// Trust & Security Report
Photomath LLC (US) / Photomath d.o.o. (Croatia, EEA entity) - subsidiary of Google LLC / Alphabet Inc.
Consumer mobile math-help app (iOS/Android): camera-based problem scanning, step-by-step solution explanations, and a smart calculator, covering elementary math through calculus. Free "Basic" tier plus a paid "Photomath Plus" subscription (monthly/annual). Acquired by Google in June 2023; no separate enterprise, team, or API product line was found.
Certifications held
2
Maturity
Growth
Trains on your data
Yes
Trust center
No
// Certification ledger
Each held certification is backed by a verbatim quote from the vendor's own trust or security page. “Not confirmed” means we could not verify it publicly, not that the vendor lacks it.
Verify on photomath.com“"Photomath d.o.o." (Zagreb, Croatia) is named as the EEA/UK/Switzerland contracting entity in the Terms, and the Privacy Policy enumerates GDPR rights: "Right to be forgotten", "Right to object", "Right to rectification", "Right to restrict processing", "Right to access", "Right to data portability", "Right to data minimization", "Right to be informed".”
Verify on photomath.com“"We will never knowingly collect personal data from children under 13 years of age." For users under 16, the policy requires parental consent before processing personal information.”
> Show 8 unconfirmed / not-held certifications
source: photomath.comNo public evidence: photomath.com has no trust/security center or compliance page, and neither the Privacy Policy nor Terms of Service mention SOC 2. /trust and /security return HTTP 404.
source: photomath.comNo public evidence of ISO 27001 on any Photomath-owned domain. Security section of the Privacy Policy describes only generic controls: "retaining it in a firewalled and secured database with strictly limited and controlled access rights, using encryption" - no certification named.
source: photomath.comNo public evidence. Photomath is a consumer education app with no healthcare use case, BAA offering, or HIPAA mention anywhere on the vendor's site.
source: photomath.comNo public evidence. Subscription billing is handled entirely through the Apple App Store / Google Play Store per the Terms of Service ("Billing occurs through Google Play Store or iOS App Store"), so Photomath itself does not appear to process card data directly.
source: photomath.comNo public evidence found on any Photomath-owned page.
source: photomath.comNo public evidence found on any Photomath-owned page.
source: photomath.comNo public evidence found; not applicable to a consumer education app with no public-sector offering identified.
// Privacy & AI training
Trains on customer data
Yes
Data processing agreement
Not offered
Data region
Primary data controller listed as "Photomath LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043 USA" (Google's Mountain View headquarters address) with "Photomath d.o.o., Strojarska cesta 20, Zagreb, Croatia" as the EEA/UK/Switzerland entity. Privacy Policy states users consent to data being "transferred outside your own country and, where applicable, outside the European Union / European Economic Area" - no specific data-residency guarantee or region-locking is offered.
The Privacy Policy states images and feedback submitted through the app are used "to improve the Service, including its math problem solving capabilities, and to improve our other products and services, such as machine vision technologies." No opt-out mechanism for this training use was found on the vendor's own pages, and no tier-based (free vs. Plus) distinction in training practice is disclosed. The Terms of Service separately grant Photomath a "perpetual, irrevocable, non-exclusive, worldwide, transferable, royalty-free" license to submitted User Content, consistent with the training statement in the Privacy Policy (no contradiction found between the two documents).
// Security controls
Encryption
Privacy Policy states personal data is retained "in a firewalled and secured database with strictly limited and controlled access rights, using encryption," but does not specify in-transit vs. at-rest scope or algorithms, and disclaims any security guarantee ("cannot guarantee the security of personal data during its transmission or its storage").
photomath.comIndependent audits / certifications
None published. No trust center, security page, or compliance report found on any Photomath-owned domain.
photomath.comCorporate ownership / infra
Photomath is a wholly owned subsidiary of Google/Alphabet since June 2023 (EU Commission cleared the acquisition). No evidence was found that Photomath's product itself inherits or advertises Google Cloud's SOC 2 / ISO 27001 certifications - Google's own infrastructure certifications belong to the host, not automatically to every acquired product, so they are not credited to Photomath here.
ec.europa.euChildren's data
"We will never knowingly collect personal data from children under 13 years of age"; parental consent required for under-16 users.
photomath.com// Products & data scope
data: Camera-scanned math problems (images), account/device data, usage analytics
Step-by-step explanations, custom visual aids, basic "how/why" tips. $0 USD.
data: Same data scope as Basic; billed via Apple/Google app stores, so payment card data is not handled directly by Photomath
Same core feature set as Basic per the captured pricing table; $9.99/mo or $69.99/yr. No enterprise, classroom/admin, or API tier was found on the vendor's site.
// What to watch
- No trust center or security page exists on any Photomath-owned domain (/trust and /security both 404); evidence is limited to the Privacy Policy and Terms of Service.
- No SOC 2, ISO 27001, or other formal third-party security certification found; this is graded honestly as held=false rather than assumed, consistent with a consumer app of this size.
- Owned by Google/Alphabet since June 2023, but no vendor-domain evidence was found that Photomath's product inherits Google Cloud's certifications - flagging this explicitly to prevent a host-vs-vendor conflation if reviewed again later.
- AI training on user-submitted images/data is disclosed with no visible opt-out and no free-vs-paid distinction; this should be surfaced to users/buyers as a caveat.
- No Data Processing Agreement (DPA) was found published on the vendor's site, which is unusual for GDPR-facing products and worth re-checking directly with Photomath if a B2B/education use case is being evaluated.
// At a glance
Pricing model
Freemium consumer subscription ($0 Basic / $9.99 monthly or $69.99 annual Plus), billed through Apple App Store or Google Play Store
Self-hostable
No
// How we verified this
Every certification marked HELD is confirmed against a verbatim quote on Photomath LLC (US) / Photomath d.o.o. (Croatia, EEA entity) - subsidiary of Google LLC / Alphabet Inc.'s own trust, security, or privacy pages. We reject certifications claimed only on third-party aggregators, on a cloud host's behalf, or by a similarly named company.
Last verified 2026-07-08. Compliance changes over time. Always confirm directly with the vendor before relying on any certification for a purchasing or compliance decision.
photomath.com