Privacy Policy
Version 2026-08-26. Effective 26 August 2026.
This policy covers agegen.ai and the Prime Age Telegram Mini App. It lists every field we store, because a policy that describes categories instead of fields cannot be checked by the person it is written for.
Who is responsible
The controller of your personal data is LLC "Stabilizator.org", Zakrevskogo str. 85, 02232 Kyiv, Ukraine. Contact: info@agegen.ai.
The short version
- We keep your answers to the twelve habit questions, your Telegram user ID, and — only if you give it — your email address.
- We do not keep your name, your Telegram username, your profile photo, your phone number or your location, even though Telegram offers several of those to us every time you open the app.
- Everything is stored in the European Union (Frankfurt and Nuremberg, Germany).
- You can erase all of it from inside the app, in two taps. It is a real deletion, not a flag.
- We do not sell data, we run no advertising trackers, and we share nothing with data brokers.
What we collect, field by field
Your account
- Telegram user ID — a number. It is how we recognise you on your next visit; there is no password and no separate account.
- Interface language — English or Russian, taken from your Telegram setting.
- Time-zone offset — a number of minutes from UTC, so that "today" means your day and a reminder arrives at the hour you chose. It is not a location: an offset is shared by everyone on the same meridian.
- Your age — the number you type before the questions.
- Streak counters and the date of your last check-in.
- Reminder hour, and whether reminders are on.
- Created and last-seen timestamps.
- Email address — optional, and only if you enter it. Its purpose is stated where we ask for it: so that your account and subscription can follow you when the app becomes available outside Telegram.
Your answers
- For each of the twelve levers: which option you chose, the weight that option carries, the date it applies to, whether it came from the questionnaire or a daily check-in, and the timestamp of the tap.
- Your Prime Age for each day you answered, with the delta and the Signal count.
The timestamp deserves a word, because it is used for something: the moment you answer the sleep question is treated as your wake time, and the spread of those moments across a week is what produces the sleep-regularity score. That is the whole use; it is described in the methodology.
Consent records
For each consent you give: what it was for, the version of the document that was on screen, whether you granted it, and when. We keep these because we have to be able to show what you agreed to, not merely assert that you did.
Subscription and payments
- Whether your subscription is active, through which provider, and when it expires.
- For each payment: the provider's charge identifier, the amount, the currency, the period it covers, and whether it was refunded.
We never see or store a card number. Payments in Telegram Stars are handled entirely by Telegram; we receive a confirmation, not a payment instrument.
What we deliberately do not collect
Telegram hands an app your first name, last name, username and profile photo on every single open. We read your user ID and your language, and discard the rest before anything is written down. We also do not collect:
- your phone number, your contacts or your Telegram chats;
- your precise or approximate location;
- any data from Apple Health, Health Connect, or any wearable — version 1 of the app requests no health permissions at all;
- advertising identifiers, cross-site cookies or third-party trackers;
- your IP address in our own records. Our infrastructure providers keep short-lived server logs, described below, that we do not mine or join to your account.
Answers about your habits
Questions about sleep, alcohol, tobacco, diet, exercise and waistline can reveal information related to your health. We therefore treat them as special category data under Article 9 GDPR and ask for your explicit consent before the first question, rather than relying on an argument about whether they qualify. You can withdraw that consent at any time by deleting your account, which erases the answers with it.
Why we are allowed to hold it
| Data | Purpose | Legal basis |
|---|---|---|
| Account, answers, scores | Providing the app you asked for | Performance of a contract, Art. 6(1)(b), together with your explicit consent under Art. 9(2)(a) |
| Email address | Account continuity beyond Telegram | Consent, Art. 6(1)(a) — you enter it or you do not |
| Reminders | A feature you switched on | Consent, withdrawn by switching it off |
| Consent records | Showing what you agreed to | Legal obligation and accountability, Art. 5(2) and 6(1)(c) |
| Payment records | Accounting, tax, refunds and disputes | Legal obligation, Art. 6(1)(c) |
Where it is stored, and who processes it
- Supabase — the database and the app's server code, hosted on AWS in Frankfurt, Germany (eu-central-1).
- Hetzner Online GmbH — the servers in Nuremberg, Germany that deliver the app's files and run agegen.ai.
- Cloudflare — DNS and content delivery in front of agegen.ai. It terminates connections and keeps short-lived request logs.
- Telegram — the platform the app runs inside and the channel through which Stars payments are made. Telegram is an independent controller for the data it holds about your Telegram account; this policy does not cover it. See Telegram's own privacy policy.
Your account data is stored in the European Union. Where a provider's support or logging touches data outside the EU, that transfer runs on the European Commission's Standard Contractual Clauses.
How long we keep it
- Your account and everything attached to it: until you delete it. There is no inactivity purge — an account you do not open still holds the history you built.
- Payment records: retained for as long as tax and accounting law requires, with the link to your account removed when you delete your account. What survives is an amount, a currency and a provider's charge identifier — nothing that identifies you.
- Consent records: deleted with your account. Erasure wins over our interest in keeping proof.
- Server logs at our providers: their standard short retention periods.
Deleting everything
In the app: More → Delete my account, then confirm. It runs immediately and it is not reversible. Your answers, your history, your streak, your consents and your subscription record are erased in the same operation. If you would rather ask us, write to info@agegen.ai from the address on your account.
Deleting your account does not cancel a Telegram Stars subscription — that lives on Telegram's side. Cancel it in Telegram before you delete, or you may be charged for another period.
Your rights
Under the GDPR, the UK GDPR and Ukraine's Law on Personal Data Protection you may: get a copy of your data; correct it; erase it; restrict or object to how we use it; receive it in a portable format; and withdraw a consent at any time without affecting what was lawful before you withdrew it.
Write to info@agegen.ai. We answer within 30 days. You can also complain to a supervisory authority — in the EU and the UK, the one for the country where you live or work; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.
Children
The app is for people aged 16 and over and asks you to confirm that before anything else. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to us and we will erase it.
Automated decisions
Prime Age is a published formula applied to answers you typed — every weight is on the methodology page. It produces no decision with legal or similarly significant effects, and no profiling is used to target you.
Analytics and cookies
The Mini App sets no cookies and carries no analytics. On agegen.ai we run self-hosted, cookieless analytics that count page views without identifying visitors, and Cloudflare's own aggregate statistics.
Security
All traffic is encrypted in transit. The app's database has row-level security enabled with no access granted to the browser at all: the app cannot read or write the database directly, only through server code that verifies the signature Telegram attaches to your session. We keep no payment instruments, which is the most effective security measure available to us.
Changes
If this policy changes materially we will ask for your consent again in the app, and the version number at the top will move. Every consent we hold records which version you saw.