Last updated June 14, 2026

Security Policy

Curious Maths and Science Tuition uses role-based access controls and server-side authorization to protect LMS data.

Reporting Issues

Report suspected security issues, unauthorized access, or data exposure immediately through our contact page at https://curious-maths.vercel.app/contact. Include the affected page, account, time, and a short description.

Responsible Disclosure

Do not access, modify, download, or disclose data that does not belong to you. Give us reasonable time to investigate and fix any reported issue before public disclosure.

Application Controls

Protected pages require authentication, staff and admin actions require role checks, files are stored privately, sensitive mutations are rate-limited, and public database access is denied by policy.

Account Safety

Users should keep their Google account secure, avoid sharing devices or sessions, and report lost access or suspicious activity promptly.