Privacy Policy

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

🇪🇺 EU-Based Company

Last updated: January 17, 2025

Our Commitment to Your Privacy

At Blabble AI, we believe that your personal information belongs to you. As an EU-based company, we are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR). This Privacy Policy explains our practices and your rights regarding your information when you use our AI-powered educational platform.

Key Commitment: We do not sell your data. We only share your data with trusted third-party service providers, AI platforms (with anonymization or consent), and authorities when legally required.

Information We Collect

  • Account information (name, email, profile picture)
  • Study materials you upload (documents, audio files)
  • Usage data and analytics
  • Device and browser information
  • Communication preferences

How We Use Your Information

  • Provide and improve our AI-powered study tools
  • Generate personalized study materials and recommendations
  • Communicate with you about your account and our services
  • Analyze usage patterns to enhance user experience
  • Ensure security and prevent fraud

Information Sharing

  • We do not sell your data - this is our firm commitment
  • Third-party service providers (cloud hosting, analytics, email tools)
  • AI platforms (e.g., OpenAI) with anonymization or explicit consent
  • Authorities when legally required under EU law
  • Team features allow controlled sharing within your study groups

Data Security

  • All data is encrypted in transit and at rest
  • Regular security audits and monitoring
  • Access controls and authentication measures
  • Secure cloud infrastructure with industry-standard practices
  • Regular backups and disaster recovery procedures

Your GDPR Rights

Under GDPR, you have comprehensive rights over your personal data. We respond to all requests within 30 days.

Right of Access (Art. 15)

Request a copy of all personal data we hold about you

Right to Rectification (Art. 16)

Correct inaccurate or incomplete personal data

Right to Erasure (Art. 17)

Request deletion of your personal data ("right to be forgotten")

Right to Restrict Processing (Art. 18)

Limit how we process your personal data

Right to Data Portability (Art. 20)

Export your data in a machine-readable format

Right to Object (Art. 21)

Object to processing based on legitimate interests

Right to Withdraw Consent

Withdraw consent for processing at any time

Right to Lodge a Complaint

Contact your local data protection authority

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Contract Performance

Processing necessary to provide our educational services

Legitimate Interest

Improving our services and ensuring security

Consent

Marketing communications and optional features

Legal Obligation

Compliance with EU laws and regulations

Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes outlined in this policy.

Account Data: Retained while your account is active, deleted within 30 days of account closure
Study Materials: Retained as long as you maintain your account or until you delete them
Usage Analytics: Anonymized after 24 months, aggregated data retained indefinitely
Legal Requirements: Some data may be retained longer to comply with EU legal obligations

International Data Transfers

As an EU-based company, we primarily process your data within the European Economic Area (EEA). When we do transfer data outside the EEA, we ensure appropriate safeguards:

Transfer Safeguards

  • • Standard Contractual Clauses (SCCs) approved by the European Commission
  • • Adequacy decisions for countries with equivalent data protection
  • • Binding Corporate Rules for multinational service providers
  • • Your explicit consent for specific transfers when required

Note: Some AI processing services may involve transfers to the US under appropriate safeguards including SCCs and additional security measures.

Cookies and Tracking

We use cookies and similar technologies in compliance with EU ePrivacy regulations. You can control cookie settings through your browser preferences or our cookie consent banner.

Essential Cookies

Required for basic site functionality

Analytics Cookies

Help us understand site usage (with consent)

Preference Cookies

Remember your settings and preferences

Third-Party Services and AI Processing

We use third-party AI services to provide content generation, authenticity analysis, and other AI-powered features. Here's how your data is handled:

OpenAI Services

  • • Used for content generation and AI assistance
  • • Content is processed but not stored by OpenAI for training
  • • Data retention: 30 days for abuse monitoring, then deleted
  • • We never log or store your raw assignment content

AI Detection Services

  • • Used for authenticity analysis (with your explicit consent)
  • • Content is analyzed but not stored for training purposes
  • • Data retention: Varies by provider, typically 30-90 days
  • • Analysis results are stored locally for your reference

Important: We implement strict content logging restrictions - we never log your raw text content, only content hashes and metadata for security and debugging purposes.

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Questions About Privacy?

If you have any questions about this Privacy Policy or our data practices, we're here to help.