What we do with your data
This page explains what MathsQuestions stores about you, who else sees it, how long it is kept, and what you can ask for. Last updated 1 October 2026.
Who is responsible
Your school decides what is collected here and why. This service stores and processes it on their instructions, and may not use it for anything else.
The full privacy notice for your schoolwork is your school's, not this one. Ask your school for it.
This service is mathsquestions.app — questions about the parts we decide ourselves go to privacy@mathsquestions.app.
You need a school email address to use this site at all; without one there is no account. Everything else here is collected because you used the site.
What we decide ourselves
Almost everything here is your school's decision. These few things are ours, so for them we are responsible rather than your school:
- Fixing the drawing tools
- We record when pen or touch input on the whiteboard had to be discarded, so the faults can be found. These counts are kept for 30 days and are not about your work.
- Counting how the site is used
- We count page views. This is done without cookies and does not identify you.
- The marking demo
- If you try the demo on the home page, what you draw is sent to an AI model and marked straight away. This site does not keep it.
Why we are allowed to do those
Legitimate interests (UK GDPR Article 6(1)(f))
What your school has us do with it
- Marking your work
- Your photo is stored and sent to an AI model, which proposes the marks.
- Showing your work to your teacher
- Your teacher can see what you submitted, change any mark, and write a comment on it.
- Writing progress reports about you
- Your teacher can have an AI model draft a report about your work. Your name is not sent to the AI model.
- Keeping you signed in
- Signing in sends a six-digit code to your school email, and we record when you signed in, from which IP address and in which browser.
- Achievements and streaks
- Work you complete can earn achievements, stored against your account.
- Keeping the site working
- We count requests so the site is not overloaded, and record when whiteboard input had to be discarded so the drawing tools can be fixed.
What we store
- Your account: your school email address, your name, and whether you are a pupil or a teacher.
- Your work: photographs of what you submit, and the marks and reasoning recorded for each step.
- What is written about it: your teacher's comments, and anything you write when you ask for a mark to be checked.
- How you use the site: when you signed in, the IP address and browser you used, and how many times you switched away from the page while answering assigned work.
- Achievements you have earned, and diagnostic counts of pen or touch input the whiteboard had to discard.
Marking by computer
Work you submit is marked by an AI model, which proposes which marks to award.
Its marks are what your teacher sees first. On work your teacher has set, you see them only once your teacher has released them. On practice and summer work you choose to do yourself, they appear straight away.
If you think a mark is wrong, you can ask for it to be checked from the question itself.
Who else sees it
| Who | What they do | Where | How it is protected |
|---|---|---|---|
| Your school | Teachers and administrators at your school. | United Kingdom | Stays in the UK |
| AI marking services | Mark your work and anything drawn in the demo on the home page, and draft reports about your work for your teacher. | United States | UK International Data Transfer Addendum, with a transfer risk assessment |
| Photograph storage | Stores the photographs of your work. | United States | UK Extension to the EU–US Data Privacy Framework |
| Site hosting | Runs the site and counts page views. | United States | UK Extension to the EU–US Data Privacy Framework |
| Database hosting | Stores everything else. | Ireland | UK adequacy (European Economic Area), and UK Extension to the EU–US Data Privacy Framework for supplier access |
| Email delivery | Sends your sign-in codes. | United States | UK Extension to the EU–US Data Privacy Framework |
| Backup storage | Keeps the encrypted nightly copies of the database. | United States | UK Extension to the EU–US Data Privacy Framework |
Everyone in this list except your school is outside the UK, so your data leaves the UK to reach them.
How long it is kept
- Work you submit, and its marks
- Your school decides how long this is kept. Unless it chooses otherwise, it is deleted, along with the photograph, one year after you submit it.
- Your account
- Until your school deprovisions your address. Your email, the photographs and the comments written about them are then erased; the marks stay, no longer attached to you.
- Sign-in sessions
- Up to a year, then you are signed out.
- Sign-in codes
- Ten minutes.
- Whiteboard input diagnostics
- 30 days.
- Backups
- An encrypted copy of the database is made each night and kept for 30 days, so something deleted can remain in a backup for up to 30 days.
What you can ask for
- See your data
- Ask for a copy of everything held about you.
- Correct it
- Ask for anything wrong to be fixed.
- Delete it
- Ask for it to be erased.
- Limit how it is used
- Ask that it be held but not used, while something is being sorted out.
- Object
- Object to it being used in a particular way.
- Take it with you
- Ask for a copy in a format another service could read.
- Complain
- Complain to the Information Commissioner's Office at ico.org.uk.
Ask your school. They decide, and we have to help them do it. For the few things listed above that we decide ourselves, you can ask us directly.
Our address for those requests is privacy@mathsquestions.app. You can complain to the Information Commissioner's Office at ico.org.uk at any time.
Cookies and what is stored in your browser
Signing in stores a cookie that keeps you signed in. Your browser also keeps your colour theme, your whiteboard guide settings and your whiteboard working, which is deleted after 30 days untouched. An answer you submit while offline is kept in your browser until it has been sent. Page views are counted without cookies and without identifying you. None of it is used for advertising, and none of it is sold.