Your privacy, in plain words

1. Who runs Telomni

Telomni (@TelomniApp on Telegram) is a personal project, run by one person (we call them "the operator" here) on a server they rent and control. It isn't a company, and it's free to use: there's nothing to pay and nothing to buy. Access is by invitation, and the operator decides who's in.

That makes the operator responsible for your data, and the person to ask about it.

2. What's kept, and for how long

Telomni keeps as little as it can, and deletes things on a schedule. Times below are the server's current settings; the operator can change them, and this page will say so if they do.

Things that aren't kept at all: voice messages (they're turned into text on Telomni's own server, and the recording isn't stored), the files you send (only a document's text, and only if you ask to keep it), and pictures' hidden details like location (see below). The server's logs don't contain your messages, the links you send, or email addresses.

3. Who can see it

• The AI model you picked gets what's needed to answer: your message, the recent conversation, and what you asked it to read (a document, a web page, an email). See the next section.
• The operator can see who uses Telomni, how much, and what it costs, and reads the feedback you send. Encryption protects your data from someone who copies the database file, but not from the operator: the server has to be able to read your data to work, so they could technically read your conversations, memories and documents too. They don't need to and don't make a habit of it, but you should know it's possible.
• People in your groups see what Telomni says there. If you write @TelomniApp in someone else's chat (guest mode), its answer is for everyone in that chat. It only shares when you're busy, or what it knows about you, if you switch that on yourself (both are off by default).
• Friends on the galaxy map see your planet's name and look, only if you choose to show it, and never whose it is.
• Nobody else. No advertisers, no data brokers, no analytics companies.

4. Services your data goes to

Telomni works with a few outside services. Each sees only what it needs, under its own privacy policy:

• The AI provider of the model you use (for example Anthropic for Claude, OpenAI, Google for Gemini, OpenRouter, DeepSeek, Mistral). They receive your messages and what you ask the AI to read, so they can answer. They keep data under their own terms: many don't train their AI on what's sent through their API and delete it after a while, but each provider decides for itself, so check theirs if it matters to you. If you add your own API key, your own agreement with that provider applies.
• Telegram carries every message between you and Telomni, as with any Telegram chat.
• Web search: Claude searches the web through Anthropic; other models search and read pages through Tavily. Only the search or the address goes there, not your conversation.
• Weather: Open-Meteo gets the name of the place, then its coordinates. Nothing about you.
• Pictures you ask Telomni to make are made by the image provider the operator set up, from the description the AI writes.
• Accounts you connect yourself (Google Calendar and Gmail, Outlook, Notion, GitHub, Todoist, your mail provider): Telomni reads and changes things there only for you, and only after you tap ✅ for each change.
• The server's hosting company rents the machine Telomni runs on. Your data is encrypted on its disks.

5. How it's protected

• Encrypted at rest. Conversations, memories, tasks, lists, documents, group messages and more are encrypted with AES-256-GCM before they're saved, each bound to its own person or chat, so one person's data can't be moved to another's. The key lives outside the database, so a copied database file is unreadable.
• Hidden details stripped from pictures. An image sent as a file can carry where and when it was taken and on which phone. Telomni re-saves every image without any of that before the AI sees it.
• A tap before anything changes. Telomni never sends an email, adds an event or edits a page in your accounts without showing you exactly what it will do and waiting for your ✅. It can't delete things in most of them at all.
• Other people's words are just data. Emails, web pages and documents can try to give the AI orders. Telomni marks them as information, not instructions, and holds back from searching the web on its own once private data has been read.
• Deleting means deleted. The database overwrites what's removed, so it can't be dug back out of the file.
• Your API key stays secret. It's encrypted, never shown (only its last 4 characters), never logged, and a message that looks like it contains one is deleted from the chat.
• A locked-down server. The bot runs as its own user in a sandbox that can only write its own data, the Mini App checks Telegram's signature on every request, and everything travels over HTTPS.
• Encrypted backups. Backups, kept so nothing is lost if the server fails, are encrypted too, and Telomni can seal them with a key built to resist future quantum computers.

6. Your choices

• See and delete memories: /memory in the chat, or the Mini App's Settings.
• Start a conversation afresh: /reset.
• Delete the last 48 hours of your chat: /nuke.
• Disappearing messages: /fade deletes your private chat and its saved conversation after 1 to 48 hours.
• Download everything kept about you: /export, or Settings → Download my data. It's one file you can open anywhere.
• Erase everything: /erase, or Settings → Danger zone. You can keep using Telomni afterwards, starting fresh, or leave it altogether.
• Pictures' details, guest mode, and your planet on the map each have a switch in Settings.

7. What we can't promise

Being honest about the limits matters as much as the protections:

• The operator's access. As explained above, whoever runs the server could read what's on it, including, in principle, your own API key and account sign-ins while they're being used. If you add an API key, use one just for Telomni, with a spending limit.
• AI providers see what's sent to them, under their own terms.
• Telegram only lets bots delete messages from the last 48 hours, so /nuke and /fade can't reach older ones in the chat itself.
• Backups made before you deleted something still hold it, until they're replaced.
• AI makes mistakes. Check anything important it tells you.

8. This website

telomni.app sets no cookies, has no analytics, and loads nothing from anyone else. Cloudflare delivers it, and, like any web host, sees your IP address and browser for security and to keep it running.

9. Changes and contact

If this policy changes, the date at the top changes too, and anything important will be announced in Telomni. Questions, or something you'd like deleted? Send /feedback to @TelomniApp, and the operator will answer there.

See also the Terms of Service.