Tengri Music privacy policy

Updated 14 October 2026

Who operates this service

Tengri Global Group Ltd, 128 City Road, London EC1V 2NX, United Kingdom. Contact: contact@tengriglobalgroup.com.

Account and music data

We process your name, email, securely hashed password, plan, credit balances, song prompts, lyrics, uploaded audio and voice samples, selected images/video used in requested media tools, generated music, video projects, playlists, certificates, order records, support messages, content reports, blocked-creator preferences and usage-rule acceptance records to provide the service. Payment providers process your payment details; Tengri Music does not store full card numbers.

Email verification and password recovery

New accounts require email verification. We send verification and password-reset emails through Google Workspace (Gmail API) from noreply@tengriglobalgroup.com. Google processes the recipient address and message content to deliver these account emails. We store a securely hashed password for pending registration and hashes of single-use verification/reset tokens. Verification links expire after one hour; password-reset links expire after 30 minutes. Expired pending records are removed during later account-email activity. Resetting your password revokes existing sign-in sessions and connected GPT tokens through the account credential revision.

Connecting ChatGPT

If you approve the Tengri Music GPT connection, ChatGPT can access your name, plan, credit balances, song titles and generation status, and submit music requests using your account allowance. Your password is entered only on Tengri Music and is not shared with the GPT. Revoking access prevents future requests; it does not remove messages already in your ChatGPT conversations. OpenAI handles those conversations under its own privacy policies.

Service providers and visibility

We send the prompts, lyrics, style settings and audio needed for your requested operation to our AI music processing providers. Our hosting, storage, payment and support providers process information needed to operate the service. Providers may process data outside your country. Public songs may be discovered and played by other visitors; select Private before creation or change visibility in your account.

Our currently configured music processors include AIMusicAPI , ElevenLabs and Mureka. Prompt enhancement and selected text tools use OpenAI. Hosting and stored service records/media use OpenAI Sites with Cloudflare database and object storage. Processing and retention depend on the selected operation and provider terms; we do not represent every provider operation as zero-retention or on-device-only.

Android app and device storage

The Android app stores its session, saved creation drafts and saved request/recovery records using AES-GCM encryption backed by Android Keystore. The app does not save your password, and app backup is disabled. Temporary Studio form state may also be held in Android activity saved state; not every transient screen field is separately encrypted.

You select media through Android’s system file picker. Selected files are copied into the app’s private cache for validation and retry. Source audio, voice samples, images or video selected for server-powered Studio tools are uploaded to Tengri Music and the relevant processing provider after your confirmation. The Android app does not currently render animated-cover videos locally. Website-only on-device export tools have separate local processing. Downloaded server exports are saved to the device destination you choose and remain under your control.

The Android app does not request microphone, contacts, location or broad-storage access and does not include advertising or analytics SDKs. The audio-settings permission supports the equalizer. Removing the app or clearing local storage does not delete your server account.

Reports, blocks and acceptance

Reports and account-deletion requests are recorded in private support tickets for Tengri Music administrators. We store the reported song and creator reference, reason and optional details to investigate the request. Reports are not sent to the reported creator. Block preferences and usage-rule version and acceptance time are saved with your account. Submitting an in-app request does not send an automatic email notification; you can follow replies in your account’s support tickets.

Retention and control

Music and account records remain available while your account is active, subject to service availability. Transaction, security and support records may be retained where needed for operations or legal obligations. Disconnect ChatGPT in My Account. For access or correction, contact contact@tengriglobalgroup.com. For account or associated-data deletion, use our account-deletion request page or email that address from your account email. You can request specific-data deletion without closing your account. The team verifies and processes requests manually and will explain any legal or security reason for retaining particular records. Submitting a form does not immediately erase data.

Account abuse prevention

One account per person is permitted. We use a secure browser cookie lasting up to one year to prevent repeat registration on the same browser. We use hashed network identifiers and registration attempt counts to enforce 24-hour registration limits. Expired limit records are cleared during subsequent authentication activity. We do not access your browsing history. If you share a device or network and cannot register, contact support.

Browser storage

We use secure cookies for sign-in and connection consent, and browser storage to remember your language preference. Music-account sessions stay signed in until you sign out, reset your password, or access is revoked. The Android app keeps its session encrypted on the device; network outages do not sign you out. Offline audio is saved after playback or an explicit Save offline action, inside app-private storage. Optional notifications show creation and offline-save progress. Connected payment and live chat services may use their own browser storage to provide their functions.