Privacy

Who is responsible? Bohuslav Riha, Strasshof an der Nordbahn, Austria, info@tamitady.eu. Additional contact details: Purpose: information about and access to a privately operated supplementary mathematics-practice project, currently without payments, donations or advertising.. This notice covers the website, browser app and corresponding local/signed-in app functions. Version: 2026-11-06.

Trying lessons without an account. Your guest notebook, settings and progress are saved on your device. Clearing browser/app data can remove them. The guest notebook is not routinely uploaded as an account notebook. Network requests and limited usage events are nevertheless processed by the service. If you choose to transfer guest work when creating a supported new account, that work is sent to the server. Local practice does not mean every network interaction is anonymous.

Accounts and learners. Sign-in processes account identifiers, username, email and credentials through the identity service. The app associates an account with learner profiles. Depending on your choices, these contain names or nicknames, avatars, birth month and year, country/school context, settings and daily plans. Signed-in notebooks store lessons, answers, attempts, results, time and learning statistics on the server so the learner can continue on another device. Device identifiers, app versions and sync information support access and synchronization. These data are used to provide the requested account/practice service. Account processing basis: We process the account information necessary to provide the account service you request under Article 6(1)(b) GDPR. Optional functions are assessed separately.. Child-profile and learning-data basis: For a guardian-managed learner, the basis is Article 6(1)(f) GDPR: providing the supplementary practice the family requests, preserving progress and choosing suitable review. We assess necessity and the child's interests separately; a parent's contract is not treated as the child's consent. There is no advertising, sale of learning profiles or use for school admission or grading.. Who may register/manage a child's profile: Public self-registration is currently closed. Existing accounts use the permissions configured for the service. A parent account manages its own learner profiles. Guest practice does not require an account..

How practice adapts. Statistics about answers, attempts, timing and prior practice help estimate which skills need more work and which are due for review. The planner uses them to choose daily practice and suitable task levels. These estimates are practice aids, not school grades or professional assessments. We explain this because the service builds an individual learning profile.

Cookies and device storage. Sign-in uses session cookies and login-state cookies. The app also stores guest work, preferences, device identifiers, offline copies and unsent work on your device. Storage purposes and retention criteria: The information website does not save language or theme preferences in cookies or browser storage. The application uses necessary sign-in and login-state cookies, and stores guest work, settings, device identifiers, offline resources and unsent work on the device. Sign-in access lasts until the applicable session expires or is revoked; expiry of access and removal of server records are separate operations. Device data can remain until cleared in the app or browser, removed by the application, or evicted by the browser or operating system. Server deletion cannot guarantee clearing an offline device. Identity-service cookie settings and server-record cleanup must be covered by the service retention procedures.. Any optional storage/access requiring consent is described and controlled separately; this notice does not itself grant permission.

Operation, security and usage counts. Connections expose technical information such as network address and browser information. The service uses it for request handling, rate limits, diagnostics and security. First-party usage counting also processes some information temporarily to avoid duplicate daily counts, classify requests and derive coarse country/device/language/source categories. Aggregate counter rows are different from account/device records and operational logs. We do not describe all these operations as anonymous. Security basis: Article 6(1)(f) GDPR: proportionate protection of accounts, learners and service availability, including prevention and investigation of misuse.; measurement basis and interests where relevant: Article 6(1)(f) GDPR: proportionate first-party operation and capacity measurement, without advertising profiles or tracking across services. Technical metadata and temporary deduplication are distinguished from anonymous totals.. No advertising is currently displayed. Contact messages are processed to answer your request: Article 6(1)(b) GDPR for inquiries concerning a requested service or steps towards it; otherwise Article 6(1)(f) GDPR for answering correspondence. Rights requests are handled under Article 6(1)(c) GDPR in conjunction with Articles 12–22..

Read-aloud, where offered. Ordinary question reading uses your device/browser's speech engine. Depending on that engine, text may be processed by an external speech service. This is distinct from generative AI. Release-specific details and basis: Ordinary read-aloud uses the selected device or browser speech engine without microphone access. With a local voice, no lesson text or audio is sent to an external speech service. The browser or operating system supplies the voice; its settings determine whether the selected voice runs locally., When local read-aloud is requested, it forms part of the requested practice function. Its local text handling follows the basis for that practice; no separate external speech recipient is claimed..

Who receives data and where? Service providers needed for hosting, identity, email and applicable speech functions: Our hosting provider is Oracle Cloud Infrastructure. We operate our own account sign-in service. External email services support account messages, such as email verification and password recovery, and contact correspondence. An SMTP relay processes recipient addresses, the message content needed for delivery and delivery information. Hosting and email providers receive only the information needed for their respective functions., Ordinary read-aloud uses the selected device or browser speech engine without microphone access. With a local voice, no lesson text or audio is sent to an external speech service. The browser or operating system supplies the voice; its settings determine whether the selected voice runs locally.. International transfers and any applicable safeguards: Service processing takes place in Europe. The application server location is identified in the Hosting section. Changes to processing locations or international transfer arrangements will be reflected in this notice before they take effect.. Family management gives the account holder access to managed learners' information. We do not sell learning data or use it for advertising.

How long is data kept? The schedule for each category, deletion criteria, backups and remaining copies is: We keep active account and profile data, current learning summaries and unfinished work while the account is actively used, until deletion is requested or the inactivity policy applies. Unfinished work is retained for exact resume. Detailed completed-exercise and answer history is kept for a rolling 12 months; older details, including copies in completed sessions, are removed consistently while retaining only derived summaries needed for ongoing practice adaptation.

After 24 months without meaningful account or family activity, we send a warning and allow 30 days to return or export before deletion; practice by a child on a paired device counts as family activity.

For verified deletion requests, applicable data are removed from live systems without undue delay, normally within 1 month, subject to applicable legal exceptions.

Routine web, access and security logs are kept for 14 days. Narrowly identified incident evidence may be retained separately only as needed for a documented incident or legal purpose. Minimized synchronization and error diagnostics are kept for 30 days and do not contain lesson answers or unnecessary personal data. On a signed-in, sync-enabled device, when a sync error is shown or an uncaught app error occurs, the app queues a report and sends it with the next successful authenticated sync or check-in. The report contains server-received and client event times, app version/build/platform, a broad category, a short sanitized error message and up to five sanitized application stack frames. It also contains the internal ID of the authenticated account and the active profile ID from that server session, so the affected account and profile can be identified; these are internal IDs, not display names. It excludes notebook snapshots, URLs/query strings, tokens and arbitrary user text.

Recovery backups have a maximum age of 60 days; deleted live data expire from backups no later than 60 days after live deletion. Backups are restricted to recovery and previous deletions are reapplied after restoration. These separate periods can mean up to one month for live deletion followed by up to 60 days for backup expiry.

Truly anonymous usage totals are kept for a rolling 24 months; account- or device-linked records do not qualify.

Ordinary resolved contact correspondence is deleted within 12 months after closure. Any narrowly justified incident or legal exception is documented and reviewed. Necessary rights-request case evidence follows a documented necessity review. Device data, session access and offline copies follow the criteria explained in Cookies and device storage; signing out does not itself delete all records.. Signing out or turning a feature off is not the same as deleting all server records. Device data may remain until cleared; unsent changes and access revocation require separate handling.

Your choices and rights. Contact info@tamitady.eu to request access, correction, deletion, restriction, portability or to object where those rights apply. If processing relies on consent, you may withdraw it without affecting earlier lawful processing. We may need information to verify identity or authority to act for a child. Some account controls provide exports/deletion, but a particular screen is not necessarily a complete export or erasure of all data. You may complain to the Austrian Data Protection Authority or another competent supervisory authority. Information needed for account service is distinguished from optional features; choosing guest practice does not require account data.

For children. The notebook remembers your answers to help choose practice. Your parent can see the information in a profile they manage. You can ask an adult to help you understand this page or contact us. Do not put private information into lesson answers or nicknames.

The online service runs on a Oracle Cloud Free Tier VM in Frankfurt, Germany. This identifies the application VM location; it does not establish the location of every backup, email service or other provider processing.