Privacy Policy

Last updated: 23 October 2026

This Privacy Policy was updated on 23 October 2026. By continuing to use the service, you accept the revised version.

Data We Collect

Tembrica collects the minimum data needed to run the service. Some tools work without registration, but paid features, your profile, saved settings and messaging require an account. At sign-up we collect your email, name and the data you choose to provide; while you use the site, technical data (a hashed IP address, language, tool-usage history).

Personal data processing

The personal-data operator is:

Farid Zaripov — operator of Tembrica (sole trader, Australia)
E-mail: privacy@tembrica.com

International payments for paid features are processed by Polar Software, Inc. (Delaware, USA), acting as Merchant of Record; Polar processes your payment data under its own privacy policy. See the Pro Terms & Refunds for details. If you choose to pay with Stripe, the payment is processed by Sold through Link, LLC (a Stripe company), acting as Merchant of Record under Link's own privacy policy.

Purposes of processing: authentication and account management; providing site features and saving your settings; security (bot protection, two-factor authentication); processing payments for paid services; newsletter — only with your separate consent; the referral program.

Categories of data: name, username, email address; a password hash; profile data you provide voluntarily; technical data (a hashed IP address, country/city by IP, language); the account identifier when signing in via Google, Yandex or VK; tool-usage and payment history.

Legal basis: your consent and the performance of our contract with you (Art. 6 GDPR); for any special categories of data, your explicit consent (Art. 9 GDPR).

Your rights: access your personal data and request its correction, restriction, erasure or portability; object to processing; withdraw your consent at any time; and delete your account yourself in settings, which erases your personal data. You may also lodge a complaint with your local data-protection authority. For any data-processing question, contact the operator at the address above.

If you choose to sign in with Google, Google shares with us, with your permission, the basic information from your Google Account: your name, email address, profile picture and account ID. We request only these basic permissions (openid, email, profile): we get no access to your contacts, Gmail, Google Drive or any other data in your Google Account, and we never see your Google password.

Use — we use this information only to create your Tembrica account or sign you in to it, to connect Google sign-in to an existing account with the same email address or — at your request — to the account you are signed in to, to confirm an expert profile (one Google account confirms one profile), to show your name and picture in your profile, and to send you emails about your account (such as sign-in and purchase notifications). Newsletters are sent only with your separate consent.
Storage — your name, email address, Google account ID and a link to your profile picture are stored with your account on our servers for as long as the account exists, and are erased when you delete it (see “Data Retention”).
Sharing — we do not sell this information, do not use it for advertising and do not share it with anyone, except service providers that help us run the service described in this policy (for example, the payment processor receives your email address when you make a purchase) and where the law requires it.
Control — you can revoke Tembrica's access at any time in your Google Account settings (myaccount.google.com/connections) and delete your Tembrica account in your profile settings.

Tembrica's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Files You Process

What happens to the files you process with our tools:

Most tools process your file right in your browser — such a file is not uploaded to our servers and disappears when you close or reload the page
Files uploaded for server-side processing are used only to perform the operation you requested and are deleted automatically — normally within 24 hours
Results and documents saved to your account under “My generations” (generations, results of server-side processing, reports) are kept for the period shown there for each of them — 30 days for most; we email you before deletion, and you can delete them earlier yourself

The API and Connected Assistants

When a program, or an AI assistant you have connected (such as Claude or ChatGPT), uses Tembrica through our API, we record:

Keys and connections — for an API key we store only its hash, the name you gave it, and when it was created and last used, never the key itself. When you connect an assistant, your profile shows which application is connected and since when, and you can disconnect it in one click; disconnecting revokes its access immediately. An access token issued to an assistant lasts one hour, and its permission to renew lasts 30 days
Calls — for each call we record the tool, the time, the outcome and the tokens spent, together with the shape of what you sent (field names, sizes, formats), never its content. This is part of your usage and payment history and is kept while the account exists
Files — a file uploaded through the API is stored only to perform the operation you asked for and is deleted automatically within 4 hours; a result file within 24 hours. The record that the file existed (its name, size and type, not its contents) is kept for 30 days
Content — what you pass to a tool through the API is treated exactly as the same content uploaded on the site: the same processing, the same engaged providers where a tool uses one (see the AI Providers page), and the same deletion rules

A connected assistant receives only the results of the tools it calls. We do not pass it your account data, your files or your history.

The Experts section

If you book an expert or take clients as an expert, we additionally process the data listed below. The Experts section Rules describe the same processes from the contract side.

Chat with an expert. Messages between a client and an expert, and the files attached to them, are stored on our servers so that the participants can arrange the session and see the history. For a booking, messages can be sent from the booking request until 24 hours after the session; the history is kept while both participants' accounts exist and is deleted together with the account of either of them. A message its author deletes "for everyone" is hidden from both, but stays in the database until the account is deleted — so that reports can be reviewed. Attached files are deleted after 30 days; the chat keeps a "file deleted" note. Message texts are stored encrypted. A chat opened by an accepted chat request (see “Chat request”) stays open while the parties keep talking: after 30 days without messages it closes, and the history remains. Legal basis: performance of the section rules (Art. 6(1)(b) GDPR).
Chat request. To write to an expert you have no booking with yet, you send them a chat request — up to 3 messages. We store the request texts encrypted, who sent it to whom, the chosen service if one was chosen, the time and the expert’s decision. Only the sender and the expert see the request; if the expert does not reply within 7 days, it closes on its own. The messages of an accepted request become the start of the chat (see above). 30 days after the decision — acceptance, refusal or closing on expiry — the request text is deleted, while a record of it without the text is kept while both accounts exist: it drives the pause before a new request after a refusal and the limit on the number of requests. If the sender or the expert reports the request, its text is copied into the report record and kept with it (see “Reports”). Legal basis: performance of the section rules (Art. 6(1)(b) GDPR).
Reports. When a participant presses "Report", we store who reported whom, the booking number, the text of the report, the IP address and links to the pair's last 30 messages, including those deleted by their author. A moderator reads these messages only to decide on the report: to warn, restrict or block the violator. Legal basis: performance of the section rules and protecting the participants' rights and safety (Art. 6(1)(b) and (f) GDPR). The report record is kept in the moderation log for 3 years and then deleted automatically; the messages themselves, while the participants' accounts exist.
The client's country for payment. When an expert sends a client payment details, we show the expert the client's approximate country — from the profile or, if it is not there, as detected from the IP address at registration — so that they can choose a suitable payment method. The expert sees only the country. Legal basis: performance of the section rules (Art. 6(1)(b) GDPR). The country is not stored separately for this: it comes from the profile and registration data, which are kept while the account exists.
Name. In the section people are called by their real first and last name if they have given them, otherwise by their profile name. An expert must give their real first and last name: they are published on the expert's page, in the catalog and on service pages based on the expert's consent given when publishing the page (Art. 6(1)(a) GDPR). If the expert gave this consent under the edition of the Rules of October 23, 2026 or later, their name, photo, headline, rating and service price are also shown in the “Experts on this topic” block on the site’s tool pages related to the subject of their services. A patronymic or middle name is optional; it is never shown on public pages — only the other party of a booking sees it: on the booking page, in emails about it, in the calendar file and in the expert's bookings export (legal basis: performance of the section rules). The first name, last name and patronymic are kept while the account exists.
Payment details. The payment details an expert enters (card or account number, a phone number for instant transfers and the like) are stored encrypted. Only the client of a booking whose time the expert has confirmed can see them, and only after the expert sends them — with the button or automatically at confirmation, if the expert set it up. Legal basis: performance of the section rules (Art. 6(1)(b) GDPR). Payment details, including payment methods the expert deleted, are kept while the expert's account exists and are erased with it.
Meeting places. An expert who turns on in-person meetings enters a place: country, city, postal code (in countries where addresses are found by it), street and building number, details (entrance, floor, how to find it) and a point on the map. Until the expert opens the address to everyone, the catalog and the expert's page show only the city and an approximate point 300–700 m from the real one, and the full address and details are seen only by the client of a booking the expert has confirmed. Only the expert can open the address to everyone (for example, the address of a workshop or salon); the address and point are then published based on the expert's consent (Art. 6(1)(a) GDPR). So that a place is not moved from city to city to show up in more searches, we keep a log of its moves (from where to where, when, a keyed hash of the IP address) for 90 days. Legal basis: performance of the section rules and the In-person meeting terms (Art. 6(1)(b) GDPR). A place is kept until the expert deletes it and is deleted with the account.
Meeting address. If the expert travels to the client, the client enters the address when booking (city or postal code, street and building number, details, a point on the map), and only the expert of that booking sees it. The meeting address — the client's or the expert's place — is copied into the booking, stored encrypted and appears only in the emails, reminders and calendar file of the booking's participants. The "Get directions" link opens the meeting point in Google Maps when you press it. 30 days after the meeting, only the city remains of the address in the booking. Legal basis: performance of the section rules (Art. 6(1)(b) GDPR).
Outcome of an in-person meeting. After the meeting we ask both sides whether it took place and who did not come, and in the review whether the place matched its description; the answers are kept with the booking. If nobody answers within 48 hours after the meeting ends, it counts as having taken place; conflicting answers are reviewed by a moderator. An expert's no-shows and a place that does not match its description lower the expert's reliability (see below). Legal basis: performance of the section rules (Art. 6(1)(b) GDPR).
Work samples (portfolio). An expert can publish up to 8 work samples: photos, a description ("before", "what was done", "after"), duration, cost, month and city. The server rebuilds every uploaded photo and removes its metadata (EXIF), including the location where it was taken. Published work samples are visible to everyone who visits the expert's page; a draft not edited for 7 days is deleted together with its photos. To stop people passing off someone else's work as their own, we compare photo fingerprints (a short image hash) with other experts' photos. A video of the work (YouTube, VK Video, Rutube) is shown as a button: that service's player loads and receives data about the viewing only after you press it. Legal basis: performance of the section rules (Art. 6(1)(b) GDPR). A work sample and its photos are deleted when the expert deletes it, and with the account.
Searching by place. The city, postal code or "Near me" a visitor sets in the experts catalog are used only for that search and are not stored unless the visitor saves the search. "Near me" takes coordinates from your browser with your permission and rounds them to about 1 km; the rounded coordinates go into the page address and therefore, like any address, into the server's technical logs.
Waitlist. If the catalog has no suitable expert for your search, you can ask to be told when one appears. We save that search — the category, city, format and other filters — which experts were already in the results and when we last wrote to you, and send an email about new experts for it to your account’s address, no more than one per 24 h, naming up to 3 of them. You can wait on up to 5 searches at once. The emails are turned off by the link in an email or in the catalog; the search then stays among your saved searches, where you can also delete it. The section’s page for experts shows only categories that at least 3 people are waiting for, and how many are waiting — no searches and no names. Legal basis: performance of the user agreement at your request (Art. 6(1)(b) GDPR). Saved searches are kept until you delete them and are deleted together with the account.
Expert’s calendar by link. An expert can connect up to 3 of their external calendars by iCal link, so that time busy there is not offered to clients. The link is stored encrypted; only the service’s address is shown on screen. Several times an hour our server downloads the calendar from this link and keeps only busy intervals for the next 120 days — start and end, without event titles, descriptions, places or participants; if the calendar stops responding, the last intervals are still taken into account for 72 h. Clients only see that a time is unavailable. Legal basis: performance of the section rules at the expert’s request (Art. 6(1)(b) GDPR). The subscription and the intervals are deleted when the expert disconnects the calendar, and together with the account.
Protection against duplicate profiles and fake reviews. Under the section rules one person may have one expert profile, and reviews come only from real clients. To check this without text-message verification, we keep not the data itself but irreversible keyed hashes (HMAC) of it: the phone number of the Yandex ID account if the expert confirmed their profile with it; payment details; the phone number and Telegram username from the expert's contacts; the point of the meeting place; fingerprints of portfolio photos — as well as a random browser identifier from the tmb_did cookie, which is set for signed-in users in the expert dashboard, when booking and when leaving a review, and stays in the browser for up to 2 years. A hash only shows that two values match; the value itself cannot be recovered from it. If two experts share a strong signal (phone number, payment details) or two other signals, the newer profile is hidden from the catalog and cannot take bookings until a moderator decides; the expert sees the reason and can write to support. A review from an account linked to the expert does not count toward the rating, and reports from such accounts or from newly created ones do not hide a profile. Legal basis: our and our clients' legitimate interest in preventing fraud (Art. 6(1)(f) GDPR). The hashes are kept while the account exists and are deleted with it; a browser identifier not seen for more than 2 years is deleted earlier.
Expert reliability. From the section's data we calculate an expert's reliability from 0 to 100. It goes up with a profile confirmed through a sign-in service (Yandex ID, VK ID or Google), the account's age, completed consultations, verified documents, clients confirming the place and reviews; it goes down with confirmed violations, no-shows, a place that does not match its description and duplicate profiles, and the weight of each event fades over 180 days. Only the expert sees the number and what it is made of, in their dashboard. Reliability affects the order of the catalog, and while it is low, in-person meetings are unavailable; the expert can dispute it by writing to support, and then a moderator decides. Legal basis: performance of the section rules (Art. 6(1)(b) GDPR).

Shared chore chart and Family

If you keep a shared chore chart or add relatives to Family, we additionally process the data listed below. Both features work within one site: tembrica.com and tembrica.com accounts are separate and cannot be linked to each other.

Shared chore chart. For a home we store its name and time zone; for members, the name they have in the home, color, icon, role, away dates and star count; for chores, the title, room, schedule, assignees and note; completion ticks — what, when and who ticked it, including for someone else; hand-over requests, rewards the family made up and requests for them. All home members see this. A wall display link shows, without signing in, the members’ names and their chores for today. A member’s PIN and the invitation, display and personal calendar links are stored only as hashes. Legal basis: performance of the contract — a feature you use (Art. 6(1)(b) GDPR).
Members without an account. A home organizer can add a member who has no account — a child, for example. Only a name or nickname is needed: we do not ask for such a member’s email or other contacts. By adding them, the organizer confirms they are entitled to provide this data (for example, as a parent or legal guardian).
Retention. Completion ticks are kept for 730 days and then deleted automatically. Used, revoked and expired invitations and switched-off displays are deleted after 60 days, and hand-over requests 60 days after the day they concerned. Everything else is kept while the home exists; the owner can delete the whole home, and then all its data is deleted. A member who left the home or was removed stays in the home’s history under their name in the home; if they delete their account, the name is erased and the history shows “former member”. A home whose owner deletes their account passes to another adult member with an account, or is deleted if there is none.
Emails and calendar. We send the reminder of today’s chores and the weekly summary only if you turned them on in the home; you can turn them off there, in your email settings or with the link in the email. The personal chore calendar link (.ics) works while you are a member of the home.
Family. When you add someone to your family, we store who they are to you (a word from a list, no free text), when the request was sent and when it was accepted, your Family settings and the list of people you do not accept requests from. The recipient of a request sees your name, profile photo and the word you chose; the family link exists only once they add you too. We email you about a new request no more than once a day; you can turn this off in your email settings. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).
Who sees your family. By default only you see your family. By choosing “Your family” or “Everyone” in the settings, you agree that your relatives (name, profile photo and who they are to you) will be visible on your page, and you on theirs: to confirmed relatives when they are signed in, or to everyone who opens the page, including without signing in and through search engines if you opened your page to search. A relative appears on a page only if the settings of both sides allow it and neither of you has hidden the link. Legal basis for showing it: your consent (Art. 6(1)(a) GDPR); you can withdraw it at any time by switching back to “Only you” or hiding the link, and showing stops immediately.
Retention. A request without an answer is deleted after 30 days, and a declined one the same way: the sender is not told about a refusal. A link is kept until either side deletes it; the other side is not notified of the deletion. When an account is deleted, all its links, requests and blocks are deleted. All of this is included in the export of your data in your profile settings.
Invitation from family. A shared chore chart organizer can invite a person from their confirmed family to the home. That person gets an invitation on the site and becomes a member only if they accept it themselves: family on its own gives no access to a home.

Hobbies on your profile

If you add hobbies in your profile settings, we additionally process the data listed below. Adding hobbies is optional.

What is stored. The hobbies you pick from our list, and hobbies you suggest yourself: the name in your own words, the category you chose, the page language and when you sent it. Legal basis: performance of the contract — a feature you use (Art. 6(1)(b) GDPR).
What for. Based on your hobbies we pick site tools to show you on your settings page, and from aggregate numbers (how many people chose a hobby) we decide which tools to build. Hobbies are not used for advertising.
Who sees them. By default only you see your hobbies. By turning on “Show my hobbies on my profile”, you agree that they will be visible on your page to everyone who opens it, including without signing in and through search engines if you opened your page to search. Legal basis for showing them: your consent (Art. 6(1)(a) GDPR); turn the switch off and showing stops immediately.
Your own hobbies. A hobby that is not on the list is reviewed by a site moderator. While it is under review, only you see it. An approved name becomes part of this site’s shared hobby list without saying who suggested it; if a similar hobby already existed, your words become its synonym. We tell you the decision in your profile notifications, and if we decline it, why.
The list has no hobbies that reveal health, religious or political beliefs, or sex life, and we do not accept such suggestions.
Retention. Hobbies are kept until you remove them and are deleted together with your account, along with your suggestions still under review. A suggestion you withdraw from review is deleted at once. tembrica.com and tembrica.com accounts keep their hobbies in separate databases.

Cookies

We use several types of cookies to ensure the best experience on our site. Essential cookies are required for session management and language preferences. Analytics cookies from Google Analytics help us understand how visitors use the site so we can improve it. Advertising cookies from Google AdSense are used to display relevant ads. You can manage or disable cookies at any time through your browser settings.

Google, as a third-party vendor, uses cookies to serve ads on this site and on other sites across the web, based on your previous visits. You can turn personalized advertising off in your Google ad settings; Google’s advertising policy explains what data it uses and why.

adssettings.google.com · policies.google.com/technologies/ads

Analytics

We use Google Analytics, together with our own usage logs (tool events and error reports), to understand how the site is used and to fix problems. This data is pseudonymous and is not used to identify you by name. If you have agreed to analytics, we also keep what you type into the “What do you want to do?” field on the home page, together with which tool you opened: not linked to an account, with email addresses, phone numbers, IP addresses and links replaced by placeholders before storage. We use these records to improve search and decide which tools to build; they are kept for 180 days.

Email Newsletter

If you subscribe to our newsletter, we store your email address, language, the subscription source, the exact consent wording shown to you, your IP address and the confirmation time — as proof of consent. Newsletter emails contain an open-tracking pixel and measured links; we use these statistics to improve the newsletter. Every email includes an unsubscribe link, and unsubscribed addresses go to a suppression list so we do not email them again.

Third-Party Services

We use the following third-party services: Google Analytics for analytics, Google AdSense for advertising, and Cloudflare as a content delivery network and security layer for the international domain. Payments are handled by Polar Software, Inc. (Merchant of Record) — it processes payment data and we only receive a confirmation. Most tools process files in your browser or on our own servers. Some tools — text-to-speech, the text tools (paraphrasing, text generation, prompts, lesson plans, dubbing translation), music generation, the voice tools and the contract review — pass your content to engaged AI providers; the current list of recipients, with their country and the data sent, is on the AI providers page. We do not sell your files and do not disclose them to anyone other than the providers listed there, and only to the extent needed to deliver the service. Purchases made inside our Telegram Mini App are paid with Telegram Stars and are processed by Telegram under its own terms. Payments made with Stripe (the “Didn't find a convenient payment method?” option) are handled the same way by Sold through Link, LLC (a Stripe company).

Data Retention

We retain different types of data for different periods depending on their purpose:

Files uploaded for server-side processing, and results that are not saved to “My generations”: deleted automatically, normally within 24 hours (backstop cleanup — up to 7 days). Results and documents in “My generations” are kept for the period shown there for each of them — 30 days for most
Temporary files: cleaned hourly via an automated scheduled task
Ratings and comments: retained indefinitely as publicly submitted content
Analytics data: retained according to the default retention policies of Google Analytics
Account data (email, profile, settings) is kept while the account exists. You can delete your account at any time in your profile settings — personal data is erased; payment records are kept for the periods required by law.
Account deletion becomes irreversible after 14 days: until then the account is frozen and can be restored simply by signing in with your password.

Your Rights

Depending on your location, you may have specific rights regarding your personal data under applicable privacy laws:

GDPR (EU users): You have the right to access, rectify, erase, and port your data, as well as the right to restrict or object to its processing.
CCPA (California residents): You have the right to know what data we collect, request its deletion, and opt out of the sale of personal information. We do not sell your personal data.
To exercise any of these rights, please contact us at support@tembrica.com.
We will respond to all verified requests within 30 days.

Complaints

If you believe we have mishandled your personal data, you can lodge a complaint with us directly — write to privacy@tembrica.com (or use the support form) and describe the issue.

We acknowledge every data-protection complaint within 30 days of receipt, respond with an outcome without undue delay, and keep a record of complaints and the actions taken.
You can also complain to the data-protection authority of your country of residence (for example, the ICO in the UK or the CNIL in France) — at any time, whether or not you have contacted us first.

International Data Transfers

Our service runs on servers in Russia (St. Petersburg) and the Netherlands. Accounts and data of tembrica.com are stored in a database in Russia, and those of tembrica.com in a separate database in the Netherlands. Depending on your region, your data may be processed in either location. In addition, certain tools pass the content you upload to engaged AI providers at your request, including providers in the United States — the up-to-date list of recipients and countries is published on the "AI Providers" page. Such transfers happen with your consent and only to the extent needed to perform the operation you requested. We apply appropriate safeguards to protect data during transfer.

Children

The service is intended for general audiences and is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children below that age. Some tools (for example, study and career tests) may be used by teenagers; if you are under the age of digital consent in your country, please use the service only with the involvement of a parent or guardian. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always published on this page with its effective date. We are not obliged to notify you individually — please review this page periodically. Your continued use of the service after changes are posted means you accept the updated version.

Contact Us

If you have questions about this privacy policy, please contact us at privacy@tembrica.com.

Edition history

Earlier editions are kept in Russian (the Russian text is the legally binding one); we will send a copy on request to the support address.

Edition of October 23, 2026 — latest
The Experts section now describes chat requests (what is stored, who sees them, when the text is deleted), the waitlist (an email about new experts for a saved search), an expert’s calendar connected by link (busy intervals only), encrypted storage of chat texts, and showing an expert in the “Experts on this topic” block on tool pages with their consent. Nothing has changed for those who do not use the section.
Edition of October 22, 2026
Added the “Hobbies on your profile” section: what is stored about the hobbies you pick or suggest and why, who sees them and on what basis, how your own hobbies are reviewed, and how long they are kept. Nothing has changed for those who do not add hobbies.
Edition of October 18, 2026
Added to the Experts section: meeting places and who sees the address, the meeting address and how long it is kept, the outcome of an in-person meeting, work samples (portfolio) and removing metadata from photos, searching by place, protection against duplicate profiles and fake reviews (keyed hashes of signals, the tmb_did cookie), and expert reliability; "Sign-in with Google" now covers confirming an expert profile. Nothing has changed for those who do not use the Experts section.
Edition of October 16, 2026
The Specialists section is renamed Experts, and its name is corrected in the section about it. What data is processed, on what basis and for how long it is kept is unchanged.
Edition of October 15, 2026
Added the section “Shared chore chart and Family”: what is stored about a shared home and its members, who sees it, how long the log and links are kept, members without an account; family links, who sees your family on your page and on what basis, how long requests are kept. Nothing changed for those who do not use these features.
Edition of October 3, 2026
Clarified how long reports in the Specialists section are kept: a report record is kept for 3 years and then deleted automatically (previously there was no limit). Nothing else changed.
Edition of October 2, 2026
Added "The Specialists section": the booking chat and how long it is kept, moderators reading a reported conversation, the client's country shown to the specialist to choose a payment method, real names and patronymics, how payment details are stored and shown. Nothing changed for other users.
Edition of September 28, 2026
Edition of September 11, 2026
Edition of June 15, 2026