Privacy policy

• Account details: your email address and display name, and your password stored only as a scrambled fingerprint (an Argon2 hash). We can’t see or recover your password.
• Sign-in sessions: when you sign in, your browser gets one cookie holding a random code. We store a scrambled version of that code, and when the session started, was last used and expires (30 days after you last use it).
• Check records: for each check, the time, whether it succeeded, failed or was over a daily limit, how much text was processed (in “tokens”) and what it cost us. Not the text itself, the prompt or the results.
• Rubric scan records: for each scan, the time, the outcome (for example read, not a rubric, or over the weekly limit), how many photos it had, how much was processed and what it cost us. Not the photos or the rubric.
• Sign-up network: when you create an account, we keep a scrambled, keyed version of your internet (IP) address, so we can limit how many accounts are created from one network each day. We don’t store the address itself.

Our hosting provider records technical details of requests, such as the time, the address requested and the IP address, for security and troubleshooting. Our own logs record how much each check cost and never contain your draft text.

Your assignments, drafts, prompts, check results and the rubrics you create are saved in your browser’s storage on the device you use, kept separately for each account. We can’t see them. Your theme and sidebar preferences are saved there too.

They stay until you delete them in Settings, delete your account on that device or clear your browser’s data. Drafts saved on one device aren’t available on another. You can download a copy from Settings (“Export my data”).

If you upload a .docx, .pdf or .txt file, it’s read in your browser. The file itself isn’t sent anywhere; only its text is sent when you check it, as if you’d pasted it.

To score a draft, we send its text, the assignment prompt you entered (if any) and the rubric’s questions and level descriptions (never the tips) from your browser to our server. Our server sends them to Vercel AI Gateway, which passes them to TypeSafe AI’s Jev model. Jev returns scores and probabilities only; it can’t write text.

We ask Vercel AI Gateway to use only providers that don’t train AI models on the data they receive. We don’t store or log the text on our side. Vercel and TypeSafe AI handle the request under their own terms and privacy policies, which govern whether and for how long they keep request data.

Please don’t put information in a draft that you don’t want sent for scoring, such as other people’s personal details.

If you use “Scan a rubric”, the photos you choose (up to three, made smaller in your browser first if they’re large) are sent from your browser to our server. Our server sends them to Vercel AI Gateway, which passes them to Google’s Gemini model. Gemini reads the rubric and returns it as text, with suggested questions and tips that the app marks as “Suggested”. It only ever receives rubric photos, never your drafts.

As with drafts, we ask Vercel AI Gateway to use only providers that don’t train AI models on the data they receive, and we don’t store or log the photos or the rubric on our side. The rubric you save is kept in your browser like your other rubrics. Vercel and Google handle the request under their own terms and privacy policies, which govern whether and for how long they keep request data.

A photo can show more than the rubric. Please crop out names, scores and anything else you don’t want sent.

• To run Rubriqly: signing you in, scoring drafts, reading rubric photos and showing your account.
• To keep accounts secure, for example by limiting wrong password attempts.
• To prevent abuse and control costs, for example with limits on sign-ups, checks and rubric scans.
• To understand what running the service costs.

We don’t use your information for advertising, we don’t sell it and we don’t use it to train AI models.

We use these service providers, only to run Rubriqly:

• Render: hosts the website and our server (United States).
• Neon: hosts our database (United States, on Amazon Web Services).
• Vercel (AI Gateway): passes draft text to the scoring model, and rubric photos to the model that reads them.
• TypeSafe AI: runs the Jev scoring model.
• Google: runs the Gemini model that reads rubric photos, when you scan a rubric.

The website’s fonts and code are served from Rubriqly’s own site; your browser doesn’t contact other companies to load them. We may also share information if the law requires it, or to protect Rubriqly’s users or the service from harm.

The website links to Rubriqly’s source code on GitHub. If you visit GitHub, open an issue or send a security report there, GitHub’s own privacy policy applies, and issues and comments you post there are public.

Rubriqly sets one cookie, called rubriqly_session, which keeps you signed in. It’s needed for the service to work, can’t be read by the website’s scripts, and is sent only to our server. We don’t use advertising or tracking cookies. Browser storage is used as described under “What stays on your device”.

• Account details, check and rubric scan records, and the sign-up network record: until you delete your account.
• Sign-in sessions: until you sign out, or 30 days after you last used them.
• Draft text sent for scoring: we don’t keep it after the check finishes.
• Rubric photos sent for scanning: we don’t keep them after the scan finishes.

When you delete your account, it’s removed from our database straight away, together with your sessions, check records and rubric scan records. It may remain for a short time in our database provider’s automatic backup history before being overwritten.

• Change your display name or password in Settings.
• Download or delete the drafts, results and rubrics saved on a device in Settings.
• Delete your account in Settings. This removes your account, sessions, check records and rubric scan records from our servers, and your saved work from the device you’re using. Work saved on other devices stays there until you delete it on each one.
• Ask us what information we hold about you, or ask us to correct or delete it, by emailing contact@rubriqly.com.

You must be 13 or older to use Rubriqly. It isn’t meant for children under 13, and we don’t knowingly collect their information. If you believe a child under 13 has an account, email contact@rubriqly.com and we’ll delete it. If you’re under 18, please read this page with a parent or guardian.

Connections to Rubriqly are encrypted (HTTPS). Passwords and sign-in codes are stored only as scrambled fingerprints, and access to our systems is limited. No system is perfectly secure, so please use a password you don’t use anywhere else.

Rubriqly and its service providers process information in the United States. If you use Rubriqly from another country, your information will be transferred to and processed in the United States.

If we change how we handle information, we’ll update this page and the date at the top.

Questions or requests about your information: contact@rubriqly.com.