Operator and contact
Hemant Patel, Madhya Pradesh, India. Support and deletion requests: hp316337@gmail.com. Intended audience is adults 18+ in India; technical age enforcement and distribution review remain pending.
On your phone
TDLib handles phone number, OTP, optional 2FA and saved Telegram session. Joined chats/messages used for selected forwarding or filters, clipboard content, tap coordinates and app preferences are processed locally. OTP, 2FA and Telegram session secrets must not be sent to normal backend records or logs.
Cloudflare account service
The proposed Worker/D1 service stores a pseudonymous verified Telegram account identifier, encrypted identity field, device public-key binding, session hash/epoch, paid expiry, order/payment identifiers, amounts, status and minimal security records. Provider network/security logs may also exist. Selected sensitive values are encrypted in application code; this is not a claim that all metadata is hidden or that the system is hack-proof.
Cashfree and payment contact
Checkout needs a payment contact mobile number. It is sent over TLS to the backend and Cashfree for the order, not accepted as proof of Telegram identity. The app does not keep that number as a saved payment setting and the proposed D1 order record does not store it. Cashfree and payment providers process payment/bank details under their own policies; our app does not collect UPI PIN/card authentication secrets.
Retention and deletion
Financial/legal retention periods need legal review. A 14-day encrypted backup proposal and support cleanup 30 days after case closure remain proposals, not operational guarantees. Provider restore windows may differ. Verified account/data deletion and backup-erasure/restore procedures must be qualified before a production claim.
Your choices
You may revoke Accessibility/overlay permission, stop automation, log out or request account/data deletion. Revoking permission is not the same as server deletion. Contact support for correction/access/deletion requests; do not send OTP, passwords or private keys.
Actual versus proposed
Cloudflare/Cashfree integration is local source under test. Existing Firebase legal pages are not changed by this preview. Cloudflare account access, live payment, production deletion, merchant KYC and settlement remain unverified.