Draft for legal review. Passages marked Review could not be verified from the app's source code or need a decision by Kyra Labs. This note and the marks are removed once the text has been checked.
Effective date: 21 October 2026 Review: set on publication
Summary
- Kyra Labs collects nothing. You have no account with us. The app has no analytics, no ads, no crash reporting and no telemetry, and Kyra Labs runs no server that the app sends data to.
- The app talks to Telegram, through TDLib, Telegram’s official client library, because that is how your messages reach you. Telegram processes your data under Telegram’s Privacy Policy.
- Builds with “-gms” in their names also use Google’s push service (Firebase Cloud Messaging) to wake the app when a message arrives. Telegram encrypts the content of each push, so Google passes on only encrypted data. The plain builds contain no Google Play services or Firebase.
- Links you open go to your own browser or apps. Pingogram does not load web pages itself.
- What is on your phone stays there: Telegram’s local database is encrypted with a key protected by the Android Keystore, and Android backups and device transfer are turned off for the app.
- Permissions are used only for the feature that needs them, and Android asks you first where it has to (notifications, microphone, location).
- This website sets no cookies, has no analytics and loads nothing from other companies.
Who we are
Pingogram is made by Kyra Labs (kyralabs.dev). Kyra Labs is responsible for the app and for this website. You can reach us at contact@kyralabs.dev. Review: legal name, address and whether a “controller” statement is needed
Pingogram is free software. Its complete source code is public at github.com/kyra-labs/pingogram-android, so anyone can check what this policy says.
Pingogram is not affiliated with Telegram. Your Telegram account, and the data Telegram keeps for it, are governed by Telegram’s own Terms of Service and Privacy Policy.
What Kyra Labs collects
Nothing, through the app. The app contains no analytics, advertising, crash-reporting or telemetry code, and it never sends anything to Kyra Labs.
If you email us or open an issue on GitHub, we receive what you send and use it only to answer you. Issues on GitHub are public and handled by GitHub under the GitHub Privacy Statement. Please don’t post screenshots of private chats or phone numbers there.
What the app sends, and to whom
Telegram
Pingogram connects to Telegram’s servers through TDLib. Everything you do in a Telegram app goes there: signing in with your phone number, your messages, photos, files, voice messages, reactions, the chats you open and the settings that belong to your Telegram account. When you sign in, the app identifies itself to Telegram, as Telegram’s rules for clients require, with:
- your device’s manufacturer and model (for example “Google Pixel 8”) and Android version,
- the app’s name and version (“Pingogram 0.3.0”),
- your phone’s language.
Telegram lists them with your active sessions, which every Telegram app shows you. In channels, Pingogram shows Telegram’s sponsored messages, as Telegram requires, and tells Telegram when you see or tap one, like the official apps do.
Telegram processes all of this under Telegram’s Privacy Policy. Kyra Labs never sees it.
Google (only in builds with “-gms” in their names)
The plain builds contain no Google Play services or Firebase code and never contact Google. The builds with “-gms” in their names add Firebase Cloud Messaging (FCM), Google’s push service, so that new messages arrive even when the app is closed:
- Only after you sign in does the app ask Google’s Play services for a push token. It gives the token to Telegram, which uses it to send pushes.
- Telegram encrypts each push for your device, and only the app can read it. Google learns that a push was delivered to the device, and when, but not what it says.
- Firebase Installations, part of FCM, creates an installation ID that Google uses to deliver pushes. Review: confirm what Firebase Installations sends with the merged gms manifest
- Firebase’s data collection, Google Analytics for Firebase and the export of delivery metrics are turned off in the app.
- When you log out, the app deletes the push token.
Google processes this under the Google Privacy Policy.
Links you open
When you tap a link in a message, a sponsored message or the app’s About page, Android opens it in your browser or in the app you chose for such links, and that site’s own policies apply. Pingogram does not fetch web pages itself: link previews in chats come from Telegram, images and videos come only from files TDLib downloaded from Telegram, and “Open in maps” hands the coordinates to your maps app.
Nothing else
The app contains no other network code: no web views, no map services, no update checks. The fonts and icons are part of the app.
What stays on your phone
- Your Telegram data. TDLib keeps a local copy of your chats, messages and the files you download in the app’s private storage. The database is encrypted with a random key, which is itself encrypted by a key in the Android Keystore.
- The app’s settings: theme and colors, automatic download rules, recently used emoji, whether the notification explanation was shown, “Keep connected” (plain builds), the app language (Android 8 to 12, where Android has no per-app language) and the passcode lock’s settings. The passcode itself is stored only as a salted hash (PBKDF2-SHA512).
- Temporary copies of photos, files and voice messages you send, kept until they are uploaded; anything older than 7 days is deleted when the app starts.
- No backups. Android’s cloud backup and device-to-device transfer are turned off for the app, so none of this leaves your phone that way. On a new phone you sign in again and your chats come from Telegram.
You stay in control:
- Settings → Data and storage clears downloaded media.
- Logging out deletes this account’s data from the phone, including secret chats, which exist only on the device. The app’s settings stay until you uninstall.
- Uninstalling removes everything the app stored.
- To delete your Telegram account itself, use Telegram’s account deletion: that is between you and Telegram.
Permissions
Pingogram asks only for what its features need. The ones marked “asked” show Android’s permission prompt the first time you use the feature, after the app explains why.
| Permission | What it is for | When |
|---|---|---|
| Internet | Connecting to Telegram through TDLib. | At install |
| Notifications | Showing new messages and the progress of files you send or download. | Asked, Android 13 and later |
| Microphone | Recording voice messages, only while you hold the microphone button in a chat. | Asked |
| Location (approximate or precise) | Sending your current location from the attach menu, only while that sheet is open. Never in the background, no live location. You can choose to share only an approximate location. | Asked |
| Biometrics | Unlocking the optional passcode lock with your fingerprint or face. Android checks the biometric itself; the app never sees it. | At install |
| Storage | Saving a photo, video or file to your phone, only on Android 8 and 9. Later versions need no permission for that. | Asked, Android 8 and 9 |
| Foreground service (data sync) | Finishing sending or downloading the files you started after you leave the app, with a notification while it runs. Never for automatic downloads. | At install |
| Live Updates | Letting Android 16 show the progress of those transfers in the status bar. You can turn this off in Android’s settings. | At install |
| Network state | Knowing whether you are on Wi-Fi, mobile data or roaming, for the automatic download rules, and reconnecting quickly when the network changes. | At install |
| Wake lock | Briefly keeping the phone awake to send a reply from a notification (Android 11 and earlier) or, in “-gms” builds, to handle a push. | At install |
| Foreground service (special use), start at boot | Plain builds only: the optional “Keep connected” mode, off by default, which keeps the connection open in the background with a notification and restarts after a reboot only if you turned it on. | At install |
| Receive push messages | “-gms” builds only: receiving pushes from Firebase Cloud Messaging. | At install |
Pingogram does not ask for your contacts (sharing a contact opens Android’s contact picker for that one contact), the camera (taking a photo opens your camera app), your photos and files (Android’s photo picker and file picker give it only what you pick) or your location in the background. Review: check the list against the merged release manifests of both builds
Notifications
Notifications show the chat, the sender and a preview of the message, unless you turned previews off for that kind of chat. When your lock screen is set to hide sensitive content, it shows only how many messages arrived. On Android 11 and later, chats with notifications also appear as conversation shortcuts on your phone; they are removed when you log out.
The passcode lock
The optional passcode lock hides the app behind a PIN or password, and optionally your fingerprint or face, and can hide the app’s content in the recent apps screen. It protects what is shown on screen; your data is encrypted separately, as described above. If you forget the passcode, the only way back in is to log out, which deletes the account’s data from the phone.
This website
pingogram.kyralabs.dev is a static website:
- No cookies, no analytics, no tracking pixels, no advertising and no embedded content from other companies. Fonts, images and scripts all come from this website.
- Local storage: if you pick a color theme in the menu, the choice is kept in your browser under the key
pingogram:theme. It never leaves your browser. - Server logs: the website is hosted on Cloudflare Pages. Like any web host, Cloudflare processes technical data of each request, such as your IP address, browser and the page requested, to deliver and protect the site, under the Cloudflare Privacy Policy. Kyra Labs does not use these logs to identify visitors. Review: Cloudflare account settings and log retention
- Downloads of the app come from GitHub Releases. When you download an APK, GitHub serves it under the GitHub Privacy Statement.
Children
Pingogram is a client for Telegram, and Telegram sets the minimum age for its service; the app shows Telegram’s terms, including that age, when you create an account. Kyra Labs collects no data from anyone, including children.
Security
The app keeps its data in Android’s private app storage, encrypts Telegram’s database with a key protected by the Android Keystore, and is built from public source code. Messages travel between the app and Telegram encrypted by Telegram’s MTProto protocol, which TDLib implements. If you find a security problem, please report it privately through GitHub’s vulnerability reporting or by email to contact@kyralabs.dev, as described in the project’s security policy.
Your rights
Because Kyra Labs holds no personal data from the app, there is nothing for us to give you, correct or delete. If you have written to us, you can ask us to delete your emails. For the data Telegram holds, use the options in your Telegram settings or contact Telegram as described in its Privacy Policy. Review: rights under GDPR, India’s DPDP Act and other applicable laws
Changes to this policy
If the app or the website starts to handle data differently, this page changes before or with that release, and the effective date at the top changes with it.
Contact
Kyra Labs, contact@kyralabs.dev.