Privacy

Privacy Policy

Last updated 9 July 2026

Teman Girls is a community for women in Malaysia. This policy explains what personal data we collect when you use our members area, why we collect it, who we share it with, and the rights you have over it. We handle your data in line with Malaysia's Personal Data Protection Act 2010, as amended by the Personal Data Protection (Amendment) Act 2024.

Who is responsible for your data (the data controller)

Teman U&I Ventures (SSM registration no. 202403141615 (CT0137048-X)), based in Kuala Lumpur, Malaysia, operating as Teman Girls.

Questions or requests about your data: hello@temangirls.com

1.Who this applies to

This policy covers people who sign in to the Teman Girls members area at www.temangirls.com. The members area is for women aged 18 and over. If you are under 18, please do not create an account.

2.What we collect

When you sign in with Google

We use Google Sign-In so you never give us a password. From your Google account we receive your name, email address, and profile photo. We do not receive your Google password and we cannot read your Gmail, contacts, or other Google data.

If you connect your Google Calendar (optional)

You can choose to connect your Google Calendar on the calendar page so you can see your own plans next to Teman Girls events. If you do:

We request read-only access to the events on your primary calendar (titles and times). We cannot edit, add, or delete anything.
Your events are shown only to you, in your own browser. No other member, and no page on this site, ever displays them to anyone else.
We never store your events. They are fetched fresh from Google each time you open the calendar and passed straight to your screen.
We store only a revocable connection token so we can fetch your events for you. It is kept where only our server can read it.
You can disconnect at any time with the Disconnect link on the calendar page, or from your Google account's third-party access settings. Either one fully removes our access, and disconnecting on our site also deletes the stored token.

What you give us in your profile

Your Telegram username
Your Instagram username
Your age range
A short bio you write about yourself

Information from your activity

Your verification status (whether you have completed our women-only verification)
Events you check in to, and the resulting attendance count
Events you host, matched by the email you host under

We do not knowingly collect sensitive personal data (such as health, religion, or political views). Please do not put such information in your bio.

3.Why we use it, and our legal basis

We use your personal data only to run the community:

To create and manage your membership and profile
To verify that the members area stays a space for women
To let verified members find each other by Telegram or Instagram handle (we never show your email to other members)
To record event check-ins and keep your attendance and hosting counts
To keep the community safe, including handling bans and appeals
To contact you about your account or your appeal

Our legal basis is your consent, given when you sign in and complete your profile, together with our need to perform the membership you asked for. You can withdraw consent at any time by deleting your account (see section 8).

4.Who we share it with

We do not sell your personal data, and we do not share it for advertising. We use a small number of trusted service providers (data processors) to run the site. They may only process your data on our instructions:

Google provides the sign-in and gives us your basic account details.
Supabase stores the member database and handles logins securely.
Netlify hosts the website.

Other verified members can see your profile card (name, handles, age range, bio, and counts) when they search your exact Telegram or Instagram handle. Your email address is never shown to other members.

We may also disclose data if the law requires it, or to protect the safety of our community.

5.Storage and transfers outside Malaysia

Our service providers may store or process your data on servers located outside Malaysia. Where that happens, we take reasonable steps to ensure your data receives protection consistent with the Personal Data Protection Act 2010 (as amended in 2024), through the safeguards and commitments of those providers.

6.How long we keep it

We keep your personal data for as long as you have an account with us. If you delete your account, or ask us to delete your data, we remove your profile, attendance records, and login from our active systems. Some information may remain for a short time in routine backups before it is overwritten, and we may keep a minimal record where the law requires it (for example, a banned email, to enforce a ban).

7.How we protect it

You sign in through Google, so we never store your password.
Access to the database is restricted by row-level security, so members can only see and edit their own information.
Verification status and attendance counts are locked on our server and cannot be changed by a member's browser.
Each Telegram or Instagram handle can belong to only one account, which helps stop impersonation.

No online service can promise perfect security, but we take reasonable steps to protect your data. If a data breach ever affects your personal data in a way the law requires us to report, we will notify the Personal Data Protection Commissioner and affected members as required by the Personal Data Protection (Amendment) Act 2024.

8.Your rights

Under the Personal Data Protection Act, you have the right to:

Access the personal data we hold about you.
Correct it if it is wrong. You can edit your Telegram, Instagram, age range, and bio yourself in your profile at any time.
Withdraw consent and delete your account. Go to My Profile, choose "Delete my account", and confirm. This permanently removes your login, profile, and history.
Data portability: ask us for a copy of your profile data in a commonly used format.
Limit how we process your data, or object to certain uses.

To make any of these requests, email hello@temangirls.com. If you are not satisfied with our response, you may complain to the Personal Data Protection Commissioner (Jabatan Perlindungan Data Peribadi, JPDP) in Malaysia.

9.Cookies and local storage

We keep a small login session in your browser's local storage so you stay signed in. We do not use advertising cookies and we do not track you across other websites.

10.Changes to this policy

We may update this policy from time to time. When we do, we will change the "last updated" date at the top. Significant changes will be highlighted in the members area.

11.Contact us

Teman U&I Ventures (Teman Girls)
Kuala Lumpur, Malaysia
hello@temangirls.com