Privacy Policy

Effective date: August 9, 2026  •  Last updated: August 9, 2026

1. Introduction

Math I Can Do Solutions Incorporated ("Math I Can Do Solutions," "we," "us," or "our") provides Math I Can Do, a math editor available as (a) a free web editor on our website that requires no account or sign-up, (b) a desktop application, and (c) a Canvas integration delivered through the Learning Tools Interoperability (LTI) 1.3 standard for use within a school's or institution's learning management system. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

This policy applies to all three offerings. Because the offerings work differently, each section notes which parts apply where. If a term in a written agreement between us and your institution conflicts with this policy, that agreement governs for that institution.

By using our services you acknowledge this Privacy Policy. If you do not agree, please do not use the services.

2. Our role and who this policy is for

• Free web editor and desktop application. For individuals who use these directly, we act as the data controller for the limited information described below.
• Canvas / LTI integration. When an educational institution enables our tool for its users, the institution is the data controller for student and staff personal data, and we act as a data processor / service provider that handles that data only on the institution's behalf and under its instructions. For personal data contained in education records, we operate as a "school official" with a legitimate educational interest under the U.S. Family Educational Rights and Privacy Act (FERPA), 34 CFR § 99.31(a)(1)(i)(B), and we use that data only to provide and support the tool.

Students, parents, and guardians with questions about data handled through an institution should contact their institution first, as the institution controls that data.

3. Information we collect

We aim to collect as little personal data as possible. What we collect depends on which offering you use.

3.1 Free web editor (no account)

The free web editor requires no account, log-in, or sign-up. We do not ask you for your name, email, or any account credentials to use it.

• Editor content stays in your browser. The math expressions you enter and the memory-cell contents in the free web editor are stored locally in your browser and are not transmitted to or stored on our servers. Its only output is printing; it does not upload, export, or share files. If you clear your browser data, that content is lost.
• Usage and device data. We may collect limited, non-identifying technical data such as browser type, operating system, general region derived from IP address, pages viewed, and feature usage, through cookies and similar technologies (see Section 8). We use this to keep the site working and to understand aggregate usage.
• Support communications. If you contact us, we collect what you choose to share (such as your email and message).

3.1a Viewing and sharing Documents (free reader)

Anyone can view and share a Document in our proprietary format for free, using our free reader, without an account. Viewing or sharing a Document does not require you to provide personal data to us, and we do not use the content of a viewed Document for any purpose other than displaying it. Creating and editing Documents, and exporting them to other formats (such as PDF), require a paid subscription (see Sections 3.2 and 3.3). Because a shared Document is served from our storage, it will stop being viewable through a shared link once the underlying Document is deleted (see Section 9).

3.2 Desktop application

The desktop application is provided on a subscription basis.

• Subscription, license, and activation data. To validate an active subscription and deliver updates, we may collect a license/subscription key, activation status, application version, and basic device/operating-system information.
• Your Documents are stored on our servers. So that Documents can be viewed from anywhere and shared, subscriber Documents are stored on our servers. We use this stored content to provide the service (storing, displaying, syncing, and sharing your Documents at your direction) and do not use it for advertising or profiling. You may download your Documents in our native format at any time. Storage of Documents after a subscription lapses is addressed in Section 9.
• Optional diagnostics. If enabled, we may collect crash reports and anonymous usage statistics to improve reliability. Where required, this is off by default and can be turned off in settings.

3.3 Canvas / LTI 1.3 integration

When your institution launches our tool from Canvas using LTI 1.3, Canvas sends us information needed to run the tool within the course context. Depending on how your institution configures the integration, this may include:

• Identifiers and profile data: a Canvas user identifier, and where released by the institution, name, email address, and profile picture.
• Role and context data: the user's role (such as learner or instructor), and course/context information such as course identifier, name, and the specific assignment or resource link launched.
• Work product and results: the math work a user submits through the tool, and, where the institution uses grade passback, scores and completion data returned to Canvas via LTI Assignment and Grade Services (AGS).
• Roster data (only if enabled): if the institution turns on the Names and Role Provisioning Service (NRPS), the list of members and roles in a course.

We receive only the data fields the institution chooses to release. We do not collect government identifiers, financial account numbers, or special-category/sensitive data through the LTI integration.

3.4 Purchases through the Canvas marketplace

Purchases and licensing made through the Canvas marketplace (via EdCo / LearnPlatform) or other resellers are handled by those platforms and/or the institution. Payment card processing is performed by our payment provider(s); we do not receive or store full payment card numbers.

4. How we use information

We use information to:

• provide, operate, maintain, and secure the services;
• authenticate LTI launches and display the correct course/assignment context;
• return grades and completion data to Canvas when the institution enables that feature;
• validate licenses and deliver updates for the desktop application;
• diagnose problems, improve performance and reliability, and develop features;
• respond to support requests; and
• comply with legal obligations and enforce our terms.

We do not sell personal data. We do not use student data to serve targeted advertising, and we do not build student profiles for any purpose other than providing the educational service authorized by the institution.

5. Legal bases for processing (EEA/UK users)

Where the EU or UK GDPR applies and we act as a controller, we rely on: performance of a contract (to provide the service you request), legitimate interests (to secure and improve the service, balanced against your rights), consent (for non-essential cookies and any optional diagnostics), and legal obligation. Where we act as a processor for an institution, the institution is responsible for the legal basis for its users' data.

6. Student data commitments

For personal data of students and staff that we process on behalf of an institution, we commit that we will:

• use the data solely to provide and support the tool for the institution, and for no other commercial purpose;
• never sell student data;
• never use student data to serve targeted advertising or to build a personal profile other than in furtherance of the authorized educational purpose;
• maintain administrative, technical, and physical safeguards designed to protect the data (Section 10);
• not change how we use or share student data without notice to, and where required consent of, the institution;
• return or delete student data at the institution's request or on termination, subject to legal retention requirements (Section 9); and
• require our sub-processors to provide at least equivalent protections (Section 7).

These commitments are intended to align with FERPA and with U.S. state student-privacy laws such as California's Student Online Personal Information Protection Act (SOPIPA). Where we have signed a data privacy agreement (for example, an SDPC/National Data Privacy Agreement) or an institution-specific data processing agreement, that agreement's terms control.

7. How we share information

We do not sell personal data. We share information only as follows:

• With your institution: for the LTI integration, data flows between the institution's Canvas environment and our tool as described above.
• With service providers (sub-processors): we use vetted third parties to host, operate, and support the services (for example, cloud hosting, error monitoring, and payment processing). They may process personal data only to provide services to us and under contractual confidentiality and security obligations. A current list of sub-processors is available at mathicando.com/sub-processors or on request.
• For legal reasons: to comply with law, respond to lawful requests, or protect the rights, safety, and property of users, the public, or Math I Can Do Solutions Incorporated.
• In a business transfer: in connection with a merger, acquisition, or sale of assets, subject to the protections in this policy.

8. Cookies and similar technologies

Our website and free web editor use cookies and similar technologies for essential functionality and, where you consent, for analytics. You can control non-essential cookies through our cookie banner and your browser settings. The desktop application and the in-Canvas tool do not use advertising cookies. For details, see our Cookie Notice.

9. Data retention

We retain personal data only as long as needed for the purposes described here:

• Free web editor and free reader: editor and memory-cell content stays in your browser and is never stored on our servers, so we retain none of it. We retain only the aggregate/technical usage data described in Section 3.1.
• Subscriber Documents (individual/direct subscriptions): we store your Documents on our servers while your subscription is active. If your subscription lapses, you keep free-reader access to your Documents: you can still view, print, and share them at no charge, and only the paid capabilities (editing and exporting to other formats) pause until you renew. We keep your Documents for 90 days ("grace period") so you can also log in and download your own copies, after which we permanently delete them from our servers. Any Document you download in our format is yours to keep indefinitely, and any Document you export to another format (such as PDF) while subscribed is yours to keep in that format indefinitely. We will warn you before deletion: typically when your subscription lapses, again at least 30 days before deletion, and a final reminder about 7 days before, so you can download or export anything you want to keep. After deletion, Documents cannot be recovered and any shared links served from our servers will stop working.
• Institutional / LTI Documents and data: for Documents and personal data we hold on behalf of an institution, retention, return, and deletion follow the institution's instructions and our agreement with it, so that we do not delete education records the institution is required or expects to keep, and so we can delete them when the institution directs.
• Account, subscription, and diagnostic data: retained for the duration of the subscription and a reasonable period thereafter for support, billing, and legal purposes.

10. Data security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data, which may include encryption in transit, access controls, least-privilege practices, logging, and regular review. Documents stored on our servers are held within this security program. LTI 1.3 launches are secured using OpenID Connect and signed tokens. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. International data transfers

We are based in Canada, and information may be processed in Canada and in the United States by our service providers. Where we transfer personal data across borders, we use appropriate safeguards such as Standard Contractual Clauses where required.

12. Your rights and choices

Depending on where you live, you may have rights to access, correct, delete, or port your personal data, to object to or restrict certain processing, and to withdraw consent. Residents of the EEA/UK, California, and certain other jurisdictions have specific statutory rights.

• For data we process on behalf of an institution (the LTI integration), please direct requests to your institution, which controls that data; we will assist the institution in responding.
• For data we control (free web editor, desktop app), contact us at pete@mathicando.com. We will not discriminate against you for exercising your rights.

Paid export is a product feature, not a condition of your legal rights. While editing and exporting Documents to other formats is a subscription feature, this does not affect any statutory right you may have to access, obtain, or receive a copy of your personal data. Where the law entitles you (or, in an educational setting, a student, parent, or guardian) to access or a portable copy of personal data, we (or the controlling institution) will provide it as required by law, free of charge, regardless of subscription status.

If you are in the EEA/UK and have a concern we cannot resolve, you may lodge a complaint with your local data protection authority.

13. Children's privacy

Our tool is designed for use in educational settings and may be used by students under the age of 13 (or the equivalent age under applicable law) only through, and under the authorization of, their school. In that setting, the school provides any consent required under COPPA and applicable law on behalf of parents for the use of the tool for educational purposes, consistent with FTC guidance. We do not knowingly collect personal data directly from children under 13 outside the school context or for any purpose beyond providing the educational service. Parents and guardians with questions should contact their child's school. If you believe a child has provided us personal data outside this context, contact pete@mathicando.com and we will delete it.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here with a new "Last updated" date and, for material changes affecting institutions, provide notice as required by our agreements.

15. Contact us

Math I Can Do Solutions Incorporated
Kelowna, British Columbia, Canada
Email: pete@mathicando.com