Privacy policy for the TwiddleLabs app

Last updated 31 October 2026

TwiddleLabs is run by Earthling Aidtech, Bengaluru, Karnataka, India (“we”, “us”). This policy covers the TwiddleLabs app for phones and laptops and the TwiddleLabs platform at app.twiddlelabs.com, where colleges, teachers and students sign in. The short version: we collect what we need to give you your courses on one phone and one laptop and to report course use to your college. No ads, no analytics or tracking tools, and we never sell your data.

1. What we collect

Your account.

• Name, email address, and, for college students, roll number and college. Your college sends us these when it adds you; if you bought courses yourself, you gave them when you signed up.
• Your password, stored only as a salted one-way hash. We can’t read it.

Your devices.

• The kind of device (Android, iPhone, Windows, Mac) and its name, such as “Pixel 8”.
• An identifier for the device, which we keep only as a one-way hash, and a security key the app creates on the device. Together they let your account work on one phone and one laptop, and keep downloaded courses locked to your devices.
• When each device last checked in.

How you use your courses.

• Which course and scene you opened, when, and for how long you were active in it. The app saves this while you’re offline and sends it the next time you’re online.
• We don’t record what you type, drag or answer inside a scene.

Payments (only if you buy courses yourself, on our website).

• Which course you bought, the amount, the date, and the order and payment reference. Razorpay handles the payment itself; we never see or store your card, UPI or bank details.

Technical data.

• Our servers log the IP address, the app or browser version and the time of each request, to run the service and stop abuse.

The app doesn’t use your location, contacts, camera, microphone, photos or files, and it contains no advertising or analytics software.

2. Why we use it

• To sign you in and give you the courses your college’s plan (or your purchase) includes, including offline.
• To enforce the one-phone-and-one-laptop rule and protect the courses from copying. Your name is shown faintly over course screens for the same reason.
• To show your college how its students use the courses, and to improve the courses.
• To keep the service secure, and to meet legal duties such as tax records for payments.

We process your data to provide the service you or your college asked for, and with your consent where the law requires it.

3. Who sees it

• Your college (if you’re a college student): your account details, which devices are active, and your course use.
• Service providers who run parts of the service on our instructions: Amazon Web Services (our servers, in Stockholm, Sweden), Vercel (a backup address the app uses if our main one can’t be reached) and Razorpay (payments). Some of them process data outside India under their contractual safeguards.
• Authorities, when the law requires it, and a successor if Earthling Aidtech or TwiddleLabs is ever merged or sold, under the same protections.

Data between the app and our servers is always encrypted in transit (HTTPS). Downloaded courses are stored encrypted on your device.

4. How long we keep it

• Your account, devices and course use: while your account exists. When it’s deleted, they’re deleted too.
• Payment records: as long as Indian tax law requires.
• Server logs: a few weeks. Backups: 30 days, after which deleted data is gone from them too.

5. Deleting your account

You can ask us to delete your account and its data at any time: see app.twiddlelabs.com/delete-account, or choose Delete my account in the app.

6. Your rights

Under India’s Digital Personal Data Protection Act, 2023 you can ask what data we hold about you, have it corrected or erased, withdraw consent, nominate someone to act for you, and raise a grievance with us and then with the Data Protection Board of India. Email noreply@twiddlelabs.com; we reply within 30 days.

7. Students under 18

The app is made for college students. It isn’t meant for children under 13, and we don’t knowingly collect their data. If you think a child’s data has reached us, tell us and we’ll delete it.

8. Grievance officer and changes

Write to our Grievance Officer at noreply@twiddlelabs.com with “Privacy grievance” in the subject. Earthling Aidtech, Bengaluru, Karnataka, India. If we change how we handle data, we’ll update this page and its date before the change takes effect.