Privacy Policy

Last updated: 17 September 2026

Minedy is a journalling Mini App that runs inside Telegram. This page explains what it stores, why, and how to have it removed. If anything here is unclear, write to hello@minedy.app and we will answer.

What we store

• Your entries. The text you write, and the date, mood, place and photos you attach to it.
• Your Telegram account identifier. Your numeric Telegram ID, and the name, username and avatar Telegram shares with the app, so your diary can be recognised as yours the next time you open it. We never see your phone number, your contacts or your chats.
• Your settings. Language, theme, reminder time, and whether an app lock is switched on.
• Payment records. When you buy Premium, Telegram tells us the payment identifier, the amount in Stars and the plan. Card details never reach us — Telegram handles payment entirely.
• Messages you send us. If you use the support form on this website, what you type — your Telegram username, email address, topic and message — is emailed by our own web server straight to our inbox. No outside form service handles it. To keep spam out without a captcha, the server briefly counts messages per IP address; it stores a one-way hash of the address rather than the address itself, and clears those counts within two days. We keep those emails only as long as we need them to help you.
• Product analytics. We use PostHog to count which screens and features are used. Analytics is tied to a one-way pseudonym rather than your Telegram identity, and the text of your entries, your photos and your Telegram name are never sent to it.

How your entries are protected

Entry text is encrypted (AES-256-GCM) before it is written to the database, and the key is held only as a secret of the server function that reads and writes entries — it is not stored in the database itself. A copy of the database on its own therefore reveals no readable diary text. You can additionally lock the app on your device with a PIN or Face ID / Touch ID.

This protects your entries against someone obtaining the stored data. It is not end-to-end encryption: the server function decrypts entries in order to show them to you.

Who else sees it

We do not sell your data and we do not share it for advertising. It is processed only by the infrastructure providers the app needs to run:

• Supabase — database, authentication and server functions.
• Cloudflare R2 — storage for photos you attach.
• PostHog — product analytics, as described above.
• Telegram — sign-in, payments in Stars, and the reminder messages the bot sends you.
• Google Analytics — website statistics, and only for visitors who accept the cookie banner (see below).

Cookies and local storage

The landing page stores your language preference and your answer to the banner below in your browser's local storage. Both are strictly functional: they exist so the site remembers your choice, and they are never used to track you.

Analytics cookies, only if you say yes. We use Google Analytics 4 to understand which ads and links bring people here and which parts of the page they read. It sets cookies and receives your IP address, device and browser details, the pages you open and the campaign parameters in the link you arrived through. It is not loaded at all until you accept it in the banner — decline, and no analytics script reaches your browser.

You can change your mind at any time by clearing this site's data in your browser; the banner will ask again on your next visit. Google acts as our processor for this; see Google's privacy policy.

The app inside Telegram is separate and uses no cookies at all; its product analytics are described above.

Inside the app, your device also stores the passcode you set for the app lock and a few display preferences. Those stay on your device.

How long we keep it

Your entries stay until you delete them. Deleting your diary in Settings removes every entry, photo and place permanently. Payment records are kept as long as the law requires for accounting and refunds, even after an account is removed.

Your rights

You can ask us for a copy of your data, ask for corrections, or ask us to delete everything we hold about you. Write to hello@minedy.app from the Telegram account in question, or delete your diary yourself in Settings. We answer data requests within 30 days.

Children

Minedy is not intended for children under 13, and we do not knowingly collect their data.

Changes

If this policy changes in a way that affects you, we will say so in the app or in our Telegram channel before the change takes effect.

Contact

Questions about your data: hello@minedy.app.