Telegram Privacy Policy

Telegram · Official agreement

Read the agreement

10 of 73 cards in Data Access & Collection

Data Access & Collection · Company practice

You give a mobile number and basic profile data to create an account

To create a Telegram account you provide your mobile number and basic account data, which may include a profile name, profile picture and "about" information.

Supporting quotations

You provide your mobile number and basic account data (which may include profile name, profile picture and about information) to create a Telegram account.

Qualifications & exceptions

  • The profile items are described as data the account data "may include", so not every account will have all of them.

Data Access & Collection · User right or choice

A birthday is optional and you choose who sees it (default: your Contacts); age data may gate content

You can add your birthday, with or without the year, to your Telegram profile. You can choose granularly which users see it on your profile (by default, your Contacts), and they are shown a reminder on the day. Separately, Telegram says it may use data about your age to determine whether you are eligible to access age-specific content.

Supporting quotations

You can add your birthday (with or without the year) to your Telegram profile if you wish to do so. You can granularly choose which users are able to see it on your profile (by default, your Contacts), and they will be shown a reminder on the day.
We may use data about your age to determine your eligibility for accessing age-specific content.

Qualifications & exceptions

  • The age-eligibility use is stated as something Telegram "may" do.

Not stated here

  • The policy does not say whether eligibility is decided only from a birthday you add or from other age data, or what the age-specific content is.

Data Access & Collection · Company practice

Some users may be asked for a login email, stored separately and used only for login codes

From September 2022, Telegram may ask some users to provide an email address so that login codes arrive by email instead of SMS, with an option to use Sign in with Google or Sign in with Apple. Telegram receives that email address, stores it separately from any recovery email and says it will use it only to send authentication codes when you log in. It keeps the login email until it is changed or the account is deleted.

Supporting quotations

From September 2022, we may ask some users to provide an email address to receive login codes via email instead of SMS (with an option to use 'Sign in with Google' / 'Sign in with Apple').
we will receive an email address which will be stored separately from the recovery email, and will only be used to send you authentication codes when you log in to your account. The login email address will be stored until it is changed or the account is deleted.

Qualifications & exceptions

  • Applies to "some users" whom Telegram asks.

Not stated here

  • The policy does not say how users are chosen to be asked, or what information Google or Apple receive if you use those sign-in options.

Data Access & Collection · Company practice

Your phone number is your identifier; Telegram asks permission before syncing contacts and stores number and name

Telegram uses phone numbers as unique identifiers so you can switch from SMS and other messaging apps and keep your social graph. It says it asks your permission before syncing your contacts. Once synced, it stores your up-to-date contacts to tell you when one of them joins Telegram and to display names properly in notifications, and it says it needs only each contact's number and first and last name and stores no other data about your contacts.

Supporting quotations

Telegram uses phone numbers as unique identifiers so that it is easy for you to switch from SMS and other messaging apps and retain your social graph. We ask your permission before syncing your contacts.
We store your up-to-date contacts in order to notify you as soon as one of your contacts signs up for Telegram and to properly display names in notifications. We only need the number and name (first and last) for this to work and store no other data about your contacts.

Qualifications & exceptions

  • Syncing depends on your permission; you can stop syncing or delete synced contacts in Data Settings (see the next packet).

Data Access & Collection · User right or choice

You can stop syncing contacts or delete them from Telegram's servers in Data Settings

You can always stop syncing contacts or delete them from Telegram's servers in Settings > Privacy & Security > Data Settings. Telegram asks permission before syncing, and it stores synced contacts to tell you when a contact signs up and to display names in notifications, using only each contact's number and first and last name.

Supporting quotations

You can always stop syncing contacts or delete them from our servers in Settings > Privacy & Security > Data Settings.
We ask your permission before syncing your contacts.
We store your up-to-date contacts in order to notify you as soon as one of your contacts signs up for Telegram and to properly display names in notifications. We only need the number and name (first and last) for this to work and store no other data about your contacts.

Qualifications & exceptions

  • The Data Settings path is given for the mobile apps in section 9.3.

Data Access & Collection · Company commitment

On Android, a granted call-log permission is used only to confirm a verification phone call

On Android, Telegram asks for permission to access your phone call logs (READ_CALL_LOG). If you grant it, Telegram can verify your account by placing a phone call instead of asking you to enter a code. Telegram says it uses this permission only to confirm receipt of that confirmation call by checking the number in the call log.

Supporting quotations

If you are using Android, Telegram will ask you for permission to access your phone call logs (READ_CALL_LOG). If you grant this permission, Telegram will be able verify your account by transmitting a phone call instead of asking you to enter a code. Telegram uses this permission only to confirm receipt of the confirmation call by verifying the number in the call log.

Qualifications & exceptions

  • The permission is requested from you and only applies if you grant it.

Not stated here

  • The text does not say whether call-log entries are kept after the check.

Data Access & Collection · Company practice

Live Location and "Make Myself Visible" let Telegram show your location to chosen users, even with the app closed

If you share your Live Location in any chat or turn on "Make Myself Visible" in People Nearby, Telegram uses your data to display your location to the users you are sharing it with, even when the app is closed, for as long as you keep these optional features activated.

Supporting quotations

in any chat or turn on ’Make Myself Visible
Telegram will use your data to display your location to those users with whom you are sharing it, even when the app is closed – for as long as you keep these optional features activated.

Qualifications & exceptions

  • Both features are optional and the use lasts only while they stay activated.

Not stated here

  • The text does not say how long location data is kept after you stop sharing.

Data Access & Collection · Company practice

Telegram says it uses only cookies needed to run its web services, not for profiling or advertising

The only cookies Telegram says it uses are those needed to operate and provide its Services on the web, and it says it does not use cookies for profiling or advertising. Your browser should let you control or block cookies, but if you disable them you will not be able to log in to Telegram Web.

Supporting quotations

The only cookies we use are those to operate and provide our Services on the web. We do not use cookies for profiling or advertising.
You may choose to block cookies with your web browser, however, if you do disable these cookies you will not be able to log in to Telegram Web.

Qualifications & exceptions

  • The cookie statement is about cookies on Telegram's web services.

Not stated here

  • The policy does not list individual cookies or how long they last.

Data Access & Collection · Company practice

Telegram may collect security metadata such as IP address and devices, kept for 12 months at most

To improve account security and to prevent spam, abuse and other Terms of Service violations, Telegram says it may collect metadata such as your IP address, the devices and Telegram apps you have used, and your history of username changes (the list ends with "etc."). If collected, this metadata can be kept for 12 months maximum.

Supporting quotations

To improve the security of your account, as well as to prevent
abuse, and other violations of our Terms of Service, we may collect metadata such as your IP address, devices and Telegram apps you've used, history of username changes, etc. If collected, this metadata can be kept for 12 months maximum.

Qualifications & exceptions

  • Collection is stated as something Telegram "may" do ("if collected"), and the 12 months is a maximum.

Not stated here

  • The "etc." means the full list of metadata types is not given.

Data Access & Collection · Company practice

Clicking a bot's links or buttons can reveal your IP address to the bot

If you click on links or buttons provided by a bot, the bot can potentially get your IP address, provided that the bot controls the website the link leads to.

Supporting quotations

If you click on links or buttons provided by the bot, the bot can potentially get your IP address (provided that it controls the website to which the link leads).

Qualifications & exceptions

  • Described as something the bot "can potentially" get, and only where it controls the destination website.