templ — Privacy Policy
Effective date: 8 October 2026 Last updated: 8 October 2026
This policy explains what information the templ app ("templ", "we", "us") collects, why, who we share it with, and the choices you have. It applies to the templ Android app and to any website or service that links to this policy.
templ is operated by Synlabs, Hydel Road, Robertsganj, India. For the purposes of India's Digital Personal Data Protection Act, 2023 ("DPDP Act"), we are the Data Fiduciary for the personal data described here. Where the EU/UK GDPR applies, we are the controller.
The short version
- Your notes, flashcards, tasks, books and drawings are stored on your phone. We do not upload them to our servers.
- When you use an AI feature, the text (and any image) you send goes through our server to an AI provider so it can answer. We do not use it to train models, and we do not sell it.
- Signing in is optional. If you sign in with Google, we keep a small account record (your account ID, plan, and AI usage counters).
- Backups go to your own Google Drive, only when you ask.
- We do not show ads and do not use advertising or analytics trackers.
1. Information we collect
1.1 Information that stays on your device
The following is created and stored locally in the app's private storage on your phone. It is not sent to us unless you choose a feature described in 1.3:
- Notes, flashcards, review history and spaced-repetition schedules
- Tasks, reminders, calendar entries and study activity
- Books and documents you import (EPUB, PDF, text), highlights and reading progress
- Drawings, slides and exported images/videos
- Chat history with the AI assistant
- App preferences (theme, reader settings, notification settings)
You can delete this data at any time by deleting it in the app, clearing the app's storage, or uninstalling the app.
1.2 Account information (only if you sign in)
Signing in with Google is optional. If you sign in, we receive from Google, via Firebase Authentication:
- Your Google account identifier, name, email address and profile photo URL
- A Firebase user ID that we create for you
In our database (Google Cloud Firestore) we store against that user ID:
- Your plan (free / Plus / Premium) and when the account record was created
- Subscription entitlement: product, expiry date, status, and a one-way hash of the Google Play purchase token (used to match renewals and cancellations to your account)
- AI usage counters: number of AI tokens used in the current window, daily call counts and the estimated cost of those calls. These are numbers, not the content of your messages.
1.3 Content you send to AI features
When you use AI features (chat assistant, note and flashcard generation, quizzes, curriculum and lesson building, reading help, simulations, web search), we send the following to process your request:
- The prompt or question you type
- The parts of your notes, book text, chat history or curriculum that the feature needs as context
- Images you attach, including photos you take with the camera for that purpose
- Your sign-in token, so we can apply your plan's usage limits
This content passes through our servers (Google Cloud Functions) and is forwarded to the AI provider listed in Section 3. We do not store the content of your AI requests or responses on our servers, beyond transient operational logs that may capture error messages for up to 30 days.
1.4 Purchases
Payments are handled entirely by Google Play. We never see your card, UPI or bank details. Google Play tells us which product you bought, its status and its renewal or expiry date, which we use to unlock paid features.
1.5 Device permissions
| Permission | Why we ask |
|---|---|
| Notifications, exact alarms, run at startup | To deliver study reminders and task alarms you set, including after a reboot |
| Camera (only when you tap to take a photo) | To attach a photo to an AI chat |
| Photos / files (system picker) | To import books, documents and images you choose; to save drawings to your gallery |
| Internet | For sign-in, AI features, backups and downloads |
| Vibration | Haptic feedback |
We do not collect your location, contacts, call logs, SMS, microphone audio, or advertising ID.
1.6 Information we do not collect
We do not use advertising SDKs, third-party analytics, or crash-reporting services that profile you. We do not track you across other apps or websites.
2. Why we use your information (and our legal basis)
| Purpose | Data used | Basis |
|---|---|---|
| Provide the app's features | On-device data | Runs on your device; no processing by us |
| Create and secure your account | Account information | Your consent when you sign in (DPDP s.6) / contract (GDPR 6(1)(b)) |
| Answer AI requests | Content you send to AI features | Your consent each time you use the feature / contract |
| Enforce fair-use limits per plan | AI usage counters | Legitimate use for the service you requested (DPDP s.7) / legitimate interests (GDPR 6(1)(f)) |
| Unlock and maintain subscriptions | Purchase information | Contract; compliance with tax and consumer law |
| Back up and restore your data | Your backup file | Your consent when you start a backup |
| Prevent abuse and keep the service secure | Account ID, usage counters, logs | Legitimate interests / legal obligation |
| Respond to your requests and complaints | Your messages to us | Legal obligation / consent |
We do not use your personal data for advertising, and we do not sell it.
3. Who we share information with
We share personal data only with the service providers below, who process it on our behalf to run templ:
| Provider | What they receive | Purpose | Where |
|---|---|---|---|
| Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Storage, Hosting) | Account information, entitlement, usage counters; AI requests in transit | Hosting our backend | USA (Google Cloud us-central1) |
| Google Gemini API (via Firebase AI Logic) | AI request content, including attached images | Generating AI responses; web search grounding through Google Search | Google global infrastructure |
| OpenRouter, Inc. and the model providers it routes to | AI request content | Generating AI responses | USA and other countries |
| Google Play | Purchase information | Payments, subscriptions and refunds | Google global infrastructure |
| Google Drive (your own account) | Your backup file | Backup and restore, only when you ask | Your Google account |
We have configured these providers so that, where they offer the option, your content is not used to train their models.
We may also disclose information if required by law, court order or a government request we are legally obliged to follow, or to protect the rights, safety or property of our users or others. If templ is merged or sold, your information may transfer to the new owner, who will remain bound by this policy or will give you notice before it changes.
4. International transfers
Our servers and several providers are located outside India, mainly in the United States. We transfer data only to countries the Government of India has not restricted under Section 16 of the DPDP Act. For users in the EU/UK, we rely on the providers' Standard Contractual Clauses or equivalent safeguards.
5. How long we keep information
| Data | Retention |
|---|---|
| On-device data | Until you delete it or uninstall the app |
| Account record, plan and entitlement | While your account exists; deleted within 30 days of an account deletion request |
| AI usage counters | Rolling window; daily cost records up to 12 months, then deleted |
| AI request content | Not stored by us. Providers may keep it briefly for abuse monitoring under their own terms |
| Server error logs | Up to 30 days |
| Purchase records required by tax law | As long as Indian tax law requires (generally up to 8 years), in a form not linked to your app content |
| Drive backups | In your Google Drive until you delete them (the app keeps your most recent backups and removes older ones it created) |
6. Your rights and choices
Depending on where you live, you have the right to:
- Access a summary of the personal data we hold about you and who we shared it with
- Correct or update inaccurate data
- Erase your data and delete your account
- Withdraw consent at any time. This does not affect processing already carried out
- Nominate another person to exercise these rights if you die or become incapacitated (DPDP s.14)
- Raise a grievance with us, and then with the Data Protection Board of India (or your local data protection authority in the EU/UK)
- Object to or restrict processing, and data portability (EU/UK)
How to exercise them:
- Delete your account: Settings → Account → Delete account in the app, or visit https://synlabs.tech/templ/delete-account, or email us (Section 9).
- Sign out / stop syncing: Settings → Account → Sign out.
- Export your data: Settings → Backup creates a full copy of your on-device data.
- Stop AI processing: do not use AI features. Everything else works offline.
We respond within 30 days (sooner where the law requires). We may need to verify your identity first.
7. Children
templ is a learning app and may be used by students. Under the DPDP Act, a "child" is anyone under 18.
- If you are under 18, you may use templ only with the consent of a parent or legal guardian.
- We do not track, behaviourally monitor or show targeted advertising to anyone, including children.
- If you believe a child has given us personal data without consent, contact us and we will delete it.
templ is not directed to children under 13.
8. Security
We protect data with encryption in transit (HTTPS/TLS), Google Cloud's encryption at rest, sign-in tokens checked on every server request, and database rules that let each user read only their own record and let only our server write plan and billing information. Data on your phone is protected by Android's app sandbox. No system is perfectly secure. If a personal data breach affects you, we will notify you and the Data Protection Board of India as the law requires.
9. Contact and Grievance Officer
Grievance Officer (Information Technology Rules, 2011 r.5(9) and DPDP Act s.8(10)): Avii, Grievance Officer Hydel Road, Robertsganj Email: hello@synlabs.tech Hours: Monday–Friday, 10:00–18:00 IST
We acknowledge complaints within 24 hours and aim to resolve them within 15 days.
10. Changes to this policy
We will post any change on this page and update the "Last updated" date. If a change materially affects how we use your personal data, we will notify you in the app before it takes effect and, where required, ask for your consent again.