Privacy Policy

Bublio ("Bublio", "we", "us") helps schools and teachers create bubble-sheet exams and grade them with a phone camera. This policy explains what information we collect, how we use it, and the choices you have. We designed Bublio to hold as little personal data as possible.

Who is responsible for the data

For a school's account, the school is the data controller of the student information it enters, and Bublio acts as a processor/service provider that handles that information only to provide the service. Schools are responsible for having the appropriate consent or legal basis to use Bublio with their students.

What we collect

• Account information — name, email, and a hashed password for teachers and admins. We never store passwords in plain text.
• Student information you enter — student names, class names, and optional student ID numbers, so results can be matched to the right student.
• Exam content and results — the exams you create, answer keys, scores, and per-question outcomes.
• Scanned sheet images — the photo of each completed sheet you scan, stored so you can review a grade against the original.
• Billing information — plan, subscription status, and payment records. Card details are handled entirely by PayPal; we never see or store them.
• Basic usage/technical data — logs needed to run the service securely (e.g. sign-in activity, error logs).

How we use it

• To provide the core service: generating sheets, reading scans, grading, and showing results and analytics.
• To match a scanned sheet to the correct student and to let you review a grade against the original photo.
• To process subscriptions and send transactional emails (password resets, receipts, invitations, account notices).
• To keep the service secure and to prevent abuse.

We do not sell personal data, and we do not use student data for advertising.

Service providers we share data with

We use a small number of trusted providers strictly to run Bublio:

• Hosting — our infrastructure provider stores the application and database.
• PayPal — to process subscription payments. Payment details go directly to PayPal.
• Resend — to deliver transactional emails.
• OpenAI — when the optional AI reader or AI document import is used, the relevant sheet image or document is sent to OpenAI's API to read it. It is used only to return the reading and is not used to train models.

If you arrived from an advertisement

When somebody arrives from an advertisement and joins the waitlist, we send the advertising platform a hashed, irreversible form of the email address — a fingerprint it can match against its own records — so the platform can count which advertisements led to signups. We never send what anybody read, which pages they visited, the answers they typed, or their name. That message is sent by Bublio itself, after somebody chose to join, and never before.

While an advertising campaign is running, the campaign pages an advertisement links to also load Meta's measurement code, the Meta pixel. On those pages it sets Meta's own cookies in the visitor's browser and reports the visit — and the signup, if one happens — to Meta. A signup is reported twice on purpose, once from the browser and once from Bublio, and both carry the same identifier so that Meta counts them as one. The pixel runs only on those campaign pages: not on the rest of this site, and not inside the app a school signs into, where no student data or exam data is ever within its reach. When no campaign is running it is not loaded at all.

The same campaign pages also load Microsoft Clarity, which shows us how the page itself is used — how far people read, where they tap, where they stop — through Microsoft's own cookies. What a visitor types into the form is masked before anything leaves the page; Clarity records the page being used, not the words being written. Like the pixel, it runs on those campaign pages only, and is not loaded when no campaign is running.

إذا وصلت إلينا من إعلان وانضممت إلى قائمة الانتظار، فإننا نرسل إلى منصة الإعلانات نسخة مُجزَّأة وغير قابلة للعكس من عنوان بريدك الإلكتروني، لتتمكن المنصة من معرفة أي الإعلانات أدّت إلى تسجيلات. لا نرسل ما قرأته، ولا الصفحات التي زرتها، ولا الإجابات التي كتبتها، ولا اسمك. تُرسل هذه الرسالة من بوبليو نفسها بعد أن تختار الانضمام، وليس قبل ذلك.

وأثناء تشغيل حملة إعلانية، تُحمِّل صفحات الحملة التي يقود إليها الإعلان أيضًا كود القياس الخاص بـ Meta، أي «بكسل Meta». وعلى تلك الصفحات يضع البكسل ملفات تعريف ارتباط تخص Meta في متصفح الزائر، ويُبلغ Meta بالزيارة وبالتسجيل إن حدث. ويُبلَّغ عن التسجيل مرتين عن قصد، مرة من المتصفح ومرة من بوبليو، ويحمل البلاغان المعرّف نفسه حتى تحسبهما Meta تسجيلًا واحدًا. ولا يعمل هذا البكسل إلا على صفحات الحملة تلك: لا في بقية هذا الموقع، ولا داخل التطبيق الذي تسجّل المدرسة الدخول إليه، حيث لا تصل إليه أي بيانات طلاب أو بيانات امتحانات. وحين لا تكون هناك حملة قائمة، لا يُحمَّل البكسل أصلًا.

وتُحمِّل صفحات الحملة نفسها أيضًا أداة Microsoft Clarity، التي تُرينا كيف تُستخدم الصفحة ذاتها — إلى أي مدى يقرأ الزوار، وأين يضغطون، وأين يتوقفون — عبر ملفات تعريف ارتباط تخص Microsoft. وما يكتبه الزائر في النموذج يُحجب قبل أن يغادر الصفحة؛ فالأداة تسجّل استخدام الصفحة، لا الكلمات المكتوبة. ومثل البكسل، لا تعمل إلا على صفحات الحملة، ولا تُحمَّل حين لا تكون هناك حملة قائمة.

Children's data

Bublio is a tool for schools and teachers, not a service marketed to children, and students do not create accounts. Any student information in Bublio is entered by the school for the sole purpose of grading their exams. Where laws such as FERPA, COPPA, or GDPR apply, the school acts as the controller and Bublio processes the data only on the school's instructions. Schools can export or delete their data at any time.

Data retention

We keep account and exam data for as long as your account is active. You can delete exams, students, and scanned images from within the app. When a school account is deleted, its data (including student information and scanned images) is permanently removed.

Security

Passwords are hashed, traffic is encrypted in transit (HTTPS), and access to data is restricted to your own school. No system is perfectly secure, but we work to protect your data and to fix issues promptly.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. School admins can manage most data directly in the app; for anything else, contact us and we'll help. Requests about a student's data should generally go through the student's school.

International transfers

Your data may be processed in countries other than your own by us or our service providers, with appropriate safeguards.

Changes

We may update this policy as the product evolves. We'll change the "last updated" date and, for material changes, notify account admins.

Contact

Questions about privacy? Email sales@bublio.app.