Privacy in the WobMath app
Version 2026-10-23
A test version
The WobMath app is new and in testing. Lessons, answers, solutions and pictures may still contain mistakes, and the app may change. If you find something that isn't right, tap Report a problem next to the question or lesson, or email [email protected]. Thank you for helping!
Who is responsible
The controller is PBL Partners AB (organisation number 559533-7048), Gustav III:s Boulevard 163, 1001, 169 74 Solna, Sweden. Contact: [email protected].
Accounts are for adults
Only adults (18 or older) can create an account. The adult then adds children they are the parent or guardian of, or, as a teacher, pupils their school has allowed them to add. The adult confirms this when creating the account and when adding each child, and we record when they did. Children have no account of their own, no email and no password, and can't send messages to anyone in the app.
What we store
- The grown-up account: email address, name, role (parent or teacher), language, an encrypted password (we can't read it), when the account was created and last used, and when you confirmed the points above.
- Learner profiles: a nickname, a character, a grade and a language. No surname, no email, no date of birth.
- Learning: which lessons are done, stars and badges, which questions were answered right or wrong, and how long the learner practised each day.
- Problem reports: which lesson or question, the kind of problem and an optional short comment.
- Security: attempts to log in and to create accounts (with IP address) to stop abuse, and a log of account events such as logins and changes.
Why
To run the app: log you in, show where the learner is, give the right questions and show progress to the grown-up. Legal basis: the agreement with you as the account holder (GDPR article 6.1 b). We process the security data and problem reports to protect the app and fix mistakes (legitimate interest, article 6.1 f).
No advertising, no tracking, no third-party analytics, and we never sell data.
How long
- As long as the account is used. Accounts unused for 3 months are deleted, with the learner profiles and all learning data. Two weeks before, you get an email; logging in keeps the account.
- If you delete the account yourself, everything is deleted at once.
- Accounts whose email was never confirmed are deleted after 7 days.
- Attempts to log in and create accounts (with IP address) are deleted within 24 hours.
- The account event log and handled problem reports are kept for 12 months.
- The server's technical logs are deleted after at most 8 days (the error log after at most 15 days).
Cookies
Only necessary cookies: a login cookie, a security cookie against forged forms, one that remembers the language and, in the Android app, one that remembers which version of the app is used so we can offer updates. No others.
Who processes data for us
- Hetzner Online GmbH: the server, in the EU. All the data above is stored there.
- Cloudflare, Inc.: delivers and protects the site; may process IP addresses, including outside the EU (EU–US Data Privacy Framework and standard contractual clauses).
- MXroute: sends the confirmation, password and reminder emails. Its servers are in the USA, so your email address is processed there.
Your rights
Under Grown-ups → Account you can download all the data about you and your children (JSON) and delete the account at any time (how to delete your account). You can also email us for access, correction, restriction or objection. As a parent or guardian you use these rights on your child's behalf. Complaints: the Swedish Authority for Privacy Protection (imy.se).
Changes
If this notice changes in an important way, we'll tell you in the app or by email.