Legal

Privacy Policy

Effective Date: May 13, 2026

TrueMath, Inc., a Delaware corporation ("TrueMath," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our website, applications, APIs, and related services (collectively, the "Services"). It applies to all users of the Services. If you have a separately signed agreement with TrueMath that addresses how we handle specific data, that agreement controls to the extent it conflicts with this Policy.

Please also review our Terms of Service, which govern your use of the Services.

How TrueMath Processes Your Data

Before describing the categories of personal information we collect, it helps to understand how TrueMath actually processes data, because the architecture matters for privacy.

The Services consist of two layers. The first is a deterministic mathematical computation engine that runs on TrueMath's infrastructure inside Amazon Web Services. The second is a natural language interpretation layer powered by Anthropic's Claude, accessed through Amazon Bedrock. When you submit a request, the interpretation layer converts your natural language into a structured calculation request, and the computation engine executes the calculation.

This split is important because:

• Your inputs and the prompts derived from them pass through Amazon Bedrock to Anthropic's Claude
• Under AWS's published Bedrock terms, your prompts and completions are not used to train any foundation model, model providers (including Anthropic) do not have access to them, and the data stays inside AWS infrastructure during the call
• TrueMath does not train any large language model on your inputs, your outputs, or any content you submit to the Services
• The deterministic computation engine processes your inputs entirely within TrueMath's AWS environment

The current Bedrock data privacy commitments are published at aws.amazon.com/bedrock/security-compliance.

Personal Information We Collect

Information You Provide to Us

• Account Information. When you create an account, we collect your name, email address, login credentials, and, for paid plans, billing and payment information processed by our payment provider.
• Content You Submit. The inputs, prompts, file uploads, methodology descriptions, and other materials you provide when using the Services, along with the calculation outputs and lineage records returned to you. The Terms of Service describe how this Content is owned, used, and protected.
• Communications. Information you provide when you contact us for support, sales inquiries, or other purposes, including the contents of your messages.
• Survey and Event Information. Information you provide when you participate in surveys, events, beta programs, or similar interactions.
• Identity Verification. If we need to verify your identity, the information you provide for that purpose.

Information Collected Automatically

• Log Data. Information your browser or device sends automatically when you use the Services, including IP address, browser type and version, operating system, referring pages, and the date and time of requests.
• Usage Data. Information about how you interact with the Services, including features used, calculations run, pages viewed, and timestamps.
• Device Information. Device identifiers, device type, and similar technical information necessary to deliver the Services.

Cookies and Similar Technologies

The specific technologies set by TrueMath differ between our public marketing site (truemath.ai) and our application (app.truemath.ai).

Marketing site (truemath.ai).

• Google Analytics 4. The marketing site uses Google Analytics 4 to measure traffic and improve the site. GA4 sets first-party cookies (such as _ga and _ga_*) used to distinguish users and sessions for traffic measurement. We do not use GA4 for advertising or for cross-site profiling. You can opt out of Google Analytics across all sites using the Google Analytics Opt-out Browser Add-on.
• Google Fonts. The marketing site loads typography from fonts.googleapis.com and fonts.gstatic.com. Google receives your IP address as part of normal HTTP delivery; no cookies are set by this loader.
• Cloudflare. Cloudflare provides DNS and edge-network services in front of the site. Cloudflare may set a __cf_bm bot-management cookie (lifespan around 30 minutes) for security purposes; this cookie is not used for tracking and is documented in Cloudflare's cookie reference.
• Hosting. The marketing site is served by GitHub Pages. Standard server-side request logs apply.

Application (app.truemath.ai). The application uses cookies and similar technologies only for local browser preferences and authenticated session state (for example, keeping you signed in and remembering UI preferences across visits). The application does not set cross-site tracking cookies, advertising cookies, or third-party analytics cookies, and we do not engage in cross-context behavioral advertising.

Information from Third Parties

We may receive information about you from third parties when you sign in through a third-party identity provider, when you interact with TrueMath on a social platform, or when third parties (such as our service providers) provide us with information needed to deliver the Services.

How We Use Personal Information

We use personal information to:

• Provide, maintain, operate, and secure the Services
• Authenticate users and manage accounts
• Process payments and manage subscriptions
• Communicate with you about the Services, including transactional and operational messages
• Respond to support requests and other inquiries
• Improve, develop, and expand the Services and our platform technology, including the Library and the Domain Builder Assistant, using aggregated and anonymized patterns derived from usage. We do not use the substance of your Content to train any large language model.
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms
• Comply with legal obligations and respond to lawful requests from authorities
• Manage business operations, including, where applicable, evaluating, negotiating, and effecting mergers, acquisitions, financings, or other corporate transactions

Aggregated and De-identified Information

We may aggregate or de-identify personal information so that it can no longer reasonably identify you, and we may use such aggregated or de-identified information for any business purpose without restriction. We do not attempt to re-identify aggregated or de-identified information except as required by law.

Legal Bases for Processing (EEA, UK, and Switzerland)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on the following legal bases:

• Performance of a contract. To provide the Services you have requested under our Terms of Service.
• Legitimate interests. To operate, secure, and improve the Services, to communicate with you about the Services, and to protect TrueMath and our users from fraud and abuse, where these interests are not overridden by your rights.
• Compliance with legal obligations. Where we are required by law to process your personal information.
• Consent. Where we ask for your consent to a specific processing activity, in which case you may withdraw consent at any time.

How We Share Personal Information

We share personal information in the following circumstances:

• Service Providers. With third-party providers who help us operate the Services, including cloud infrastructure (Amazon Web Services), the natural language interpretation layer (Anthropic Claude via Amazon Bedrock), payment processing, customer support, and analytics. These providers are bound by contract to use personal information only for the purposes we direct.
• Account Administrators. If you use the Services through a team or organization account, the administrators of that account may have access to your account information, your usage of the Services, and the Content created within that account.
• Sharing You Initiate. When you share calculation records, lineage, or other Content with third parties through features the Services provide, the recipient will see what you have shared. You control what is shared and with whom.
• Legal Requests. Where required by law, regulation, legal process, or governmental request, or where we believe in good faith that disclosure is necessary to protect our rights, our users, or the public.
• Corporate Transactions. In connection with a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, in which case personal information may be transferred to the successor entity. We will notify you of any such transfer and any choices you may have.
• Affiliates. With our corporate affiliates, who will process the information in a manner consistent with this Policy.
• With Your Consent. For other purposes with your consent.

We do not sell personal information, and we do not share personal information with third parties for cross-context behavioral advertising purposes.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate personal information
• The right to request deletion of your personal information
• The right to data portability
• The right to restrict or object to certain processing
• The right to withdraw consent where processing is based on consent
• The right to opt out of the sale or sharing of personal information (we do not sell or share for cross-context advertising, but you have this right regardless)
• The right to lodge a complaint with a supervisory authority

To exercise these rights, contact us at [email protected]. We will respond consistent with applicable law. We may need to verify your identity before fulfilling certain requests.

California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended, gives you the rights described above. The categories of personal information we collect, the purposes for which we use it, and the categories of recipients with whom we share it are described in the relevant sections of this Policy. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use sensitive personal information for purposes that would trigger the CCPA's right to limit such use. You have the right to be free from discrimination for exercising your CCPA rights.

EEA, UK, and Swiss Residents

If you are located in the EEA, UK, or Switzerland, you have the rights described above under the General Data Protection Regulation (GDPR) or equivalent local law. You may also lodge a complaint with your local data protection supervisory authority. Our legal bases for processing are described in the section above.

International Data Transfers

TrueMath is based in the United States, and the Services are hosted on Amazon Web Services infrastructure in the United States. If you access the Services from outside the United States, your personal information will be transferred to and processed in the United States and other jurisdictions where our service providers operate.

For transfers of personal information from the EEA, UK, or Switzerland to countries that do not have an adequacy decision under applicable law, we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), supplemented by additional measures where required. Customers requiring a Data Processing Addendum that incorporates these safeguards may request one by contacting us at [email protected].

Security

We protect personal information using a combination of organizational, technical, and administrative measures, including:

• Encryption of data in transit (TLS) and at rest
• Authenticated access controls scoped to individual accounts
• Tenant isolation within our multi-tenant architecture
• Audit logging of access to systems and data
• Operating within Amazon Web Services' secure cloud environment

No security control is perfect, and no online service is entirely free of risk. We work continuously to improve our security posture, and we will notify affected users in the event of a security incident as required by applicable law.

Data Retention

We retain personal information for as long as necessary to provide the Services to you, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. Specific retention periods depend on the type of information, the purpose for which it was collected, and applicable legal requirements. When personal information is no longer necessary for these purposes, we delete it or de-identify it.

Children

The Services are intended for professional and business use and are not directed to children. We do not knowingly collect personal information from anyone under 18 years of age. If we become aware that we have collected personal information from someone under 18, we will take steps to delete that information promptly. If you believe we may have collected information from a minor, please contact us at [email protected].

Third-Party Services and Links

The Services may contain links to or interoperate with third-party websites, products, or services that have their own privacy practices. This Policy does not apply to those third parties, and we encourage you to review their privacy notices.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide reasonable advance notice through the Services or by other appropriate means, and we will update the Effective Date at the top of this Policy.

Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, without regard to its conflict-of-laws principles. The dispute resolution provisions in our Terms of Service apply to any dispute relating to this Policy.