EN
Privacy policy
What we store
- Telegram profile: numeric ID, first and last name, username (@username), language. If your profile photo is visible to bots under your Telegram privacy settings, we keep a small copy and show it to you and to people you have loans with; it is refreshed weekly and deleted with your account. We do not receive your phone number or contact list.
- Settings: language, theme, main currency, time zone, whether reminders are on.
- Country: derived from your IP address at sign-in (the address itself is not stored) or, if that is not possible, from your Telegram language. Used for statistics.
- Loans: amount, currency, dates, interest, payment schedule, method, notes, the other party’s name, payments and their comments. For people without Telegram, only the name you typed.
- Payment attachments (receipts, screenshots — JPG, PNG, HEIC, PDF) are stored on the server. EXIF metadata, including location, is stripped from JPEG photos.
- Items you lent or borrowed (beta): name, note, return date, return and damage marks, up to 5 photos per item. Photos are compressed in the app, and their metadata (EXIF, including location) is stripped on the server.
- Picked contacts: if you choose a person in the Telegram picker, we receive only their ID, name and @username — and only for that loan.
- Supporting the project: the amount in Telegram Stars and the date. Telegram processes the payment; we never see payment details.
- Technical events (pressed Start, opened the app, created a loan, etc.) and a log of sent messages — to run reminders and produce overall statistics, with no advertising trackers.
Who can see your data
- The other party sees the amount, dates, payments and attachments of that loan only. The same goes for an item: its name, photos and due date are visible to you and the other person. A personal record (a person who is not on Telegram) is visible to you alone.
- The service owner has technical access to the database and a private admin panel — to fix problems, help you, stop abuse and compute overall statistics. Only the owner can sign in, through a one-time link from the bot, and every action is written to an audit log.
- Platforms and providers: Telegram (message and payment delivery), the hosting provider and, if used, Cloudflare (traffic). Exchange rates are requested from public sources; no personal data is included in those requests.
- We do not sell data, share it with ad networks, or use it to train models.
Bot messages
The bot sends confirmation requests, payment notices and reminders. You can turn reminders off with /stop or in the app profile — confirmation requests and payment notices keep coming so you do not miss something that needs your answer.
How long we keep data
- As long as you have an account. Closed loans stay in your history — it is your record.
- Deleting your account (Profile → “Delete account and data”): your personal records and unconfirmed loans are removed entirely, along with your files. Confirmed loans with other people stay with them, but your profile in them is anonymised.
- Export (Profile → “Download my data”): an Excel or JSON file with all your loans, payments and items.
- Database backups, if made, are removed as they age and kept no longer than 30 days. Copies the server makes before clearing test data are kept for 7 days.
Security
Sign-in is verified with Telegram’s signature. Traffic is protected by HTTPS. Files are stored outside the public folder and open only to loan participants through short-lived links. No system is perfectly secure, so please do not put passwords, card numbers or other secrets in notes.
Children
The service is not intended for children.
Your rights and contact
You can request access, correction or deletion — do it yourself in the app or email us at hello@quits.me. We will reply within a reasonable time. We will announce material changes to this policy with a message from the bot.
Quits is a record-keeping tool. It is not a lender, bank or payment service, does not verify records, and does not replace a contract or receipt.