Privacy Policy
Last updated: October 27, 2026
This policy explains what data is collected when you use the Bilbol mobile app and the bilbol.az website ("Bilbol"), why it is used and how it is protected. Bilbol is a learning service for children, school students and university applicants, so we take particular care to collect as little data as possible.
1. Data controller
Bilbol is operated by the Bilbol team (Bakı, Azərbaycan). For any privacy question: [email protected].
2. Data we collect
| Data | When | Why |
|---|---|---|
| Email, first name, last name (optional), password | When you create an account | Signing in and keeping your results. The password is stored in a non-reversible form (hash). |
| Language, stage, grade, chosen subjects | When you set up the app | Showing suitable lessons and tests. |
| Test attempts, answers, results, XP, streaks, achievements, league position, gems, chosen sticker avatar | While you use the app | Showing progress, unlocking levels, daily quests and leaderboards. |
| A random device identifier created by the app | In guest mode | Keeping attempts made without an account and moving them to an account if you create one. It is not an advertising identifier and is not linked to a person. |
| Technical data: IP address, time of request, browser or app version | With every request (server logs) | Security of the service, abuse prevention and fixing errors. |
| Friend code (for example BIL-53122), friends list and friend requests | When you create an account and add friends | Finding friends and duelling them. A learner you play with for the first time becomes your friend automatically. |
| Duels: opponent, chosen subjects, questions, answers, answer times, result and duel rating | When you duel a friend | The live game, results and the 1/5/10/20/30-minute ratings. |
| Push notification token and online status | When you allow notifications and while the app is open | Telling you about friend requests and challenges while the app is closed, and showing friends that you are online. |
| Name and email for the beta test | When you fill in the beta form on the website | Sending you the test invitation. |
We do not collect: location, contacts, photos, microphone or camera data, advertising identifiers. The app contains no advertising, analytics or tracking services; your data is never sold or used for advertising.
3. What other users can see
In weekly leagues and leaderboards other users see your first name, the initial of your last name (for example "Aysel M."), your chosen avatar, your grade or age group and your points. A user who taps your name in the rating can open your profile and see your points per subject, the number of lessons you finished, your best streak and your number of achievements. You can turn this off at any time in the app: Profile screen, "Let others see my profile" switch. Your friends see whether you are online, and your duel opponent sees your questions, answers and result live. The duel rating shows your name, avatar and number of wins, draws and losses. Only someone you gave your friend code to can find you with it; there is no way to browse a list of learners. Your email and other details are never shown to anyone.
4. Children's privacy
- Children use Bilbol too. For children under 13 (or the age set by law in your country) the account must be created by, or with the consent of, a parent or legal guardian.
- Children can use guest mode without entering any personal data.
- The app has no advertising, no real-money purchases and no messaging between users. During a duel only ready-made emoji reactions can be sent; typing text is not possible.
- If we learn that a child's data was collected without parental consent, we delete it. Parents can ask to review or delete their child's data at [email protected].
5. Sharing
We do not sell or share your data with third parties. To run the service we use these technical providers:
- Hosting provider: the database and the application server.
- Cloudflare: domain, secure connection (HTTPS) and storage of question images and audio. These files contain no user data.
- Apple App Store and Google Play: distribution of the app, under their own privacy policies.
- Expo push service (through Apple's and Google's notification servers): delivering push notifications. A notification only contains the sender's name and the kind of invite.
Question audio is generated from question texts only; no user data is involved. Data may be disclosed to competent authorities where the law requires it.
6. Retention
- Account data is kept while the account is active.
- When an account is deleted, all its data is deleted immediately and from backups within 30 days at the latest.
- Server logs are kept only for the short time needed for security and fixing errors.
- Beta tester details are kept until the test programme ends, or deleted earlier on request.
7. Deleting your account and data
- In the app: Profile screen, Delete account button.
- On the website: the Delete account page.
- By email: write from your account address to [email protected].
8. Security
All traffic between the app and the server is encrypted (HTTPS). Passwords are hashed with Argon2. Access to data is limited to the person operating the service.
9. Your rights
Under the Law of the Republic of Azerbaijan "On Personal Data" and other applicable laws (including the EU GDPR) you have the right to access, correct (in the app's Profile screen), delete and obtain a copy of your data, and to object to its processing. Email [email protected] and we will reply within 30 days.
10. Changes
This policy may change. The new version is published on this page and the date at the top is updated. We announce significant changes in the app or on the website.
11. Contact
the Bilbol team, Bakı, Azərbaycan
[email protected]