Privacy and data retention

What is kept

The exam you uploaded, the students' notebooks you scanned, and the grades and reasons the grading produced. A scanned notebook may include the student's name and ID number — personal information, and in many cases about minors.

Your account details are kept as well: your email address, and your name and school if you filled them in.

Credit card details are handled by the payment processor alone, and are never stored with us.

Who can access it

Only you. Accounts are kept apart in the database itself (Row Level Security), not only in the site's code — so even a server fault doesn't expose another teacher's notebooks.

If you send a student a personal link to their notebook, whoever holds the link sees that notebook only — the grade and comments — and nothing else. You can revoke a link at any moment, and from that moment it stops working.

The Badook team doesn't access notebooks except at your explicit request, to deal with a problem you reported.

For how long

Scanned notebooks are deleted automatically 90 days after grading. Grades and comments are kept for 12 months from grading, and then deleted too.

Deleting means deleting: at each of the two stages, what's deleted leaves storage and the database with no copy kept.

Processing by a language model

Grading uses outside infrastructure and AI providers, bound by a data processing agreement. Notebook content is sent to them for grading only, and is never used to train models. Schools that sign a data processing agreement receive the full list of providers.

Where the data lives

The database and files — notebooks, grades and account details — are stored on servers in the European Union (Frankfurt). For the grading itself, a notebook's content is sent to the AI provider, which may process it outside the EU, subject to a data processing agreement.

If your school must store data in a particular country, talk to us before uploading notebooks.

Emails

We send emails only about your account and your work: sign-up confirmation and password reset, a welcome, a grading that finished or failed, a notebook allowance about to run out, a payment receipt, a reminder about a planned exam whose notebooks haven't been uploaded, a warning before notebooks are deleted, and notice of a material change to the terms. There are no marketing emails, and your address is never given to anyone.

Emails are sent from no-reply@contact.badook.app through an email delivery provider. A reply to an email reaches us, at contact@badook.app.

Cookies and data in your browser

One sign-in cookie, needed so the site remembers you're signed in, and one that remembers the language you use the site in. And one more, not necessary, that remembers who referred you to us (up to 30 days) — you can decline it in the notice that appears on your first visit. There are no advertising cookies and no third-party tracking. To count visits we use Vercel Web Analytics, which works without cookies and without identifying you: only which page was viewed is kept, with no personal links, codes or names.

A few conveniences are also kept in the browser itself: the last email address you typed in the sign-in form, and the site tours you've already seen. They aren't sent to us, and are deleted when you clear your browser data.

Your rights

You can delete any grading from the “My grading” page, export grades as a file, and delete the whole account — with all its notebooks and grades — from the account page, or by request at contact@badook.app.

You are the holder of your students' information; we process it on your behalf.