Tolib Privacy Policy
In short
- Tolib keeps what you put into it and what it needs to work for you: your account, your study setup, your tasks and marks, your practice and your settings.
- You can export everything, or delete your account, in Settings › Your data.
- Tolib uses your data to run Tolib for you.
Who is responsible
The controller of your personal data is “FAZON ED” LLC (limited liability company), TIN 312140627, 64 Oloy Bozori Berk Street, Buyuk Turon mahalla, Yunusobod district, Tashkent, Uzbekistan · hello@tolib.app.
What Tolib stores and why
| Data | Where it comes from | Why | How long |
|---|---|---|---|
| Your Telegram account: Telegram ID and first name | Telegram, when you sign in | To sign you in and address you | While your account exists |
| If you sign in with Apple (iPhone app): an Apple user ID, and the name and email address Apple shares if you choose to (the email can be a private relay address) | Apple, when you sign in | To sign you in | While your account exists |
| Phone number (optional) | Only if you tap Share in Telegram’s own prompt | Account recovery and signing in outside Telegram | Until you remove it in Settings › Account or delete your account |
| Language, time zone and the goals you pick | You | To show Tolib in your language and plan around your day | While your account exists |
| Your answers during setup (for example when and how you like to study, the subjects you focus on, the AI app you use) | You | To set up your plan | While your account exists |
| University, school, programme, year and group | You, or the link you opened | To set up your week and your courses | While your account exists |
| How you came to Tolib (the link or page you opened) | The link | To learn which ways in help students | While your account exists |
| Acceptance of these Terms: the version and the time | The app, when you continue past the first screen | To record that you accepted the Terms | While your account exists |
| Devices you sign in on (type, name, first and last use) | The app | To keep you signed in and let you sign out other devices | 30 days from when you sign in on that device |
| Push token (Tolib apps for iPhone and Android only) | Your phone, when you allow notifications | Only to deliver your notifications | Until you turn notifications off, sign out or delete your account |
| Technical logs kept by our hosting provider: network address, browser or app type, and the page or request path | Automatically, when you use Tolib | To keep Tolib running and secure | 30 days |
| Tasks and deadlines you add or accept, with your notes | You | To build your plan | Until you delete them or your account |
| Marks you enter | You | To show where you stand | Until you delete them or your account |
| Practice: your sessions, answers, mistakes, review schedule, the items you create and the problems you report | You, as you practise | To mark answers, plan reviews and show your progress | Answer text: 180 days, then only whether it was right and the learning record. The rest: while your account exists |
| Message settings and history (what Tolib sent and when) | The app | To send only the messages you allow, when you allow them | While your account exists |
| Summary settings and the offers you dismissed | You | To show your Summary the way you set it | While your account exists |
| Your connected AI: which AI you connected, the permissions you gave, and what it read or changed. It can read only what you allow: your schedule, tasks and practice; grades and Home only if you turn them on | You, when you connect it | To run the connection and let you undo its changes for 24 hours | Until you disconnect it or delete your account |
| Usage events: the screens you open and the buttons you tap, recorded under a pseudonym. Never what you type, your answers, file names or searches | The app | To find what helps and fix what doesn’t | 13 months, then only weekly totals with no personal data |
| Export history | The app | To deliver your export | While your account exists |
Tolib does not store files you upload at the moment. This policy will be updated when that changes.
On tolib.app
- When you tap Open in Telegram or Open in browser on a page, the page sends only the ids of the university, school, course or practice set, and gets a short code that lasts 7 days. It sends nothing about you.
- To prevent abuse, a coded form of your network address is kept for one hour.
- Page visits are counted with Cloudflare Web Analytics.
Who receives your data
- Service providers that run Tolib for us: Google Cloud (hosting and database, in Belgium), Cloudflare (the website and its domain) and Telegram (sign-in, the messages you allow and delivering your export). On iPhone and Android, Apple and Google deliver notifications to your phone. They process data only to provide their service to us.
- AI: Tolib does not send your data to an AI provider of its own.
- Your own AI: when you connect an AI such as ChatGPT, Claude or Gemini, it receives only what you allow in Settings › Your AI, and only when it asks. A connection lasts 1, 7 or 90 days, as you choose, and you can remove it at any time. That service handles what it receives under its own terms.
- Your class: nothing is shown to your class unless you choose to share an item.
- The law: Tolib discloses data when the law requires it.
Where your data is stored
Your data is stored in Belgium, in the European Union.
How long Tolib keeps it
- Your account data: while your account exists.
- The text of your practice answers: 180 days; after that only whether it was right and the learning record.
- Usage events: 13 months; after that only weekly totals with no personal data.
- Sign-in on a device: 30 days. Technical logs: 30 days.
- Codes made on tolib.app: 7 days. The coded network address: one hour.
- After you delete your account: everything is deleted when the 14-day undo period ends. Backups are kept for 7 days, so the last copy is gone within 7 days after that.
Your choices and rights
- Export: Settings › Your data › Export gives you one file with everything Tolib stores about you, in Telegram or as a download, up to 3 times a day.
- Delete: Settings › Your data › Delete my account. You can undo for 14 days; after that your data is deleted. See Delete your account.
- Messages: change or stop them in Settings › Notifications, or in Telegram.
- Your AI: narrow or remove its permissions at any time, and undo its changes for 24 hours.
- Your rights: ask for access, correction or deletion, or withdraw your consent, at hello@tolib.app. You can also complain to the state authority responsible for personal data.
Age
During the pilot, Tolib is for people aged 18 and over. If you are under 18, please don’t use Tolib yet.
Changes
Material changes are announced in the bot with a short summary.
Contact
“FAZON ED” LLC (limited liability company), TIN 312140627, 64 Oloy Bozori Berk Street, Buyuk Turon mahalla, Yunusobod district, Tashkent, Uzbekistan · hello@tolib.app