Your data, explained

Privacy Policy

What we collect, why we need it, where AI providers fit in, and the choices you have.Effective and last updated: 17 July 2026

1. Who this policy covers

PT Teman Digital Indonesia (“TDI”, “we”, “us”) is responsible for personal data processed through temandigital.id, TemanBuilder, the AI Consultant, and conversations about our engineering services. This policy applies to visitors, account holders, prospective customers and customer contacts.

For a separately contracted customer project, the project agreement may contain additional privacy and data-processing terms. Those specific terms control if they conflict with this policy.

2. Data we collect

Data you provide

  • Account details such as your name, email address, password hash, and Google account identifier if you choose Google sign-in.
  • Your acceptance of the Terms & Conditions and acknowledgement of this Privacy Policy, including the date and applicable document version.
  • Prototype content, including project names, your full project conversation and prompts, generated interfaces, and saved HTML versions.
  • AI Consultant messages and the product or business information you choose to include.
  • Emails, project briefs, feedback and other information you send when discussing TDI services.

Data created through use

  • Versioned project-context documents used to keep generation consistent: the system-managed AGENTS.md, project MEMORY.md, and DESIGN.md. These may contain derived confirmed facts, decisions, assumptions, open questions, and design direction based on your project conversation.
  • Session identifiers, account timestamps, credit balances and authentication records.
  • Generation records, including a limited prompt preview, selected provider and model, context version, credits used, success status and time.
  • Basic technical and security information that may appear in server logs, such as IP address, browser details, request time and error information.
Please keep sensitive data out of prompts and project context.Do not enter passwords, API keys, payment-card details, government identifiers, health information, confidential source code, or personal data you are not authorised to share.

3. Why we use data

  • Provide accounts, saved projects, credits, prototype generation and AI Consultant conversations.
  • Understand your app idea and prepare a project inquiry for your review.
  • Secure the service, prevent misuse, enforce limits and troubleshoot failures.
  • Improve reliability, usability and service planning using appropriately limited records.
  • Respond to support, sales and engineering requests and perform agreed services.
  • Send service notices and, where permitted or with your consent, relevant product or service updates. You can opt out of marketing at any time.
  • Meet legal, tax, accounting and dispute-resolution obligations.

Depending on your location and the activity, we rely on consent, performance of a contract or steps requested before a contract, legitimate interests in operating and securing the service, and compliance with law.

4. How AI processing works

TemanBuilder and the AI Consultant may send the text you submit, recent conversation context, and necessary instructions to one or more external AI model or routing providers. We use a flexible multi-model approach, so the provider may change based on availability, quality and the task.

Those providers may process data on infrastructure outside your country, including outside Indonesia. Their handling and retention of submitted data is also governed by our provider arrangements and their applicable terms. We do not use the AI Consultant to make decisions that produce legal or similarly significant effects about you.

AI Consultant conversation content is used to answer the current conversation and is not intentionally written to TDI’s project database by the current product. Short-lived session data is used to rate-limit requests. Provider systems and ordinary security logs may still process or temporarily retain request data.

5. When data is shared

We do not sell personal data. We may disclose only what is reasonably necessary to:

  • Cloud hosting, database, email, authentication, security, analytics, AI model and AI-routing service providers.
  • TDI employees, engineers and contractors who need the information to support or deliver the service and are subject to confidentiality duties.
  • Professional advisers, authorities or other parties when required by law, needed to protect rights and safety, or necessary for a corporate transaction.

Where personal data crosses borders, we take steps appropriate to the applicable law and the transfer, which may include contractual safeguards and assessment of the recipient.

6. How long we keep data

  • Account and saved-project data: while your account is active and for a reasonable period afterward to handle recovery, security, legal or backup needs.
  • Login sessions: normally up to 30 days unless you sign out or the session is invalidated earlier.
  • Generation and security records: only as long as reasonably needed for credits, abuse prevention, troubleshooting and legal obligations.
  • Sales and customer communications: for the relationship and a reasonable follow-up period, then as required for legal or business records.

Retention can vary when a dispute, security investigation, legal hold or customer contract requires a different period. We will delete or de-identify data when it is no longer needed.

7. Your choices and rights

Depending on where you live, you may ask to access, correct, delete, restrict or receive a copy of your personal data; object to certain processing; or withdraw consent. You may also opt out of marketing messages and complain to your local data-protection authority.

Email kevin@temandigital.id with “Privacy request” in the subject. We may need to verify your identity before acting. Some information may be retained where law or a legitimate exception allows it.

8. Security and children

We use reasonable technical and organisational controls intended to protect data, including hashed passwords, server-side sessions, access controls and transport security in production. No internet service is completely secure, so please use a unique password and avoid uploading secrets.

The service is not directed to children under 18, and we do not knowingly collect their personal data. Contact us if you believe a child has provided data.

9. Changes and contact

We may update this policy as the product, providers or law changes. Material changes will be highlighted through the service or another reasonable channel, and the date above will be revised.

Questions or privacy requests can be sent to kevin@temandigital.id. The data controller is PT Teman Digital Indonesia, Indonesia.