Privacy Policy

Last updated: October 21, 2026

Telegraf ("we", "our", or "the app") is a Telegram client for Apple Watch with an iPhone companion app. The apps do not talk to Telegram directly: our server signs in to Telegram on your behalf and relays your chats to your devices. This Privacy Policy explains what that server and the apps store, for how long, and who else receives it.

1. Information We Collect

Telegraf collects and processes the following information:

• Phone number: Your phone number is sent to Telegram to sign you in. Our server also keeps it, together with the time you first and last used the app, for as long as you are signed in. It is deleted when you log out, when you end the Telegraf session from Telegram's "Devices" settings, or when none of your devices has used the app for 90 days. The login code and your two-step verification password (if you have one) are passed to Telegram and are not stored.
• Telegram session: To stay signed in, the server keeps a Telegram session file for your account. It contains the authorization key issued by Telegram and Telegram's standard cache of the chats and contacts you see: their IDs, usernames, names and, where Telegram shares them, phone numbers. The file is deleted when you log out.
• Device and session data: For each signed-in device we keep a one-way hash of its random session token (the token itself is stored only on the device), the device name, the app version and the time it last connected. If you allow notifications, we also keep the Apple push notification token of each device.
• Sign-in protection: To limit abuse of the sign-in form, the server records sign-in attempts under one-way hashed fingerprints of your IP address and phone number, and keeps the time of each new sign-in (without any identifier) for 30 days.
• Messages: Messages are fetched from Telegram and relayed to your devices when you open a chat. The server does not save the text of your messages to disk.
• Photos, videos, voice messages and profile pictures: When they are shown in the app, the server downloads them from Telegram and keeps a temporary copy so they load faster next time. Photos, videos and voice messages are kept for 3 days and profile pictures for 7 days, then deleted automatically.
• Voice message transcripts: When you ask for a voice message to be turned into text, the server keeps the resulting text for 30 days so it does not have to transcribe the same message again.
• Your recordings: Voice messages and dictation you record on the watch are sent to our server, converted for Telegram or turned into text, and deleted as soon as that is done. The text of a dictation is not kept on the server.
• Calls: Telegram voice calls are relayed through our server in memory only. They are not recorded or saved.
• Anonymous usage statistics: The apps send at most one report per event per day, such as "the app was opened" or "a message was sent", with the date, the install date, the platform and the app version. These reports contain no account, device or advertising identifier and no message content.
• Data on your devices: The watch app keeps a copy of your recent chats and messages on the watch so it opens quickly and works with a weak connection, and both apps keep your session token on the device. The chat copy and the session token are removed when you log out. Watch face complications keep a short summary (the unread count and the names and latest message preview of a few chats). In the watch app version available now, it stays until you sign in again or delete the app; an upcoming update of the watch app removes it together with the chat copy when you log out.
• Microphone and speech recognition: The watch uses the microphone only while you record a voice message, dictate or are in a call. The iPhone app can use Apple's speech recognition to turn voice messages from your watch into text.

2. How We Use Your Information

We use your information exclusively to:

• Authenticate your Telegram account and maintain the session
• Fetch and deliver your messages, voice notes, photos and videos
• Send push notifications for new messages and incoming calls
• Convert audio formats for compatibility between Apple Watch and Telegram, and turn voice messages and dictation into text
• Protect the sign-in form from abuse and help you when you contact support
• Count, in aggregate, how many people use the app and which features they use

We do not sell your information, show ads or use it to track you across other apps and websites.

3. Data Storage and Security

• Communication between the apps and our server is encrypted in transit with HTTPS/TLS.
• Communication between our server and Telegram uses Telegram's MTProto protocol, which encrypts the connection between our server and Telegram. This is not end-to-end encryption: like Telegram's own apps for regular (cloud) chats, our server decrypts your messages in order to show them on your watch. Telegram Secret Chats are not supported.
• Session files, account records and the media cache are stored on our server in Germany. Access to them is restricted to the account that runs the service; they are not additionally encrypted on disk.
• The developer can see the list of signed-in accounts (phone number, Telegram user ID, devices and last activity) in an administration panel, and uses it only for support and to stop abuse.
• Server logs record technical events such as requests, errors and incoming calls, and may include IP addresses. They do not contain message text, contact or device names; phone numbers are masked and session tokens are removed.

4. Third-Party Services

Telegraf uses the following third-party services:

• Telegram API (MTProto via Telethon): For accessing your Telegram account and messages. Subject to Telegram's Privacy Policy.
• Apple Push Notification service (APNs): For delivering push notifications to your Apple Watch. A notification contains the sender's name, up to 200 characters of the message text and may contain a small profile picture, so this content passes through Apple. Subject to Apple's Privacy Policy.
• Apple speech recognition (iPhone): When the iPhone app turns a voice message into text, recognition runs on the iPhone if your language supports it; otherwise Apple processes the audio on its servers. Subject to Apple's Privacy Policy.
• Cloudflare: Traffic to our website and server passes through Cloudflare, which protects the service and terminates the HTTPS connection before forwarding it to our server. Subject to Cloudflare's Privacy Policy.
• Hetzner: Our server is hosted by Hetzner Online in Germany.
• Whisper speech recognition (server): Voice-to-text on the server uses the open-source Whisper model running on our own server. Audio sent for transcription is not shared with any external service.
• Usage statistics: Anonymous usage reports go to our own statistics service (Marshal Stack), which keeps only aggregate daily counters, not individual reports.

We do not send your messages or recordings to external AI services, and the apps contain no advertising or third-party analytics SDKs.

5. Data Retention

• Phone number, account record, session tokens, push notification tokens and the Telegram session file are kept while you are signed in. They are deleted when you log out, when you end the session in Telegram, or after 90 days in which none of your devices used the app.
• Cached photos, videos and voice messages: 3 days. Cached profile pictures: 7 days. Voice message transcripts: 30 days. These copies are deleted automatically when their time is up, including after you log out.
• Your recordings and dictation: deleted right after they are sent or transcribed; any leftover file is removed within one day.
• Sign-in attempt records: they count for at most one hour and are deleted at the server's next cleanup after that. Anonymous sign-in times: 30 days.
• Chat copy and session token on your devices: until you log out or delete the app. Complication summary on the watch: until you sign in again or delete the app (removed on log out once the watch app is updated).

6. Your Rights

You have the right to:

• Log out and terminate your Telegram session at any time ("Log Out & Delete Data" in the app's settings); this deletes your account data from our server as described above
• Request access to, or deletion of, the data we hold about you, including cached media and transcripts, by writing to us
• Stop using the service at any time

7. Children's Privacy

Telegraf is not intended for children under 16. We do not knowingly collect personal information from children under 16.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at [email protected].