Privacy
Math Trail is a prototype built for the Amazon Developer Hackathon 2026. This page says plainly what it stores about a child and what it does not. It is not legal advice, and it has not been reviewed by a lawyer.
What we store
- A nickname and a grade (4 to 6). No surname, no date of birth, no address, no location, no photo.
- Each answer. What was said or typed, whether it was right, how long it took, how many hints were used, and which kind of mistake it was.
- The explanation a child gives after an answer ("I split it into tens and ones"), as text. A child can skip it.
- Plans. The next step written for the parent, and whether the analyst agent or the plain practice rules chose it.
- The parent's email and the date consent was given. Access to the data uses secret tokens; the server keeps only a one-way hash of each token.
- Model usage records. Token counts, estimated cost and timing of each call to the model. They hold no text from children.
What we do not store
- No voice recordings. Math Trail receives text. If a browser offers speech recognition, the browser's own speech service turns the voice into text; that service belongs to the browser maker and has its own privacy terms. Typing and tapping the keys avoid it.
- No advertising, no analytics trackers, and no cookies set by Math Trail.
- No data is sold or shared for marketing.
What the analyst agent sees
The agent runs on Amazon Bedrock. Per skill it is sent counts (how many right and wrong), the kinds of mistakes, how many answers in a row were right or wrong, the median time per answer, and the skill graph. It is not sent the child's nickname, the questions, the answers, or the explanations a child gave. Whether an answer is right or wrong is decided by code, never by the model.
Parent control
- Practice only works while a parent has given consent. A parent can switch it off at any time in Settings, and every tool then refuses the child.
- A parent can delete a child and everything stored about them in Settings, after a two-step confirmation. Deleting removes sessions, answers, mastery, plans and access tokens. Cost records stay, without the link to the child.
- A parent can ask for the data by writing to the address below.
The public demo
The hosted demo uses one sample child, Kit, shared by everyone who opens the simulation. Please do not type real names or personal details into it. Its dashboard is read-only, and the sample data may be reset at any time.
Contact
Muhammad Zia ul Haq, zia@eziedutech.dev.