Privacy Policy

Bublio ("Bublio", "we", "us") helps schools and teachers create bubble-sheet exams and grade them with a phone camera. This policy explains what information we collect, how we use it, and the choices you have. We designed Bublio to hold as little personal data as possible.

Who is responsible for the data

For a school's account, the school is the data controller of the student information it enters, and Bublio acts as a processor/service provider that handles that information only to provide the service. Schools are responsible for having the appropriate consent or legal basis to use Bublio with their students.

What we collect

• Account information — name, email, and a hashed password for teachers and admins. We never store passwords in plain text.
• Student information you enter — student names, class names, and optional student ID numbers, so results can be matched to the right student.
• Exam content and results — the exams you create, answer keys, scores, and per-question outcomes.
• Scanned sheet images — the photo of each completed sheet you scan, stored so you can review a grade against the original.
• Billing information — plan, subscription status, and payment records. Card details are handled entirely by PayPal; we never see or store them.
• Basic usage/technical data — logs needed to run the service securely (e.g. sign-in activity, error logs).

How we use it

• To provide the core service: generating sheets, reading scans, grading, and showing results and analytics.
• To match a scanned sheet to the correct student and to let you review a grade against the original photo.
• To process subscriptions and send transactional emails (password resets, receipts, invitations, account notices).
• To keep the service secure and to prevent abuse.

We do not sell personal data, and we do not use student data for advertising.

Service providers we share data with

We use a small number of trusted providers strictly to run Bublio:

• Hosting — our infrastructure provider stores the application and database.
• PayPal — to process subscription payments. Payment details go directly to PayPal.
• Resend — to deliver transactional emails.
• Anthropic (Claude) — when the optional AI reader or AI document import is used, the relevant sheet image or document is sent to Anthropic's API to read it. It is used only to return the reading and is not used to train models.

Children's data

Bublio is a tool for schools and teachers, not a service marketed to children, and students do not create accounts. Any student information in Bublio is entered by the school for the sole purpose of grading their exams. Where laws such as FERPA, COPPA, or GDPR apply, the school acts as the controller and Bublio processes the data only on the school's instructions. Schools can export or delete their data at any time.

Data retention

We keep account and exam data for as long as your account is active. You can delete exams, students, and scanned images from within the app. When a school account is deleted, its data (including student information and scanned images) is permanently removed.

Security

Passwords are hashed, traffic is encrypted in transit (HTTPS), and access to data is restricted to your own school. No system is perfectly secure, but we work to protect your data and to fix issues promptly.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. School admins can manage most data directly in the app; for anything else, contact us and we'll help. Requests about a student's data should generally go through the student's school.

International transfers

Your data may be processed in countries other than your own by us or our service providers, with appropriate safeguards.

Changes

We may update this policy as the product evolves. We'll change the "last updated" date and, for material changes, notify account admins.

Contact

Questions about privacy? Email sales@bublio.app.