Privacy notice

Schools: the school decides how MathsMission is used with its pupils, so the school is the data controller and MathsMission acts as its processor. We provide a data processing agreement on request.

Families: when a parent or carer sets up a home account, MathsMission is the data controller. The parent gives permission on behalf of their child.

For each child: first name, optional surname, year group, a login code, chosen avatar and practice results (questions answered, accuracy, response times, XP, streaks and awards).

For teachers and parents: name, email address and, for schools, the school name and billing contact details.

For payments: billing name, email and payment details, handled by our payment provider. We never see or store full card numbers.

We do not collect children's email addresses, dates of birth, photographs or location, and there is no chat, messaging or advertising in MathsMission.

To create accounts and sign people in, to run practice missions and choose suitable times tables, to show progress to the child, their teacher and their parent, to keep the service secure and working, and to take payment for subscriptions.

For schools our lawful basis is the performance of our contract with the school and the school's public task. For families it is the performance of our contract with the parent.

Only the suppliers needed to run the service: our website and database hosting provider, and our payment provider for subscriptions and invoices. We never sell data or share it for advertising. Data is stored in the UK or European Economic Area where possible; where a supplier processes data elsewhere, appropriate safeguards are in place.

School data is kept while the school has an active account. Family data is kept while the subscription is active. After an account is closed we delete pupil data within 90 days, unless the school asks us to keep it for the current academic year. Inactive accounts are reviewed and deleted after 12 months.

All traffic is encrypted. Access to pupil records is restricted by role, so teachers only see their own school and parents only see their own children. Children sign in with a short code rather than an email and password, and no readable pupil password is stored.

You can ask for a copy of the data we hold, ask us to correct or delete it, or object to how we use it. School requests should go through the school in the first instance, as the school controls its pupil records. We respond within one month.

Email us at hello@mathsmission.app with any privacy question, including data requests and school data processing agreements. You can also complain to the UK Information Commissioner's Office.

There is a shorter child-friendly version of this notice.