Photomath
Partial disclosure · High confidence
Dealbreaker flag
- Uses your content to train or improve its models with no opt-out disclosed in the policy.
Photomath spells out a full set of GDPR-style data-subject rights and a clear no-sale commitment. On a legitimate-interest basis with no opt-out, it also uses captured images and feedback to improve its service and affiliate machine vision technologies. Retention periods are not specified, and there is no breach-notification clause.
What the policy says
Trains on inputs without opt-out
The policy says images and feedback are used to improve the service and affiliate machine vision technologies, relying on legitimate interest, with no named opt-out from this use. D1.1 scores zero and an adverse training reservation is recorded.
Full data-subject rights
Section 8 enumerates the right to be forgotten, object, rectification, access, and data portability with contact mechanisms, which earns full credit across all five D2 indicators.
Does not sell personal data
The policy states it does not sell, lease, rent or otherwise disclose personal data and repeats this for California residents, earning full credit on the sell-or-share indicator with no dealbreaker on sales.
Vague retention and silent breach response
Retention is described only as as long as it is necessary with no day count, shorter AI-log retention is not addressed, and there is no breach-notification clause, which caps the retention and security domains.
Details
- Category
- Productivity
- Modalities
- text
- Processes biometrics
- No
- Policy last updated
- 2023-10-31
- Region scored
- Global / US-default
- Assessed
- 2026-06-20
Every grade scores what an app discloses about its data governance in its public privacy policy and terms, not its verified behaviour. A strong policy can hide weak practice, and a thin policy can hide good practice.