Effective August 26, 2026

Thoolika privacy policy.

This policy explains how Thoolika Malayalam Keyboard for Android accesses, uses, stores, and shares information.

Who operates Thoolika

Thoolika is developed and published by aaronsedna. In this policy, “Thoolika,” “we,” and “us” refer to the Thoolika app and its publisher.

Summary

Thoolika does not require an account. We do not operate a server that receives the sentences you type, your personal dictionary, clipboard history, saved phrases, handwriting strokes, or Story Canvas projects. Core typing, transliteration, suggestions, personalization, clipboard history, and handwriting recognition run on your device. Optional features—including voice recognition, online GIF, sticker and photo search, advertising, consent management, purchases, and model downloads—communicate with the third-party services described below.

Keyboard input and suggestions

As an Android input method, Thoolika can access text in the active input field so it can enter text and provide relevant suggestions. Typed text, transliteration, suggestion processing, personal words, and learned preferences are processed locally. Thoolika does not send your general keyboard input to aaronsedna or use it for advertising.

When Android identifies a password or other protected field, Thoolika enters a restricted mode that disables learning, suggestions, clipboard tools, online media, visual effects, and key sounds. The behavior of the receiving app and Android remains outside our control.

Local information

Thoolika stores app settings, personalization choices, personal words, clipboard history, pinned or saved phrases, and the cached status of an ad-free entitlement in private app storage on your device. Clipboard history is optional. Thoolika attempts to exclude content detected as passwords, one-time codes, PINs, and payment-card numbers, but automated filtering may not identify every sensitive item.

You can clear clipboard history and personalization from Thoolika’s settings. You can remove other local information by clearing the app’s storage in Android settings or uninstalling the app. Android backup is disabled for Thoolika, so its private app data is not included in normal Android cloud backups.

Microphone and voice typing

Thoolika requests microphone permission only when you choose voice typing. Audio is passed to the speech-recognition service installed or selected on your Android device. Depending on that service and your device settings, recognition may occur on the device or the audio and related technical information may be sent to the service provider, such as Google. aaronsedna does not receive or store the audio or transcription. You can deny or revoke microphone permission in Android settings; voice typing will then be unavailable.

Handwriting recognition

Thoolika uses Google ML Kit Digital Ink Recognition. A Malayalam recognition model is downloaded to your device through Google’s services. After the model is available, handwriting strokes and recognition are processed on the device and are not sent to aaronsedna. The downloaded model is removed when the app is uninstalled.

Photos, creations, and shared media

Story Canvas lets you choose photos through Android’s system picker, create images, GIFs, or videos, save them to device storage, and share them with apps you select. Thoolika processes selected photos and creations locally and does not upload them to aaronsedna. Files you save remain until you delete them. Copies shared with another app are governed by that app’s privacy practices.

Online GIFs, stickers, and photos

Online media search is used only when you choose it. Your search term, IP address, and ordinary network information are sent directly to the selected provider so it can return results. Thoolika may use GIPHY and/or KLIPY for GIFs and stickers and Pexels for photos. Selected or previewed media may be downloaded and temporarily cached on your device. Thoolika does not automatically send text from the active input field or your keyboard history to these providers.

The providers process information under their own policies: Google, GIPHY, KLIPY, and Pexels.

Advertising and consent

Ads may appear in Thoolika’s companion app, but not inside the keyboard interface. Thoolika uses the Google Mobile Ads SDK (AdMob) and Google’s User Messaging Platform for advertising consent choices. Subject to your region, device settings, and consent choices, Google may collect or receive your IP address (which may indicate general location), advertising ID, app set ID or other device identifiers, app interactions such as launches, taps and ad views, and diagnostic information such as performance, crashes, hangs, and energy usage. Google uses this information to provide ads, measure performance, perform analytics, prevent fraud, and comply with legal obligations. Information sent by the Mobile Ads SDK is encrypted in transit.

Where required, Thoolika asks for consent before requesting ads. You can revisit available choices under Thoolika Settings → Privacy choices. You can also reset or delete the Android advertising ID in your device settings. Buying the optional ad-free subscription stops companion-app ads but does not remove purchase verification.

Purchases and subscriptions

Starting with Thoolika 1.0.27, optional subscriptions are processed directly by Google Play. Google Play returns the product identifier, purchase token, purchase state, acknowledgement state, and current subscription status to Thoolika on your device. The app uses this information to offer the subscription, remove ads, restore purchases, and acknowledge transactions. Thoolika stores only a cached ad-free entitlement in private app storage and does not send purchase information to an aaronsedna server. aaronsedna does not receive your full payment-card details.

You can manage or cancel a subscription in Google Play. Google retains transaction information under its policies and makes limited order, subscription, and financial records available to aaronsedna through Play Console for subscription administration, refunds, fraud prevention, accounting, dispute resolution, and legal compliance.

Versions before 1.0.27 used RevenueCat to manage subscription entitlements. RevenueCat may retain information previously processed by those versions—such as an anonymous app-user identifier, app and device information, and purchase or entitlement records—under its retention terms and privacy policy. Update Thoolika to the latest version to use direct Google Play Billing.

Information we do not request

Thoolika does not request access to your contacts, precise location, call logs, SMS messages, camera, or a list of installed apps. It does not provide an aaronsedna account and does not collect your name, email address, or phone number through the app unless you voluntarily include that information when contacting support.

Support communications

If you email us, we receive your email address and whatever information you choose to include. We use it to answer your request, investigate problems, prevent abuse, and meet legal obligations. Avoid sending typed content, clipboard content, payment information, or other sensitive information. Support messages are retained only as long as reasonably needed for these purposes.

Data sharing and sale

We do not sell your personal information. Information is shared only when you activate a feature that needs a provider, as described in this policy; when necessary to protect users, enforce rights, prevent fraud, or comply with law; or as part of a business transfer subject to appropriate protections. Third-party SDK providers may process data as independent controllers or service providers under their own terms.

Security and retention

Network requests made by the app use HTTPS. Local data is protected by Android’s app sandbox, subject to the security of your device. No method of storage or transmission is completely secure. Local data remains until you clear it, it expires under the applicable feature, or you uninstall Thoolika. Third parties retain information according to their policies and legal obligations.

Children

Thoolika is a general-audience app and is not directed to children under 13. We do not knowingly collect personal information from children through an aaronsedna account or server. Third-party services may process limited device and usage information as described above. If you believe a child has provided personal information directly to us, contact us so we can review and delete it where applicable.

Your choices and requests

You can disable permissions, clear local data, change advertising privacy choices, manage subscriptions, or uninstall Thoolika using the controls described above. Because Thoolika has no aaronsedna account and we do not receive your local keyboard data, we generally cannot access or remotely delete data stored only on your device. For information you have sent directly to support, you may request access, correction, or deletion by emailing us, subject to applicable law and necessary legal retention.

Changes to this policy

We may update this policy when Thoolika’s features, providers, or legal obligations change. We will update the effective date on this page. Material changes may also be communicated in the app or store listing where appropriate.

Contact

For privacy questions or requests, email support@aaronsedna.com.