising cookies, we send Meta a scrambled (hashed) form of your email address alongside the record that a signup took place. Meta compares it against the addresses it already holds for its own users, which is how it can tell whether your signup came from one of our adverts rather than from search or word of mouth. We do not send the address itself, and we send no other detail about you. If you have not accepted analytics and advertising cookies, nothing is sent at all.

5. Age Restrictions

Summit Maths Academy is designed for secondary school students. Users must be 16 years of age or older, or have parental or guardian consent to use the Platform. When signing up, users must declare they meet this requirement. If we learn we have collected personal information from a child under 13 without verifiable parental consent, we will promptly delete that information.

6. Cookies and Tracking

We use essential cookies to keep the platform running securely. With your permission, we also use analytics and advertising cookies to understand how the site is used, to measure our advertising, and to improve your experience. You can manage your cookie preferences at any time through our Cookie Preferences banner.

Where you have given permission, these analytics and advertising cookies are set by the following third-party tools:

• Google Analytics (GA4): Measures how visitors find and use the site, such as which pages are viewed and how long visits last. It may set cookies and process usage data, including your IP address, on Google's behalf.
• Meta Pixel: Measures the effectiveness of our advertising by recording actions such as starting a trial or completing a subscription. It may set cookies and share data about those actions with Meta. When you create an account it also sends a scrambled (hashed) form of your email address, so that Meta can connect the signup to the advert you saw (see section 4).

Vercel Web Analytics. We use this to count visitors and page views. It sets no cookie, stores nothing on your device, and does not identify individual visitors — it produces aggregate totals only, such as how many people viewed a page on a given day. Because nothing is placed on or read from your device, and nothing about you is recorded, it runs whether or not you accept analytics and advertising cookies, in the same way as the signup tallies described below. It is the only third-party tool on the Platform that works this way; every tool listed above is held back until you give permission.

Aggregate counts we keep ourselves. So that we can see which step of the signup form people find difficult, we keep a simple daily tally of how many visitors reach each step: for example, that forty people reached the year-selection step on a given day. These are counts only. They contain no name, no address and no identifier of any kind; we set no cookie and store nothing on your device in order to produce them; and there is no way to work back from a tally to you or to any individual visit. Because nothing about you is recorded, and nothing is kept on your device, these counts are collected whether or not you accept analytics and advertising cookies.

With the single exception of Vercel Web Analytics described above, none of these tools are loaded unless you accept analytics and advertising cookies. If you change your preference, the change applies from your next visit; cookies already set by these tools can be cleared through your browser.

Separately from those tools, we keep our own record of how you found us. When you arrive from one of our adverts or marketing links, the web address carries tags naming the campaign (for example utm_source=facebook). We store those tags in your browser, and if you go on to create an account we save them to it. This tells us how many of our members found us through advertising rather than through search or word of mouth. The campaign tags themselves are our own record, held in our own database, and are not shared with Meta, Google or anyone else. A separate code identifying your individual advert click is treated differently, and is described immediately below.

We store these tags for the duration of your visit whether or not you accept analytics and advertising cookies, in the same way we hold the answers you type into the signup form while you are completing it. Where you have accepted analytics and advertising cookies, we also keep them on your device after that visit ends, so that they still apply if you return another day. If you decline and come back in a later session to sign up, no campaign information is recorded. In either case the tags are discarded after 30 days, and they are never used to build a profile of you or to target advertising.

The site you came from. Alongside those tags we record the name of the website that linked you to us — for example google.com if you found us through a search, and nothing at all if you typed our address in or used a bookmark. We keep only the site's name. We do not keep the address of the page you were on, and we do not keep anything you may have typed into a search box to get here. It is stored, kept and discarded on exactly the same terms as the campaign tags above. We record it for one reason: without it, someone who searched for us by name and someone who came directly are the same entry in our records, and we cannot tell which of the two our advertising produced.

Click identifiers, and what we do with them. When you arrive by clicking one of our adverts, the web address also carries a code identifying that particular click — Google calls this a gclid and Meta an fbclid. It is generated by the advertising platform, not by us, and unlike the campaign tags above it refers to your individual click rather than to the advert in general. We store it on the same terms as those tags: for the visit whether or not you accept cookies, and beyond the visit only if you have accepted them, and in both cases discarded after 30 days.

If you go on to create an account, we send that code back to the advertising platform it came from, together with the date, so that the platform can record that the advert led to a sign-up. If you later buy a subscription, we send it again with the date and the amount paid. We do not send your name, your email address or any other detail about you, and we send nothing at all if you leave without creating an account. We do this because it is the only way to measure honestly whether our advertising is working: the alternative method relies on cookies, which most visitors decline, and so reports only a small and unrepresentative fraction of our members.

We want to be straightforward that this is a genuine sharing of information with Google and Meta, that it is done for the purpose of measuring and improving our advertising, and that those companies may use what we send to improve how their own advertising is targeted. It applies only to people who arrived by clicking an advert and then created an account. If you would prefer we did not do this, email us at hello@summitmathsacademy.ie and we will remove the code from your record.

7. Data Security and Rights

We implement appropriate technical and organisational security measures to protect your personal information. Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete the data we hold about you.

8. Contact Us

If you have any questions or comments about this Privacy Policy or our privacy practices, please contact us via the contact form on our website or reply to our platform emails.