Timivra Privacy Policy

Effective date: 12 October 2026 | Last updated: 12 October 2026

1. Introduction

This Privacy Policy explains how Fatiha One Limited, trading as Timivra (“Timivra”, “we”, “us”, or “our”) collects, uses, stores, discloses, and otherwise processes personal information when you visit our websites, create an account, use our productivity or study tools, purchase a subscription, participate in a referral programme, or contact us.

Timivra serves users in Nigeria, the United Kingdom, the United States, Canada, the European Economic Area (EEA), and other countries. Your rights and our obligations may differ depending on the law applicable to you.

Contact: info@timivra.com

2. Who is responsible for your information?

Fatiha One Limited is responsible for personal information processed in connection with Timivra, subject to the roles allocated by applicable law and the contracts governing particular services.

Some providers process information on our behalf. Other providers, including payment services, may separately determine certain processing purposes and means under their own arrangements. Their privacy notices may also apply.

3. Information we collect

The information collected depends on the features you use, your plan, your device, and your interactions with Timivra.

3.1 Account and profile information

Do not send your password to us by email or include it in a support request.

3.2 Study, productivity, and academic information

3.3 Mood tracking and reflections

Users can manually select or enter moods and, where available, related reflections. These entries may synchronise with the account and be used to display mood history, personal records, or related analytics.

Timivra does not describe its mood feature as an automated behavioural mood-inference engine. However, mood entries and reflections can still be sensitive because they may reveal information about your emotional state or wellbeing.

Mood tracking is a personal reflection and productivity feature, not a medical diagnosis, mental-health assessment, or treatment service. Avoid submitting detailed medical or other highly sensitive information unless it is necessary and you understand the implications.

3.4 Religion or quote preferences

If you select a religion preference for personalised religious or motivational quotes, that preference may be stored client-side or associated with the data used by the quotes feature.

Religious preference may be treated as sensitive or special-category personal information under some laws. Timivra uses this preference to personalise the relevant quotes feature, not to infer your religious identity for unrelated purposes.

You may change or remove the selection where the feature permits. Account deletion initiates the deletion process described in Section 10. Changing a preference does not necessarily erase historical copies immediately from backups or records that must lawfully be retained.

3.5 AI prompts, documents, and outputs

When you use AI Study Assistant, document quizzes, assignment assistance, exam-revision tools, AI Money Coach, or related AI features, we may process prompts, text, documents, generated responses, and technical information needed to provide the requested feature.

Only submit information you are authorised to disclose. Remove unnecessary personal or confidential information about yourself or other people where possible.

3.6 Payment, subscription, and referral information

We may process subscription plan, billing interval, transaction status, renewal and cancellation status, payment-provider identifiers, receipt references, refund requests, chargeback information, referral codes, qualifying referral events, reward balances, payout status, and fraud-prevention records.

Paystack supports Nigerian website checkout. Paddle supports international website checkout. These providers process payment information through their own systems and applicable terms. Timivra does not claim to store complete payment-card details unless a specific lawful arrangement requires it.

Paddle’s seller or merchant-of-record status depends on the applicable checkout, receipt, and contractual arrangement.

3.7 Technical, device, and usage information

We may process information such as browser or device type, operating system, session state, authentication state, local or session storage values, service events, error information, security logs, and interactions needed to operate, secure, or troubleshoot the Services.

Our Cookie Policy explains our current understanding of cookies and similar technologies.

3.8 Communications and support

If you contact us, we may process your email address, message, attachments you choose to provide, and information needed to investigate or resolve your request.

4. How we use personal information

  1. Create, authenticate, and manage your account, including age eligibility checks.
  2. Provide study, productivity, planning, and synchronisation features.
  3. Display study progress, analytics, mood history, and user-requested records.
  4. Process AI prompts and generate requested study, revision, quiz, assignment, or money-planning outputs.
  5. Provide scholarship, CV, Summer Hub, and related information features.
  6. Process payments, subscriptions, renewals, cancellations, refunds, and billing support.
  7. Administer referral programmes, validate qualifying transactions, prevent fraud, and pay eligible rewards.
  8. Personalise quotes according to a preference you select.
  9. Maintain service security, troubleshoot problems, prevent abuse, and improve reliability.
  10. Send essential account, service, billing, security, and support communications.
  11. Send optional promotional communications where permitted by law.
  12. Comply with legal obligations, resolve disputes, and establish or defend legal claims.

5. Legal bases for processing

For users in Nigeria, we process personal data in line with the Nigeria Data Protection Act (NDPA) and related rules as they apply to us.

6. AI processing and Google Gemini

Timivra’s backend calls Google’s Gemini API to generate outputs for selected features. The integration uses Google’s generative-language API, including the generateContent endpoint, and has been configured to use models such as Gemini 2.5 Flash.

Depending on the feature, prompts, document text, and related information may be sent to Google for processing to produce the response you requested. Do not assume that information submitted to an AI feature remains solely on your device or is processed only by Timivra.

The applicable AI-provider retention, training, and logging settings have not yet been fully verified for this Policy. We therefore do not promise that Google never retains submitted information or never uses it for service improvement or model-related purposes. Handling depends on the applicable Google API terms, project configuration, and settings in effect at the time.

AI outputs may be inaccurate or incomplete. Verify important information before relying on it.

6.1 AI moderation and safety

Timivra AI features (including Study Assistant, Basic AI Help, document quizzes, assignment and exam tools, Money Coach, and other Gemini-backed study features) are intended for study help only. The same moderation rules apply on Basic and Pro plans. They sit on top of the 16+ age requirement and do not replace it. Product demos that keep AI off remain unchanged.

We apply layered controls: Gemini safety settings (including sexual, hate, harassment, and dangerous content), study-only system instructions, pre-checks of user messages, and post-checks of AI replies. We hard-block requests for self-harm or suicide methods, sexual or pornographic content (including any sexual content involving minors), instructions for serious violence or weapons, illegal drug manufacturing, and scam or social-engineering scripts meant to harm people. Short refusals are returned without instructional or graphic detail.

Where a message shows distress or self-harm intent, the AI is instructed to show a care message and point to real help (for example local emergency services and directories such as the International Association for Suicide Prevention; US 988 where relevant), and to offer a return to study topics — not to act as a therapist or crisis counsellor.

Limited academic discussion may be allowed when the intent is clearly schoolwork (for example themes in literature or history, age-appropriate biology, or curriculum facts), kept non-graphic and non-instructional for harm. Unclear requests may be asked to clarify whether they are for an assignment, or refused.

We may log aggregated moderation events (for example that a block or crisis redirect occurred) for review and reliability. We aim not to retain unnecessary sensitive chat content longer than needed to operate and secure the service, subject to the retention practices elsewhere in this Policy.

7. Who we share information with

7.1 Hosting, authentication, and cloud infrastructure

7.2 AI provider

Google Gemini processes prompts and related information submitted through AI features to generate requested outputs, as described in Section 6.

7.3 Payment providers

Paystack supports Nigerian website checkout; Paddle supports international website checkout. These providers may process transaction, payment, receipt, subscription, refund, and dispute information.

7.4 Other service providers

We may share limited information with providers needed to operate an active feature (for example transactional email such as Resend, or bot protection such as Cloudflare Turnstile where enabled), send communications, administer rewards, maintain security, or provide support. We will not claim a particular provider is active unless the integration is actually used.

7.5 Professional advisers and authorities

We may disclose information to legal advisers, auditors, insurers, regulators, law-enforcement authorities, courts, or other parties where reasonably necessary to comply with law, protect rights, investigate suspected wrongdoing, or establish or defend legal claims.

7.6 Business transfers

If Fatiha One Limited undergoes a merger, restructuring, financing, acquisition, or transfer of relevant business assets, personal information may be disclosed or transferred as part of that process, subject to applicable law and appropriate safeguards.

7.7 Sale and advertising-related sharing

This Policy does not state that Timivra sells personal information as a commercial data-broker activity. If a future advertising or data-sharing arrangement meets a legal definition of “sale”, “sharing”, or targeted advertising under applicable law, Timivra must assess the relevant obligations, update its notices, and provide required consent or opt-out mechanisms before using it.

8. International transfers

Timivra serves users in multiple countries and uses providers including Supabase, Vercel, and Google. Their infrastructure or processing may be located outside Nigeria or outside the country where you live.

Based on current project configuration: Supabase primary database processing occurs in the United States (us-east-1), and Vercel serverless functions for the main marketing site run in Washington, D.C., USA East (iad1 / us-east-1). We do not promise that all personal information stays in Nigeria or any other single country.

Where applicable law requires safeguards for international transfers, Timivra will use a legally recognised transfer mechanism or other appropriate safeguard and provide further information where required.

9. Data security

We use service providers and technical controls intended to support authentication, hosting, storage, and synchronisation. However, no internet service, storage system, or transmission method can be guaranteed to be completely secure.

Use a strong, unique password, protect devices on which you remain signed in, and sign out on shared devices. This is especially important because someone with access to your logged-in account or device may be able to view account content, including mood entries and study activity.

If you believe your account has been compromised or personal information has been exposed, contact info@timivra.com promptly.

10. Retention and account deletion

We retain personal information for as long as reasonably necessary for the purposes described in this Policy, including providing the Services, maintaining relevant account records, resolving disputes, enforcing agreements, preventing fraud, and complying with legal obligations.

10.1 In-product deletion process

The current in-product deletion process allows a user to request deletion, typically through password confirmation or another confirmation step. The system schedules an account purge for approximately 30 days later and may restrict access while deletion is pending. A purge job is intended to delete the authentication user after that period.

10.2 Subscription cancellation during deletion

Our deletion process attempts to cancel Timivra-managed subscriptions where our systems can do so. The Paystack path is implemented where a linked Paystack subscription code exists. Paddle cancellation is not confirmed to be fully mirrored in the same deletion process.

Deleting your account is not a reliable substitute for cancelling every recurring payment. For Paddle subscriptions or any renewal that may continue, follow the cancellation instructions in your account, receipt, or Paddle communications, and contact info@timivra.com if you need assistance.

10.3 What the 30-day period means

The 30-day period refers to a scheduled account-purge process. It is not a guarantee that every copy of every item is instantly and permanently erased from all backups, logs, payment-provider systems, or legally required records within precisely 30 days.

Information may be retained where necessary for legal compliance, payment reconciliation, security, fraud prevention, dispute resolution, or other lawful purposes. Backup copies may persist until overwritten or deleted under the relevant backup cycle.

11. Parents and access to student accounts

Timivra does not currently provide a separate logged-in parent dashboard or an independent parent data feed. A parent or guardian may be able to view account information if they use the student’s login credentials or access a device where the student’s account is already signed in.

Depending on the features used, this may expose study hours, habits, schedules, mood entries, and other content visible within that account.

Timivra does not represent that it independently sends a parent a copy of the student’s data through a dedicated parental feature. Users should secure credentials and devices and understand the implications of sharing access.

Parents and guardians must respect applicable law and the student’s privacy. This Policy does not create an automatic right for a parent to receive another person’s account data.

12. Children and teenagers

Timivra accounts are intended for individuals aged 16 or older. Individuals under 16 must not create or use an account.

At signup, Timivra collects date of birth and rejects under-16 registrations in the interface and on the server. Users aged 16-17 must tick a confirmation that they have any parental or guardian authorisation required where they live. Timivra does not currently operate a formal parental-verification or verified parental-consent portal beyond that confirmation.

If you believe someone under 16 has created an account, contact info@timivra.com. We will assess the report and take appropriate steps under applicable law.

A separate competition or promotional activity may have its own eligibility requirements. Those requirements do not automatically authorise a person below the account minimum age to use a Timivra account.

13. Your privacy rights

Depending on your location and the law that applies, you may have the right to request access, correction, deletion or erasure, restriction of or objection to certain processing, a portable copy of certain information, withdrawal of consent where processing relies on consent, opt-out of certain marketing communications, lodge a complaint with a relevant privacy regulator, or exercise other rights provided by applicable law.

These rights are not absolute in every circumstance. We may need to verify your identity, clarify your request, protect another person’s rights, or retain limited information where the law permits or requires it.

To exercise a right, email info@timivra.com. Do not send passwords or unnecessary sensitive documents. We will respond within the timeframe required by applicable law. In Nigeria, you may also have the right to complain to the Nigeria Data Protection Commission (NDPC).

14. Marketing and communications

We may send essential communications about account security, billing, subscription status, support, policy changes, and the operation of the Services. These differ from optional promotional messages.

We may send promotional communications by email where permitted by law and subject to required consent or preferences. You may opt out using the unsubscribe mechanism provided or by contacting info@timivra.com.

Timivra currently uses organic marketing, referrals, competitions, social media, YouTube demonstrations, and email communications. This Policy does not claim that advertising pixels or a particular advertising network are currently active on the main website. If such technologies are introduced, we will update our notices and implement required controls.

15. Cookies, local storage, and similar technologies

The website and application use browser storage, including localStorage and sessionStorage, for application state and related functions. Cookies or similar technologies may also be used for sessions, authentication, security, or other essential functionality.

See our Cookie Policy. We do not claim that optional analytics or advertising technologies are active simply because this Policy explains how they would be handled if introduced.

16. Automated processing and profiling

Some features generate analytics, summaries, recommendations, or AI outputs based on information you provide or activity within Timivra. Mood entries are manually selected or entered by the user; Timivra does not describe the mood feature as an automated behavioural mood-inference engine.

This Policy does not represent that Timivra makes solely automated decisions with legal or similarly significant effects on users. If this changes, we will assess applicable legal requirements, update this Policy, and provide required information or safeguards.

17. Third-party services and links

The Services may contain links to external websites or rely on third-party services. Their privacy practices are governed by their own notices. Review those notices before submitting personal information directly to them.

18. Changes to this Policy

We may update this Policy as the Services, providers, practices, or legal obligations change. We will revise the “Last updated” date and provide notice or seek consent where required by law.

19. Contact and complaints

Fatiha One Limited trading as Timivra
Email: info@timivra.com
Lagos, Nigeria (public contact via email; registered office details are used for company filings and are available to counsel / regulators as required).

If you are dissatisfied with our response, you may have the right to complain to a privacy regulator or other authority with jurisdiction over your circumstances.

Related: Terms and Conditions | Cookie Policy | Refund and Cancellation Policy