Privacy Policy

Version 2026-10-08. Effective 8 October 2026.

This policy covers agegen.ai, the Prime Age Telegram Mini App, and the Prime Age connector that lets an AI assistant such as Claude or ChatGPT read and update your Prime Age account. It lists every field we store, because a policy that describes categories instead of fields cannot be checked by the person it is written for.

Who is responsible

The controller of your personal data is LLC "Stabilizator.org", Zakrevskogo str. 85, 02232 Kyiv, Ukraine. Contact: info@agegen.ai.

The short version

We keep your answers to the twelve habit questions, your Telegram user ID, and — only if you give them — your email address and the body measurements you choose to log.
We do not keep your name, your Telegram username, your profile photo, your phone number or your location, even though Telegram offers several of those to us every time you open the app.
Everything is stored in the European Union (Frankfurt and Nuremberg, Germany).
You can erase all of it from inside the app, in two taps. It is a real deletion, not a flag.
If you connect an AI assistant, it can read your Prime Age and record a check-in or a measurement when you ask it to. You can disconnect it at any time.
We do not sell data, we run no advertising trackers, and we share nothing with data brokers.

What we collect, field by field

Your account

Telegram user ID — a number. It is how we recognise you on your next visit; there is no password and no separate account.
Interface language — English or Russian, taken from your Telegram setting.
Time-zone offset — a number of minutes from UTC, so that "today" means your day and a reminder arrives at the hour you chose. It is not a location: an offset is shared by everyone on the same meridian.
Your age — the number you type before the questions.
Streak counters and the date of your last check-in.
Reminder hours (morning and evening), and whether reminders are on.
The goal you picked, if you picked one.
Your referral code, and who invited you if you arrived on somebody's link, plus a one-word label for the link or channel that brought you (for example an invitation, or claude when you signed up through an AI assistant).
A link to your public result page, only if you created one from the share screen. Creating a new link retires the old one.
Created and last-seen timestamps.
Email address — optional, and only if you enter it. Its purpose is stated where we ask for it: so that your account and subscription can follow you when the app becomes available outside Telegram. We record when you confirmed it, and whether you agreed to receive emails from us; the two are separate.

Your answers

For each of the twelve levers: which option you chose, the weight that option carries, the date it applies to, whether it came from the questionnaire or a daily check-in, and the timestamp of the tap.
Your Prime Age for each day you answered, with the delta and the Signal count.

The timestamp deserves a word, because it is used for something: the moment you answer the sleep question is treated as your wake time, and the spread of those moments across a week is what produces the sleep-regularity score. That is the whole use; it is described in the methodology.

Body measurements, if you log them

Logging measurements is optional. If you do, we store which measurement (for example weight or resting pulse), the value, the date it applies to and when you entered it, plus which measurements you chose to keep on your form. We ask for a separate consent the first time you open the log. Measurements are shown back to you as trends; they never change your Prime Age.

Prime Points, gifts and messages to us

Prime Points: each award and each spend, with its reason and date, so the balance can always be explained.
Gift codes: the code, the plan, who bought it and who redeemed it. A buyer sees that a code was redeemed, never by whom.
Feedback and payment-support requests: the text you send us, when, and our reply.

When you press a share or save button, the picture is stored for 24 hours so that Telegram can fetch it, and then deleted. At most three are held at a time. Nothing is stored when you only open the share screen.

Usage events

Our server records that something happened in the app — for example that it was opened, that a check-in was saved, or that a plan was viewed — with the date and a few technical labels. Never the text of anything you wrote. We use this to count how the app is used.

For each consent you give: what it was for, the version of the document that was on screen, whether you granted it, and when. We keep these because we have to be able to show what you agreed to, not merely assert that you did.

Subscription and payments

Whether your subscription is active, through which provider, and when it expires.
For each payment: the provider's charge identifier, the amount, the currency, the period it covers, and whether it was refunded.

We never see or store a card number. Payments in Telegram Stars are handled entirely by Telegram; we receive a confirmation, not a payment instrument.

What we deliberately do not collect

Telegram hands an app your first name, last name, username and profile photo on every single open, and its login page does the same when you connect an AI assistant. We read your user ID and your language, and discard the rest before anything is written down. We also do not collect:

your phone number, your contacts or your Telegram chats;
your precise or approximate location;
any data from Apple Health, Health Connect, or any wearable — version 1 of the app requests no health permissions at all;
advertising identifiers, cross-site cookies or third-party trackers;
your IP address in our own records. Our infrastructure providers keep short-lived server logs, described below, that we do not mine or join to your account.

Using Prime Age through an AI assistant

You can add the Prime Age connector to an AI assistant such as Claude or ChatGPT. Without signing in it only offers the questionnaire and a search of agegen.ai, and stores nothing. To reach your own account you sign in on our page with Telegram's login, and agree to connect.

What we store for the connection: the assistant's public registration (its name and the address it returns to), the sign-in request, and the access keys we issue. We store the keys only as one-way hashes. A sign-in code is valid for 2 minutes and works once; an access key for 1 hour; a renewal key for 90 days.
What the assistant can do: read your Prime Age, habits, check-ins, goal and logged numbers, and — when you ask it to — record a check-in or a measurement, set your goal, or save a questionnaire you took in the conversation. A Pro subscription works there exactly as in the app. Nothing is sold through the assistant.
What we receive from the assistant: only the request it sends to one of our tools — for example the answers to a check-in. We do not receive your conversation.
The assistant's provider (for example Anthropic for Claude or OpenAI for ChatGPT) receives what our tools return to it during your conversation, and handles your conversation under its own privacy policy, as an independent controller. This policy does not cover it.
Disconnecting: remove the connector in the assistant's settings. The access key it holds stops working within the hour; deleting your Prime Age account removes every key at once.

Answers about your habits

Questions about sleep, alcohol, tobacco, diet, exercise and waistline can reveal information related to your health. We therefore treat them as special category data under Article 9 GDPR and ask for your explicit consent before the first question, rather than relying on an argument about whether they qualify. You can withdraw that consent at any time by deleting your account, which erases the answers with it.

Why we are allowed to hold it

Data	Purpose	Legal basis
Account, answers, scores	Providing the app you asked for	Performance of a contract, Art. 6(1)(b), together with your explicit consent under Art. 9(2)(a)
Body measurements	The measurement log you chose to keep	Your explicit consent, Art. 9(2)(a), asked separately
Assistant connection	Giving the assistant you connected access to your account	Performance of a contract, Art. 6(1)(b), at your request
Usage events	Counting how the app is used and keeping it working	Legitimate interests, Art. 6(1)(f)
Email address	Account continuity beyond Telegram	Consent, Art. 6(1)(a) — you enter it or you do not
Reminders	A feature you switched on	Consent, withdrawn by switching it off
Consent records	Showing what you agreed to	Legal obligation and accountability, Art. 5(2) and 6(1)(c)
Payment records	Accounting, tax, refunds and disputes	Legal obligation, Art. 6(1)(c)

Where it is stored, and who processes it

Supabase — the database and the app's server code, hosted on AWS in Frankfurt, Germany (eu-central-1).
Hetzner Online GmbH — the servers in Nuremberg, Germany that deliver the app's files and run agegen.ai.
Cloudflare — DNS and content delivery in front of agegen.ai. It terminates connections and keeps short-lived request logs.
Brevo (Sendinblue SAS, France) — sends the emails we send you, such as the link that confirms your address.
Telegram — the platform the app runs inside and the channel through which Stars payments are made. Telegram is an independent controller for the data it holds about your Telegram account; this policy does not cover it. See Telegram's own privacy policy.

Your account data is stored in the European Union. Where a provider's support or logging touches data outside the EU, that transfer runs on the European Commission's Standard Contractual Clauses.

How long we keep it

Your account and everything attached to it: until you delete it. There is no inactivity purge — an account you do not open still holds the history you built.
Payment records: retained for as long as tax and accounting law requires, with the link to your account removed when you delete your account. What survives is an amount, a currency and a provider's charge identifier — nothing that identifies you.
Share banners: 24 hours.
Assistant access keys: until they expire (1 hour, or 90 days for the renewal key) or you disconnect; all of them are deleted with your account.
Usage events: kept, but the link to your account is removed when you delete it.
Consent records: deleted with your account. Erasure wins over our interest in keeping proof.
Server logs at our providers: their standard short retention periods.

Deleting everything

In the app: More → Delete my account, then confirm. It runs immediately and it is not reversible. Your answers, your history, your streak, your measurements, your points, your consents, your subscription record and every assistant connection are erased in the same operation. If you would rather ask us, write to info@agegen.ai from the address on your account.

Deleting your account does not cancel a Telegram Stars subscription — that lives on Telegram's side. Cancel it in Telegram before you delete, or you may be charged for another period.

Your rights

Under the GDPR, the UK GDPR and Ukraine's Law on Personal Data Protection you may: get a copy of your data; correct it; erase it; restrict or object to how we use it; receive it in a portable format; and withdraw a consent at any time without affecting what was lawful before you withdrew it.

Write to info@agegen.ai. We answer within 30 days. You can also complain to a supervisory authority — in the EU and the UK, the one for the country where you live or work; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.

Children

The app is for people aged 16 and over and asks you to confirm that before anything else. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to us and we will erase it.

Automated decisions

Prime Age is a published formula applied to answers you typed — every weight is on the methodology page. It produces no decision with legal or similarly significant effects, and no profiling is used to target you.

Analytics and cookies

The Mini App sets no cookies and carries no third-party analytics; the only usage records are the server-side events described above. On agegen.ai we run self-hosted, cookieless analytics that count page views without identifying visitors, and Cloudflare's own aggregate statistics.

Security

All traffic is encrypted in transit. The app's database has row-level security enabled with no access granted to the browser at all: the app cannot read or write the database directly, only through server code that verifies the signature Telegram attaches to your session. We keep no payment instruments, which is the most effective security measure available to us.

Changes

If this policy changes materially we will ask for your consent again in the app, and the version number at the top will move. Every consent we hold records which version you saw.