Privacy policy notice

Who we are

Mubta is an independent Saudi service that helps students plan for scholarships and studying abroad: from choosing a scholarship track and universities, to preparing their personal and educational information and filling it in with the Chrome extension, to following their university applications. We are not part of any ministry, scholarship provider or university. To reach us about privacy, use the contact page and choose «Privacy or my data».

The data we keep

We keep what you give us and what the service needs to work:

Account: your name, email, language, a securely hashed password, and, if you choose it, your two-step sign-in settings.
Sign-in with Google or Apple: the account identifier and email the provider shares when you link it. We never receive your Google or Apple password.
Your plan: your answers about your academic degree, field, scholarship program, track, countries and start date.
Your application information: personal details, contact details, passport details, education and language tests, references and documents you add to fill university forms.
Your applications: universities and scholarship applications, their statuses and history, application numbers, terms, deadlines, notes and checklists.
The community: your community profile, posts, comments and ratings, shown to others according to the visibility you choose.
Reviews: if you write one, your rating, your text, whether to show your name or stay anonymous, your consent to publish it and your plan at the time.
The newsletter: your email and language if you subscribe, and the date you confirmed. Every email has a link to unsubscribe.
Plans and payments: your plan and its dates, payment references, amounts and statuses, the mobile number you entered for the payment, the bank account or wallet you chose to transfer to, the transfer receipt you upload (kept privately, seen only by the billing team), the promo code if you used one, and refund requests with their reasons. Card details are entered on the payment provider's page and never reach Mubta.
Usage: how much of your plan's limits you used (for example AI requests and forms filled), and the extra uses you bought and their balance, so we can apply your plan.
Messages you send us through the contact form or by email, our replies, and any files attached; if you join the partner program, your application, your bank details (encrypted) and your earnings; and, if you answer it at sign-up, how you heard about Mubta.
Security records: sign-ins, data exports and other sensitive actions, with the IP address and device they came from.

Before you create an account

If you answer the starting questions without an account, your answers stay in your browser for that visit only. They reach Mubta only when you create an account or sign in.

How we use your data

We use your data to build your plan and checklists, keep your applications, fill the forms you ask the extension to fill, send reminders and notifications you have not switched off, answer your messages, apply your plan and keep the service secure. We do not sell your information, we do not show advertising and we do not use it for anything unrelated to the service.

Artificial intelligence

Some features use an AI model provided by Google (Gemini). Only what the feature needs is sent, when you use it:

The assistant and AI writing, review and interview practice: the text and documents you choose to send.
University comparisons: the public details of the universities you compare and your question.
Smart filling in the extension: the labels of form fields the extension could not place by itself. Your own information is never sent for this.
Application sync in the extension: the text of the application page you chose to sync, to find its status, number, course, term and dates. Nothing is saved until you confirm it.

The Mubta Chrome extension

The extension has one purpose: helping you fill in university application forms and keep your applications in Mubta up to date. It works only after you link it to your account with a one-time code, and you can unlink it at any time from the extension or from «Linked browsers». It opens as a popup or in Chrome's side panel. What it does, and the Chrome permissions it uses:

«Read the page you are on» (activeTab, scripting): only when you press «Scan this page», «Sync this page» or choose «Sync this application with Mubta» from the right-click menu. It then fills only the fields you approve, and it never submits a form for you. Password, card and one-time-code fields are always skipped.
Storage: keeps, on your browser only, the link to your account, your settings, the list of your universities' website domains and, while the browser is open, a copy of your profile for filling.
Tabs: compares the address of the tab you are on with your universities' domains, on your browser, to show a ✓ on the extension's icon. Addresses are not sent to Mubta or stored.
Optional access to your universities' websites: only if you turn on the notice on university websites, and only for those domains, to show a short notice on their pages.
«Context menus»: adds «Sync this application with Mubta» to the right-click menu.
Alarms and Notifications: every 15 minutes it asks Mubta for your new notifications and shows them as desktop alerts. You can switch alerts off in the extension's settings.
When you fill or sync on a university's own admissions website and that university has no admissions page in Mubta yet, its address (the site only, never your page) is added to the university's public information.
«Side panel»: shows the same screens beside the page you are filling. While it is open it follows the tab you are on, to show the right application.
Attaching documents: when you press Attach beside a file field, the extension downloads that one document from your Mubta profile and puts it into the field in your browser. Nothing is attached without your click, and the file goes only to the form you chose.
Buttons beside fields and the page toolbar (optional, on your universities' websites only): show your matching information beside each field to insert or copy, fill empty fields, undo a fill and show required fields still empty. You can hide them for a site, or switch them off in the extension's settings.
Learning field names: after a fill, the extension sends Mubta the names of the form fields (for example «Name of awarding body») and which item of your profile filled each, but never the values you filled. Once several members choose the same item for a name on a university's website, every member is offered it. Names nothing matched are counted, so we can improve matching.
The sync reminder (on your universities' websites you allowed): when a page loads, the extension checks its words, on your browser, for signs of a submitted application or its status, and may offer to sync it. The page is sent to Mubta only if you press «Sync now».
On your browser only, never sent: the history of your fills for each application (when and on which page), the choices you made for field names on each site, and your settings.
The extension does not collect your browsing history, does not sell or share your information, does not use it for advertising or credit decisions, and only sends to Mubta what is described here. The use of information received through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.

External services we use

Trusted providers process information only to deliver their part of the service:

Hosting and backups: Mubta's servers and their encrypted backups.
Resend: delivers account and notification emails.
Google: the AI features above, sign-in with Google if you use it, and reCAPTCHA on some forms to stop automated misuse.
Apple: sign-in with Apple if you use it.
Tuwaiq Pay: processes online payments. Bank and e-wallet transfers go directly to Mubta's accounts.
WhatsApp: if you contact us there, your conversation is also covered by WhatsApp's privacy policy.
Cloudflare R2, when enabled: stores files members upload, such as profile pictures.
YouTube (privacy-enhanced mode) for videos, OpenStreetMap for maps, and Google's document viewer to show a university's guide on a phone. They receive only what they need to show it, when you open it.
The Saudi Business Center, whose verification badge on our pages confirms our registration as a verified store.

Cookies and browser storage

Mubta uses only the cookies and browser storage it needs to work: to keep you signed in, protect forms and remember your choices. We do not use advertising or analytics cookies. The cookie policy lists them.

Your data that others can see

Your account, profile and applications are private: nobody else sees them. Your community profile, posts and comments are visible to others only when you turn them on, with the visibility you choose. A review you write shows on the reviews page only after you agree to it being shown when you write it and after our team approves it, with your first and last name or as «A Mubta member», as you chose, and your plan. Mubta staff see your information only when needed to help you or keep the service safe, and their access is recorded.

How do we protect your data?

Connections are encrypted, passwords are hashed, integration keys are encrypted, staff accounts use two-step sign-in, and sensitive actions are logged. No method is perfect, so we also ask you to keep your password private and turn on two-step sign-in.

Students under 18

Some school students use Mubta to prepare for a scholarship track. If you are under 18, use Mubta with your parent or guardian, who may also create the account and answer for you.

How long we keep your data

We keep your data while your account is active. When you delete it, your data, plan, applications, deadlines, checklists and community profile are deleted, but your posts in the community may stay without your name so discussions stay readable. Support conversations (contact-form messages and emails, with their files) are deleted 180 days after they are closed. Payment records are kept as long as the law requires. Encrypted backups are kept for about four months and then deleted.

Your choices and rights

You can see and correct your information in the app, download all of it from «Data and privacy», unlink Google, Apple or the extension, switch notifications off, and delete your account at any time. For any other request about your data, contact us and choose «Privacy or my data».

Changes to this policy

We update this policy when what we do with information changes, and show the date of the current version at the top of this page. Important changes are also announced in Mubta.