Privacy information

Last updated: 15 October 2026

Who is responsible?

Louise Canham is responsible for the personal information processed for IB Math Momentum.

Address: Adi-Dassler-Gasse 2, 9073 Klagenfurt am Wörthersee, Austria
Email: louise@ibmathmomentum.com

This notice explains how information is used when you visit the website, contact me, express interest in the pilot or use a pilot account.

Visiting the website

The website and prototype are hosted by Render in Frankfurt. Delivering pages and protecting the service involves processing technical connection information. Access and error logging are enabled. Application access and error logs available in the Render dashboard are retained for seven days under the current Hobby workspace plan.

Technical records are used to investigate faults and security incidents. The legal basis is Article 6(1)(f) GDPR. My legitimate interests are providing a functioning website, protecting accounts and preventing misuse.

Render provides website hosting and uses Cloudflare for traffic delivery and protection against denial-of-service attacks. These services process connection information, including IP addresses, to deliver and protect the website. Gunicorn access and error logs are sent to the Render dashboard. Dashboard logs are retained for seven days under the current Hobby workspace plan.

Application access logs record the remote network address presented to the application, request date and time, HTTP method and requested URL, response status and size, referring page where supplied, and browser identifier. The remote address may belong to the hosting proxy rather than identify the visitor directly. Requested URLs can include query parameters. Error logs contain technical diagnostic messages used to investigate faults.

Cookies and external services

We do not use cookies for advertising or analytics. The student account area uses sessionid to maintain your signed-in session and csrftoken to protect form submissions. Their configured lifetimes are 14 days and approximately one year respectively. These cookies support account functionality and security.

The public landing page does not include advertising trackers, analytics scripts, embedded social-media feeds or embedded Microsoft Forms. Fonts and website images are served from the website’s own hosting.

Pages displaying mathematical notation in the student area also load MathJax software and associated resources through jsDelivr. Loading these resources sends technical connection information, such as your IP address and browser information, to the external delivery service.

Instagram and TikTok links open external websites in a new tab. Social-media feeds are not embedded in this website. The relevant service processes information when you follow its link.

Registration buttons link to Microsoft Forms and open it in a new tab. Microsoft receives connection information when you open its service. Recruitment responses are processed as explained below.

Contacting me

If you email me, I process your email address, message and information you choose to provide so that I can respond and manage the enquiry.

For general enquiries, the legal basis is Article 6(1)(f) GDPR: my legitimate interest in responding to people interested in the project. Where an enquiry concerns entering into a contract, Article 6(1)(b) applies where appropriate.

My business mailbox is provided through GoDaddy and Microsoft 365. Ordinary enquiries are deleted six months after the last substantive exchange unless they become pilot correspondence or require limited retention for a specific dispute.

Please avoid sending passwords, unnecessary sensitive information or private information about other people.

Expressing interest in the pilot

Microsoft Forms, under my Microsoft 365 business account, collects the information you submit about your course and exam session, age category, confidence, practice habits, school coverage, device, availability, interests and contact details.

I use this information to assess suitability, select a varied group of participants and contact applicants. The legal basis is Article 6(1)(a) GDPR, based on the recruitment consent requested in the form.

Submitting the form does not commit you to participation. You may withdraw your recruitment consent by emailing me. Without the information needed to assess and contact you, I cannot consider your application.

Unselected applicants’ responses and recruitment emails are deleted within 30 days after recruitment closes. Selected participants’ form responses are deleted within 30 days after the pilot ends on 2 December 2026. Only information needed to organise participation and record permissions is transferred to the participant register.

I will not use recruitment details for marketing or future recruitment without a separate agreement.

Pilot accounts and evaluation

Before participation, students receive the full participant information and testing privacy information. Students under 18 also need parent or guardian permission under the pilot’s participation policy.

Essential account processing uses contact, account and enrolment details, familiarity selections and practice records to provide access, save progress and display questions, feedback and results. Practice records include questions presented, answers, correctness, skips, hint and solution openings, and timestamps.

This processing is based on consent under Article 6(1)(a) GDPR. Withdrawing consent for essential account processing means the account must close.

Using feedback, observation notes and practice records to evaluate and improve the prototype requires separate consent under Article 6(1)(a). Declining or withdrawing evaluation consent does not remove agreed prototype access.

Limited processing necessary to protect accounts and investigate technical or security incidents is based on Article 6(1)(f), reflecting my legitimate interest in operating a secure prototype.

Calls use Microsoft Teams. Participant registers, agreement records and evaluation notes are stored in my business Microsoft 365 services. The prototype and practice records are hosted by Render.

Identifiable pilot records are accessible to me and to service providers as necessary to deliver their services. They are not used for marketing, testimonials or identifiable publication.

Optional audio recording

Audio recording requires separate consent under Article 6(1)(a) GDPR. Recording choices are checked before each call. No video or screen recording is made.

Audio is recorded using Voice Memos on my iPad, with iCloud syncing disabled, and transferred to my Microsoft 365 business OneDrive. Recordings are not sent to a transcription service. Both the iPad copy and the OneDrive copy are deleted within 30 days of the call.

You can participate without recording and can ask recording to stop at any time.

Pilot retention periods

Free pilot access ends on 2 December 2026 unless an extension is separately agreed.

Identifiable feedback, observation notes, account information and practice records are deleted or genuinely anonymised within 90 days after the pilot ends, by 2 March 2027. A participant code alone does not make information anonymous. Genuinely anonymous findings may be retained for ongoing development.

Minimal participation-agreement, consent and withdrawal evidence is retained separately for three years after the relevant consent-based processing ends. Where that processing ends on 2 March 2027, the evidence will normally be deleted by 2 March 2030.

The legal basis for this limited evidence retention is Article 6(1)(f): my legitimate interests in demonstrating permissions and protecting legal rights. Evidence is not retained for continued evaluation or marketing. A specific unresolved complaint or legal claim may justify a documented, limited extension.

If consent is withdrawn, the processing covered by it stops and applicable identifiable information is deleted without undue delay, unless a separate lawful reason requires limited retention.

Deletion covers live records and copies under my control. Residual copies may remain in provider recovery systems, file versions or backups until their applicable expiry. They are not used for further evaluation, and recorded deletions will be reapplied if a backup is restored.

My deletion procedure includes copies on the recording device, its Recently Deleted folder, business OneDrive and both OneDrive recycle-bin stages. Where information is removed from an existing workbook or document, older versions must also be reviewed and removed where accessible. Minimal agreement evidence is kept separately from evaluation records because it has a different retention period.

Business OneDrive normally retains deleted items in its recycle-bin system for up to 93 days from original deletion, unless the administrator changes that setting. My procedure is to remove relevant items from both accessible recycle-bin stages rather than rely on automatic expiry. This does not establish the expiry of every provider-held backup or recovery copy.

Routine manual database backups containing participant information are retained for no more than 30 days and then deleted from the hosting storage, local computer and any other copies under my control. Render’s database point-in-time recovery window is three days.

Service providers and international transfers

I use Render Services, Inc. for website and prototype hosting. The application and database are hosted in Frankfurt, Germany. Render uses subprocessors, including Cloudflare for traffic delivery and security.

Microsoft Forms, OneDrive, Teams and business email are provided through my Microsoft 365 business subscription purchased from GoDaddy Operating Company, LLC. Microsoft and GoDaddy, together with their relevant affiliates and subprocessors, process information as necessary to provide and support these services.

Some processing, including support, security operations and processing by subprocessors, may take place outside the European Economic Area. Selecting an EU hosting region does not mean that every supporting operation takes place within the EEA.

International transfers are subject to the applicable safeguards in the providers’ agreements. These include European Commission standard contractual clauses where required, or an applicable adequacy decision where its conditions are met.

Further information about processing and transfer safeguards is available in the Render Data Processing Addendum, GoDaddy Data Processing Addendum , and Microsoft Products and Services Data Protection Addendum . GoDaddy’s Microsoft 365 terms incorporate the Microsoft Customer Agreement and its data-protection provisions.

You can email louise@ibmathmomentum.com to request further information or a copy of the relevant transfer safeguards, subject to necessary redactions.

Your rights

Depending on the circumstances, you may request access, correction, deletion, restriction of processing or data portability.

You may withdraw consent at any time by emailing louise@ibmathmomentum.com. Withdrawal does not affect processing already lawfully carried out.

You may object to processing based on legitimate interests on grounds relating to your particular situation.

Stopping participation does not automatically delete every record. I will explain any limited information retained, its purpose and the applicable period.

You may complain to the Austrian Data Protection Authority, Datenschutzbehörde: www.dsb.gv.at.

Automated decisions

I do not make decisions producing legal or similarly significant effects solely through automated processing. The prototype automatically selects practice questions and calculates results; it does not determine school grades or admission to the pilot.