Radish Education Canada Inc.
Last updated: June 16th, 2026
Welcome to Magma Math's Privacy Policy for Canada. Magma Math is a service (the "Service") provided by Radish Education Canada Inc., an Ontario corporation (the "Company"), and its affiliates, for teaching and learning mathematics. The Service gives users a platform for solving problems and for supporting the interaction between students and teachers in an educational setting. This Privacy Policy describes our practices for personal information we process through the applications and websites we operate (collectively, the "Site").
When we provide the Service to a school board or school (an "Institution"), the Institution is the organization accountable for the student personal information, and we act as its service provider / information manager. We process student personal information only on the Institution's documented instructions and for the purpose of providing the Service.
Magma Math respects your privacy and is committed to protecting your personal information in accordance with applicable Canadian federal and provincial privacy laws. This Privacy Policy explains how we look after your personal information, your privacy rights, and how the law protects you.
We may update this Privacy Policy from time to time. We will notify you of material changes by contacting you at the email address you provided and by posting the updated policy on the Site. As used in this policy, "using" and "processing" information include collecting, storing, analyzing, modifying, deleting, combining, disclosing, and transferring information within our organization or among our affiliates, in Canada or internationally, in each case subject to the safeguards described below.
This Privacy Policy is designed to meet our obligations under Canadian privacy law, including:
- the Personal Information Protection and Electronic Documents Act (PIPEDA) and substantially similar provincial private-sector laws (including Quebec Law 25 and Alberta and British Columbia PIPA) where applicable;
- the public-sector access and privacy laws that govern Institutions, including, in Ontario, the Municipal Freedom of Information and Protection of Privacy Act (MFIPPA) for district school boards and the Freedom of Information and Protection of Privacy Act (FIPPA) for universities and certain provincial bodies, and the equivalent public-body legislation in other provinces (for example, FIPPA in British Columbia and FOIP in Alberta); and
- the student-records provisions of applicable provincial education legislation, including Ontario's Education Act.
Where an Institution is subject to provincial law, we support the Institution in meeting its obligations under that law.
The Service is used by students, including children, in an educational setting. We collect student personal information only as reasonably necessary to provide the Service, and only on the instructions of the Institution.
Consent for the collection and use of a student's personal information is obtained and managed by the Institution (the school board, school, and/or teacher) in accordance with applicable provincial education and privacy law. For a student to use the Service, a teacher or administrator at the Institution must approve the registration. We do not require students to disclose more personal information than is reasonably necessary to participate in the Service, and we do not use student personal information for advertising or marketing.
If we learn that we have received student personal information without the Institution having the authority to provide it, we will delete that information as promptly as reasonably possible. If you believe a student's personal information has been provided to us in error, please contact us at legal@magmamath.com.
The information we collect from teachers and students helps us provide, personalize, and improve the Service. We collect only as much information as is reasonably necessary.
i. Information you give us directly
- Teacher information: When a teacher creates an account, we ask for personal information such as name, email address, school name, username, and password ("Teacher Profile Information"). We may ask for information to verify the teacher's affiliation with a school or board.
- Student information: Students must provide a first name, last name, username, and password to create an account. Students may provide this directly or a teacher may provide it. A student's profile is available to their associated teacher; a student's name and username are visible to other students in the classes they join and may be available to other teachers or administrators with accounts at the same school.
- User-generated content: Teachers and students can create content such as math problems and solutions ("Content"). Content is viewable only by users the teacher authorizes. Content is not public by default; if a teacher opts to share Content beyond their classroom or school, it is anonymized and de-identified so it cannot be linked to an individual.
ii. Information collected automatically
- Technical information about a user's browser and device, used in aggregate to optimize the Service.
- Usage information, such as the features and Content users interact with, used in anonymized and aggregate form to generate statistics.
- IP address, log file information, cookies, tokens, and device identifiers, used to distinguish browsers and devices, keep users logged in, prevent duplicate actions, and improve the Service, and for security purposes. Most browsers can be set to notify you of, or refuse, cookies; refusing cookies may affect parts of the Service.
- Crash and error reports, which may include technical, usage, and (if you are logged in) account information, used to diagnose and prevent problems.
iii. What we do not collect. We do not collect Social Insurance Numbers, health or medical records, Indigenous or immigration status, financial information, home addresses, biometric data, or photographs.
iv. Basis for processing. We process personal information in accordance with PIPEDA and applicable provincial law, on the basis of the knowledge and consent of the individual or the Institution acting on their behalf, except where collection, use, or disclosure without consent is permitted or required by law. Where consent is the basis, it may be withdrawn at any time, subject to legal and contractual restrictions and reasonable notice.
We use the information we collect to:
- establish and manage accounts and provide the Service;
- conduct research and analysis, such as estimating usage patterns;
- store user preferences and customize content where appropriate;
- communicate with users about the Service; and
- operate, evaluate, and improve the Service.
We do not sell, rent, or trade personal information, and we do not allow advertising companies to collect data through the Service or use it for ad targeting. We may disclose aggregated, de-identified information that cannot identify an individual.
We may disclose personal information: to Operators that support the Service and are bound by confidentiality and use restrictions (see our List of Operators); where required by law or legal process; where reasonably necessary to protect the rights, property, or safety of Magma Math, our customers, or others, including the safety of a child or the security of the Service; and in connection with a corporate sale, merger, or similar transaction, subject to applicable law.
We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit (TLS 1.2+) and at rest (AES-256), role-based access controls, multi-factor authentication for administrative access, and access logging. No system can be completely secure, and we cannot guarantee the security of information transmitted to us.
Data location. Canadian customer data is hosted and stored at rest in Canada (AWS Canada, ca-central-1, Montréal, Québec). Limited processing of, or access to, personal information may occur outside Canada — for example, de-identified prompts handled by our AI Operator and access by our support and engineering personnel — in each case only as necessary to provide the Service and subject to the safeguards in this policy and applicable law. Where an Institution is subject to specific data-residency requirements (for example, certain British Columbia public bodies), we will agree those requirements contractually.
Subject to applicable law, you may: access, update, and correct your account and personal information; stop receiving marketing communications; cancel your account or ask that we no longer use a student's information to provide the Service; and request deletion of personal information or Content.
Retention and deletion. We retain profile information and Content only as long as reasonably necessary to provide the Service and to meet legal, regulatory, tax, accounting, or reporting requirements. Where an Institution or individual requests deletion, or following termination of the service agreement, we delete the relevant personal information within thirty (30) days, and backups are deleted on their rotation schedule. Deletion requests may be sent to legal@magmamath.com.
You also have the right to make a complaint to the Office of the Privacy Commissioner of Canada or to the applicable provincial privacy commissioner (for example, the Information and Privacy Commissioner of Ontario, or the Commission d'accès à l'information du Québec).
This Privacy Policy is intended to cover the collection of personal information of individuals in Canada. Where personal information is processed outside Canada by an Operator, that information may be subject to the laws of the jurisdiction in which it is processed, and we take reasonable steps to ensure it is protected in accordance with this policy and applicable Canadian law.
If we determine that a breach of security safeguards involving personal information creates a real risk of significant harm, we will notify the affected Institution as soon as feasible (and within 24 hours of confirming a breach involving student data, consistent with our standard commitment), and will support the Institution and, where applicable, notify the Office of the Privacy Commissioner of Canada and affected individuals, and maintain breach records, as required by PIPEDA and applicable provincial law (including Quebec Law 25, BC, and Alberta requirements).
The Site may link to other websites that have their own privacy policies; please review them. A list of all Operators that may process personal information through the Service is available in our List of Operators. Cookies placed by third-party services are governed by those services' own terms and privacy policies.
11. CONTACT DETAILS
If you have questions about this Privacy Policy or our privacy practices, please contact:
- Privacy contact: legal@magmamath.com
- Privacy Officer / Data Protection Officer: Ludvig (ludvig@magmamath.com)
- Postal address: Radish Education Canada Inc., 22 Adelaide Street West, Unit 3400, Toronto, Ontario M5H 4E3, Canada
