Privacy
Last updated 12 September 2026. This describes what biqib AI School (app.biqib.com) actually does with a student's information. The terms of service are separate.
The most important part
To teach and to mark work, this app sends what a student writes to AI services run by other companies, outside Sri Lanka. That includes questions typed or spoken to the tutor and photographs of handwritten work. There is no way to use the tutor or the marking without this.
Some of those AI services are free ones, and free services may keep what they receive
We use a mix of paid and free AI models, and a question may be answered by either. Free models are often offered on the condition that the provider may store the text it receives and use it to train future models, and a few say they may publish it. We do not control what a provider does with text once it has it. What we do control is what goes: the schoolwork itself, and never who the student is. If you are not comfortable with this, do not use the tutor or the marking, and tell us so we can remove the account.
What we ask for
A name, a username, a date of birth, a gender, a WhatsApp number, and the grade, stream and language a student studies in. Optionally an address, a school name, a town, a school ID number and a profile picture. Accounts made before September 2026 have an age instead of a date of birth until one is entered.
Sign-in is handled by Neon Auth, which holds the email address and password — we never see a password. Signing in with Google is optional; if used, Google tells Neon Auth the name and email on the Google account and nothing else.
Young children's accounts are held by a guardian. A parent or guardian creates the account for a child below Grade 8 and signs in for them. From Grade 6 the guardian can hand the account to the child by entering an email address for them; a single-use link is sent to that address, and the guardian keeps sight of the account until the child reaches Grade 8. The child's work stays exactly where it was.
What is sent to AI services
The tutor answers by sending the student's question, the recent questions of that sitting, and extracts from the course material to an AI provider. Today the providers are reached through OpenRouter and similar services, and the list is chosen by the administrator. Marking works by sending the photograph of the work to an AI model that reads it. Lessons, practice questions and daily tasks are generated from textbook material, not from the student's words, and are shared between students of the same grade and subject.
We never send who the student is. No name, username, email, phone number, date of birth, school, address, or even an internal ID goes with a question. The AI service receives the schoolwork and nothing that identifies the child. This is enforced by an automated test that fails if anybody tries to add one.
But what a student types or photographs cannot be filtered. If a student writes their name in a question, or writes their name, school or class on a page and photographs it, those words go with it. We ask the AI not to read or repeat them, and they are not stored in the marking — but they are still sent, and a free provider may keep them. This is why the tutor and the upload screen ask students not to include personal details.
Speaking to the tutor, and hearing it
A student can speak a question instead of typing it. In most browsers the recording goes to the browser's own speech service (Google's for Chrome and Android, Apple's for Safari) to be turned into words, and the student is told this and asked to agree before the microphone is used the first time in a sitting. The words then go to the AI service like a typed question. In a browser with no speech service, our own server turns the recording into words and nothing leaves for that step.
Reading a lesson aloud happens on our own server. The voice models are downloaded once from Hugging Face; no student text is sent there.
Where information is stored, and for how long
In a database hosted by Neon, in Singapore. Uploaded files — photographs of work, profile pictures, course material — are stored on the server running this app, in Sri Lanka. Traffic between your browser and that server passes through Cloudflare, which carries it and does not keep it.
Tutor conversations are kept for twelve hours so the tutor can follow a sitting, then deleted. What is kept longer is the record of study: which subjects, which topics were completed, marks, daily tasks, practice results, study time, points and badges, and the record of a previous grade when a student moves up. That record is the student's own history and is kept for as long as the account exists.
Notes a student writes in their Notebook are private to them. Nobody else can read them, and they are never marked or sent to an AI service.
We send email for three reasons: sign-in and verification (sent by Neon Auth), notices from the administrator such as a package being enabled or a term starting, and the handover link described above. Notices carry an unsubscribe link and we honour it. Our own mail is sent through Resend from biqib.com. We do not send marketing to children.
Cookies and what the browser remembers
Neon Auth sets a session cookie so a student stays signed in. The app itself stores a few preferences in the browser only: the chosen theme, which child a guardian last opened, and whether a demo is being viewed. We use no advertising or tracking cookies.
What we do not do
We do not sell anything to anybody. We do not use advertising or tracking services. We do not record a student's questions to a third-party analytics service — a tool for that exists in the code and is switched off, and it cannot be switched on for a public deployment without a separate, deliberate setting.
Who can see a student's work
The student, their guardian while the guardian holds or oversees the account, and an administrator of this platform. Students cannot see each other's work, marking, notes or progress. Lessons are shared between students in the same grade and subject; practice, marking, notes and progress are personal.
Your rights, and deleting an account
A parent, guardian or student can ask what is stored about a student, ask for a mistake to be corrected, and ask for the account and everything belonging to it to be erased. Erasure removes the work too, and it is removed rather than hidden; the sign-in itself is then removed by the administrator in Neon Auth. Write to info@biqib.com.
One thing we cannot undo: anything already sent to an AI provider to answer a question has been sent, and that provider's own rules apply to it — including, for free providers, keeping it.
Children
This app is built for schoolchildren, including young ones. A child below Grade 8 uses it through an account a parent or guardian holds. If you are a parent and you do not want your child's written or spoken work sent to AI services outside Sri Lanka, or possibly kept by a free one, do not use the tutor or the marking feature — and tell us, so we can remove the account.
Changes
When what the app does changes, this page changes with it, and the date at the top moves. A change that sends more than before is a change we will also tell account holders about by email.
Questions
Write to info@biqib.com, or ask the administrator who gave you access. They can tell you what is stored about a particular student and remove it.