Privacy Policy

BellRinger™ is a product of Blacklink, Inc. We are committed to protecting user privacy, especially in educational environments. This Privacy Policy explains what BellRinger collects, what it does not collect, and how data is used.

What BellRinger™ collects

BellRinger collects limited, aggregate, anonymous usage analytics to improve product functionality and reliability. Examples include:

How often Simple Mode is enabled or disabled
How often specific widgets are hidden or restored
Theme usage totals
Feature usage counts (for example, opening settings or viewing schedules)

This data is stored as aggregate totals only, not individual activity histories.

What BellRinger™ does NOT collect

BellRinger is designed to minimize data collection. BellRinger does not intentionally collect or store:

Names
Student IDs
Class schedules linked to individuals
Email addresses (unless you create an account — see below)
Precise location data
Browsing history outside of BellRinger
Keystroke data
Biometric data
Device fingerprints

BellRinger analytics do not use unique personal tracking identifiers. BellRinger analytics do not store IP addresses as part of analytics data.

Optional account sync

If you choose to create an account, BellRinger stores:

Your email address
A secure password hash (never your actual password)
Your saved settings and configuration data

This allows cross-device sync and account-based features. Accounts are optional. BellRinger accounts are managed locally by the BellRinger server operator.

Administrative access

BellRinger administrators may have access to:

Account email addresses
Aggregate analytics
System configuration

Administrators cannot view personal analytics histories because BellRinger does not store individual analytics histories. Certain administrative privileges may be restricted to master administrators.

How analytics work

BellRinger analytics are designed to be anonymous and minimal. Analytics events are sent to /api/analytics, stored as aggregate counters, and rate-limited client-side to prevent excessive reporting.

Analytics are used only to improve features, identify usability issues, and understand feature popularity. Analytics are not used for advertising or profiling.

Disabling analytics

You can disable analytics at any time via Settings → Data → Share anonymous analytics. When disabled, BellRinger stops sending analytics events from that device.

Data retention

BellRinger stores analytics as rolling aggregate totals. BellRinger may store limited system logs for operational purposes. Logs may be automatically deleted, manually cleared by administrators, or rotated periodically.

Account data is retained until you delete your account or an administrator removes it.

Data storage and hosting

BellRinger data is typically stored on servers operated by your organization, or on servers operated by Blacklink, Inc. Storage methods may include local databases, self-hosted infrastructure, or secure cloud services.

Children's privacy

BellRinger is designed for use by schools and educational organizations. BellRinger does not intentionally collect personal information from students. Student privacy is protected by design.

Security

BellRinger uses reasonable technical measures to protect data, including password hashing, access controls, and administrative permission systems. No system can guarantee absolute security.

Changes to this policy

This Privacy Policy may be updated periodically. The "Last updated" date will reflect the most recent revision.