Privacy Policy
Effective September 30, 2026
TENG AI SCHOOL (school.tengmedia.com) is an online academy where students learn to build with AI. This policy explains what we collect when you use the school, why, and the choices you have. Questions: support@tengmedia.com.
Information we collect
- Account details. Your name, your email address when you sign up with email or when Google or Facebook shares a confirmed address, and a securely hashed password if you create one. We never store your password in readable form.
- Google or Facebook sign-in. If you choose “Continue with Google” or “Continue with Facebook”, our authentication provider, Supabase, receives the basic profile that service shares: your account ID with that service, your name, your profile picture, and your email address if one is shared. From Facebook we request only the public profile and email permissions. We do not receive your password, friends, posts or messages, and we cannot post on your behalf. Supabase keeps this profile in our sign-in records for as long as your account exists, and briefly holds the access token Google or Facebook issues while sign-in completes. Our student records keep only your name, any confirmed email, and a link to your sign-in identity, and never store Google or Facebook access tokens.
- Learning activity. The character you choose, the lessons and knowledge checks you complete, and the experience points (XP) you earn.
- Purchases. If you buy course access, payment is handled by Stripe. We keep your Stripe customer ID and purchase records. We never see or store full card numbers.
- Security records. Sign-in session records, and a hashed (pseudonymized) form of your IP address used only to limit repeated sign-in attempts.
Cookies
We use two essential cookies: teng_session keeps you signed in for up to 30 days, and teng_oauth exists for up to 10 minutes while a Google or Facebook sign-in completes. We do not use advertising or analytics cookies. Pages load fonts from Google Fonts, so your browser contacts Google to download them.
How we use information
To create and secure your account, sign you in, save your progress, provide the course access you purchase, answer support requests, and prevent abuse. We do not sell personal information, and we do not use information from Google or Facebook sign-in for advertising.
Who we share it with
Only the service providers that run the school: Vercel (hosting), Supabase (database and sign-in), Stripe (payments), and Google or Meta when you choose to sign in with them. We may also disclose information when required by law.
How long we keep it
We keep your information while your account is active. When you ask us to delete your account, we delete it as described on our data deletion page, except purchase records we must keep for tax and accounting.
Your choices
- Ask for a copy of, correction to, or deletion of your information by emailing support@tengmedia.com.
- Remove the school’s access from your Google or Facebook account settings at any time. See data deletion for the Facebook steps.
Shared rooms and text chat
While you explore, signed-in students in the same room can see your display name, character and position. Room chat is visible to signed-in students in that room. Messages are shown for up to 24 hours and expired records are removed during subsequent room activity. Presence expires after 12 seconds without an update. Do not share private information in chat. You can mute another student for your current visit.
Children
If you believe a child has given us personal information without appropriate consent, contact us and we will delete it.
Changes
If we change this policy, we will update the effective date above.