Privacy Policy — Temelie

1) Who provides Temelie

Temelie is provided by Saifullah Ahad. Temelie helps a primary-school child and one trusted adult (a parent, guardian or teacher) find where the child's math needs to start, and plan one short activity to do together.

Privacy contact: [email protected]
Website: https://saifullah.ai
Location: Dhaka, Bangladesh

2) No child account or public community

Temelie has no child-facing sign-up, public profile, search, follower system, stranger matching, class roster, or chat. A helper creates a device-bound learner space and gives its one-time code directly to a learner they already know. The learner receives only a credential scoped to that space.

3) Information Temelie processes

• Helper device security: a random device identifier, a public cryptographic key, and a hashed recovery secret. The private signing key remains in Android Keystore.
• Learner-space data: a short name or nickname chosen by the helper, hashed pairing credentials, role, and creation time. Temelie does not ask for a surname, date of birth, school, address, contact list, or location.
• Diagnostic evidence: mathematics item identifiers, the selected answer, a skip or “I do not know”, and event time. These are used to suggest a starting point. Learners are not assigned a grade, score, rank, percentage, or comparison.
• Helper evidence: one of four session outcomes (got it; got it, then lost it; not yet; we could not try it) and an optional short note.
• Optional shared content: learner work or a helper note typed by a user, plus reports or block actions submitted for safety.
• Notifications: a Firebase Cloud Messaging installation identifier when notifications are enabled.
• Abuse prevention: one-way hashes derived from connection addresses, short-lived request nonces, event identifiers, and timestamps used for replay protection and rate limiting.

4) Why this information is used

We process this limited information to create and pair a learner space, synchronise evidence between the two known participants, recompute the prerequisite starting point, deliver the helper’s next action, send requested update notifications, honour deletion/blocking, investigate reports, and protect the service from replay or abuse. We do not use it for advertising, profiling across apps, school reporting, selling data, or automated marketing.

5) Service providers and transfers

• Cloudflare: Worker, Durable Objects, and D1 operate Temelie’s API, synchronisation, and encrypted-at-rest cloud records. Cloudflare also processes ordinary request/network metadata needed to deliver and protect the service. See Cloudflare’s Privacy Policy.
• Google Firebase Cloud Messaging: when updates are enabled, Google processes a Firebase installation ID, notification registration credentials and technical app/client metadata to register this app installation and deliver notifications. A Temelie update notification contains the learner-space identifier, not the learner name, answers or notes. See Firebase Privacy and Security and Firebase Android data disclosures.

Data may be processed in countries where these providers operate. All app-to-service traffic uses HTTPS. We do not sell personal information and do not share it for advertising.

6) Local storage and app lock

Temelie keeps learner spaces, diagnostic events, helper cards, shared work, reports, settings, and pending offline changes in Android app-private storage. Android backup is disabled. An optional Temelie-only PIN is stored as a salted one-way hash. Optional biometric unlocking is handled by Android; Temelie never receives biometric data.

For each student, Temelie automatically records a random local study identifier, age band, language and app/content/engine versions; check-in times, question identifiers, answer order and choices, foreground time and read-aloud use; suggested cards; guided-practice attempts, choices, correctness, resets and completion; and helper outcomes. These records support reviewing how the check and activity went. They stay in the phone's private database, are never uploaded automatically, and are deleted with the student. An adult can choose to export local records. Copies already exported to another location must be deleted there.

7) Retention and deletion

• One-time join codes expire after 10 minutes and become unusable after the learner joins.
• Active learner-space data remains until the helper deletes that student. Deletion removes the student's events, shared work, notification registrations, block records and safety reports.
• Deleted-student records on the service: a row remains with the space ID, helper-device ID, hashed join code, join-code expiry, and creation/deletion timestamps. The learner name is replaced by “Deleted learner” and the learner credential is cleared. This row has no automatic deletion and can be removed on a verified support request.
• Helper-device security records: the random device ID, public key, recovery-secret hash, creation and last-seen times, and any disabled-at time have no automatic deletion. They can be removed on a verified support request.
• Safety reports: kept for up to 180 days and deleted when their student is deleted.
• Temelie push registrations: removed within 90 days after their last refresh.
• Google's installation record: separate from Temelie's push registrations. Firebase retains installation IDs until its customer requests deletion through its API, then removes them from live and backup systems within 180 days. Clearing Temelie locally or switching its notifications off does not make that API request. See Firebase's retention information.
• Expired replay nonces and rate-limit records are routinely removed.

Helpers can delete a selected cloud student. Delete everything on this phone clears local student records, preferences, the app PIN and lock settings, pending joins and Temelie's device keys; it does not delete cloud students. Delete those students first if their online copies should also be removed. Full instructions are at Temelie data deletion.

8) Your controls

• Notifications are optional and can be disabled in Temelie or Android Settings.
• Either participant can report each shared item and block the paired connection.
• The helper can delete a learner space; users can erase all local data.
• The About screen’s feedback action opens the user’s email app. Temelie itself does not transmit that email.

9) Children, parents and teachers

Temelie is made for primary-school children who are learning math, always together with a trusted adult: a parent, guardian or teacher. The adult sets it up: they create the learner space, choose a first name or nickname for it, and decide whether the child answers on the adult's phone or on the child's own phone. Before a child can use their own phone, the adult confirms in the app that they are the child's parent, guardian or teacher and allow it. There is no child sign-up, no public profile and no contact with strangers.

What Temelie collects from a child: the nickname the adult chose; which questions were answered, the answer chosen, a skip or “I do not know”, and the time; and, only if the child chooses to write one, a short note for their own helper. The phone also keeps the local study records described in section 6, including the chosen age band, practice attempts and read-aloud use. Temelie does not ask a child for a surname, birth date, school, address, phone number, photos, contacts or location, shows no ads and uses no advertising identifier.

Where it goes: shared-phone records are never uploaded automatically; an adult can choose to export local records as described above. When the child uses their own phone, answers and notes pass through our service to their one helper. Notes stay off until a parent, guardian or teacher turns them on, once, on the phone where the notes are written, by typing their year of birth; that year is checked on the phone and is not saved or sent. Before a child can write a note, Temelie reminds them to stay safe online and never to share personal details. Read aloud uses a voice stored on the phone; the question text is not sent anywhere.

Parents' and teachers' choices: a parent, guardian or teacher can see the child's answers and notes in the app, turn notes off in Settings, stop further use at any time, delete the learner space in Temelie, or ask us to delete it by following Temelie data deletion or by writing to [email protected].

We maintain zero tolerance for child sexual abuse and exploitation. Read our separate Child Safety Standards.

10) Security

Temelie uses TLS, scoped learner credentials, P-256 signed helper requests, replay nonces, rate limits, Android Keystore, idempotent event identifiers, least-privilege cloud access, optional app lock, reporting, blocking, and deletion controls. No system can guarantee absolute security; report a concern to the contact above.

11) Changes and contact

Material changes will be posted at this URL with a new effective date. Questions, access concerns, or deletion requests can be sent to [email protected].