Legitimate Interests Assessments

These Legitimate Interests Assessments cover each processing activity carried out under Article 6(1)(f) UK GDPR. Activities relying on contract, legal obligation, or consent are documented in the privacy notice instead. The three-part LIA (purpose, necessity, balancing) is applied to each.

LIA 1 — Operating a staff account

• Purpose — to identify the staff user, scope data to their school, and deliver the planning service.
• Necessity — name + email are the minimum needed for sign-in, school scoping, and transactional communication. Without them the Service cannot function.
• Balancing — staff reasonably expect their professional account email to be processed by a workplace tool; data is held against a single school; access is RLS-scoped; users can self-serve deletion. No marketing, no profiling, no third-party disclosure. Legitimate interests prevail.

LIA 2 — AI-assisted prayer drafting

• Purpose — to produce a tailored prayer draft from the user's own planning input.
• Necessity — the prompt is the user's text; without sending it to the AI gateway, no draft can be returned. The provider is contractually prohibited from training on the input.
• Balancing — pupil identifiers (name, login code, school name) are stripped before the prompt is sent. Generated text is shown back to the user for review; users can refuse to use it. Magnifica Humanitas constraints prevent the AI from replacing the human pray-er. Legitimate interests prevail.

LIA 3 — Service-essential cookies and local storage

• Purpose — to keep the user signed in and to preserve unsaved planner drafts.
• Necessity — without auth tokens, every page load would require a fresh sign-in; without draft persistence, an accidental tab close would lose work.
• Balancing — all keys are strictly necessary, first-party, and short-lived. No analytics, advertising, or cross-site tracking. Legitimate interests prevail (PECR exception also applies).

LIA 4 — Transactional and safeguarding email

• Purpose — to deliver sign-in codes, safeguarding alerts to the DSL, and service notices.
• Necessity — email is the only out-of-band channel staff have registered; safeguarding alerts must reach the DSL without delay.
• Balancing — recipients reasonably expect service emails as a condition of using a workplace tool; users can close their account; marketing email is consent-based and out of scope here. Legitimate interests prevail.

LIA 5 — Pastoral-context summary for the celebrant

• Purpose — to give a Mass celebrant an aggregated, de-identified picture of what a cohort has been praying about.
• Necessity — celebrants traditionally rely on staff briefings; the feature replaces that with an opt-in, school-controlled summary.
• Balancing — off by default; opt-in by a school leader; minimum 3-prayer aggregation; never names or quotes; any pupil with an open safeguarding flag is excluded; never shown to pupils; audit log retained 90 days. Legitimate interests prevail.

Review

Each LIA is reviewed annually and whenever the underlying processing changes. Schools may object to any LI-based processing — we will reconsider on the facts of the objection.