Загрузка…
What data we collect and why, analytics, sharing with third parties, retention and security, user rights.
Otree.pro ("we", "Otree") is a project for owners of Xiaomi, Redmi and POCO devices. This policy covers all our services: the otree.pro website, the Otree mobile app, the @otreepro_atom_bot Telegram bot, the Otree.pro Telegram communities, the mini app and the api.otree.pro server (together, the "Services").
This policy explains data processing and is not itself consent. The user agreement and chat rules are in sections 19 and 20. Where a particular processing activity requires consent, it is obtained separately. Questions: mail@otree.pro.
The personal data operator is Ivan Vladimirovich Kochnev (Russian Federation). Notifications of personal data processing and of cross-border transfer were filed with Roskomnadzor on October 11, 2026.
Mostly we receive technical and analytics data — it keeps the Services working, secure and improving. Personal data reaches us only when you provide it yourself.
Technical and analytics data:
Data you provide yourself:
We do not collect the content of your device: contacts, photos, messages, passwords, payment details.
Some app features need system permissions: location (Android requires it for the Wi‑Fi network name and for finding Bluetooth devices), the list of installed apps (for the "Apps" section and uninstalling apps at your request), NFC, Bluetooth, display over other apps, screen capture, notifications, setting wallpapers.
Data obtained through these permissions is processed only on the device and is not sent to our servers unless this policy expressly says otherwise. A permission is requested when the related feature is needed; you can refuse or revoke it in Android settings, in which case some features may stop working.
Legal bases: your consent; performance of a contract (providing the Services you use); our legitimate interest in operating, securing and developing the Services; legal obligations.
We may combine and analyse data within our Services. From it we may produce de-identified and aggregated statistics, for example on how common device models and firmware versions are, and use or publish them. Such statistics cannot identify you and are not personal data.
On Xiaomi devices, the app may periodically check for HyperOS/MIUI updates in the background and compare the installed build with the Otree.pro firmware catalog. For this, only technical data may be sent to our server: device codename, firmware region, build version, Android version, manufacturer, and data from Xiaomi's official update service (version number, download links).
This data is used to keep the firmware catalog up to date and to inform the community about new releases. The check is part of normal app operation and does not require a separate opt-in. Push notifications about new firmware depend only on your system notification permission.
Our bot @otreepro_atom_bot moderates Otree.pro communities, keeps a member rating and protects chats from spam and abuse. To do this it processes: Telegram ID, name, username and language; joining and leaving chats; messages and actions in moderated chats to the extent needed for anti-spam and profanity filters; rating points; warnings, restrictions and bans; technical logs.
Everything in this section also applies to all child bots of the ATOM platform — Otree.pro bots for individual communities, app catalogs and partner projects that run on the same infrastructure under the same rules.
Moderation decisions may be made automatically. Restrictions and bans may apply across all Otree.pro chats. If you disagree with a decision, write to mail@otree.pro and we will review it.
Messages in groups are visible to other members. We are not responsible for how other members use what you post in chats.
Information about other people inside messages is not kept as a separate database and is not used for profiling. A user does not publish other people's personal data without a lawful basis; moderation deletes such messages. A working copy of the text in memory is kept for no more than six hours; the text is not kept longer than seven days. Before a language model, recognisable identifiers, contacts and mentions are replaced with placeholders. No separate consent of those persons is collected, and this is not a new legal basis for processing.
Chat message text is not stored in the main server's database: for the anti-spam filters and the AI assistant it is held in memory only, for no more than 6 hours. The database keeps the user, chat and message IDs, the action type and the time; the exception is moderation records, with the periods in section 12. Messages that led to a moderation action are kept together with their text in the moderation log in Telegram, to review appeals. Moderation records for a given chat are available to moderators of that chat (in the staff log and Mini App). For automatic message checks and AI assistant replies, texts are sent to Groq (USA); the author's identifier is not sent separately (section 12). Use of the bot and chats is governed by the user agreement (section 19): by joining a chat, passing the entry check or contacting the bot, you accept the agreement and the chat rules.
You can sign in to the app through the @otreepro_atom_bot bot. Sign-in only starts after you open the bot from the app yourself and tap "Start". We receive your Telegram ID, name, username and interface language. We do not receive your phone number, contacts or messages.
We need this data to show your profile and to check your LEGENDS subscription status against our subscriber database. For LEGENDS features, a device may be linked to your account by a technical key (up to 5 devices). To keep you signed in, an encrypted session token is stored on the device; the server stores only its hash.
The subscription is purchased and paid for on Boosty or Tribute under their rules; we receive the subscription status from them and, for matching, an email address. A sign-in session is deleted when you sign out, and an inactive one after 180 days.
If you turn on "Debug mode" in the "About" section, the app records a technical log of its work for a few minutes. The log stays on your device and is only ever sent by you, manually. Before sending, device identifiers, network addresses, Wi‑Fi names, coordinates, email addresses and tokens are removed from it.
We do not sell or rent personal data and do not share it with anyone for advertising. We do not disclose it to third parties except in the following cases:
Servers and providers may be located in different countries, so data may be transferred outside your country. We transfer only what is needed for the stated purposes.
The Services work together with third-party platforms: Telegram, Google Play, Xiaomi (including official update and firmware download servers), Boosty, Tribute, Yandex, Google. These companies process data under their own policies, and we are not responsible for their actions. Links to external sites and files are provided for convenience; we do not control their content or availability.
Specific periods: chat message text — not stored in the main server's database (in memory only, up to 6 hours), except moderation records; download log — IP addresses are kept truncated (without the last octet) and deleted after 30 days; web server logs — IP addresses without the last octet, 7 days (the web server error log may contain the full IP address, 7 days); sign-in codes — a day after expiry; sign-in sessions — until sign-out or 180 days of inactivity; technical logs — up to 14 days; database backups — encrypted only, up to 7 daily and 4 weekly copies (in Russia and with the project owner). Other data is kept as long as needed for the purposes in section 4, as long as your account or subscription is active, or as long as the law requires. De-identified statistics may be kept indefinitely.
Requests sent through the forms on our websites (name, contact, message text, IP address) are recorded in a database on our server in Moscow and passed to the Telegram chat where we answer them. As soon as a request is delivered, the name, contact, text and IP address are deleted from the database; only the request number and delivery status remain. If delivery fails, the data is deleted automatically after 30 days.
The Telegram usernames of members of our chats are stored in the database on our server in Moscow.
Updates for our Telegram bots are received by the Telegram Serverless platform. Before putting an update in its queue, it writes the complete update to Yandex Cloud storage in Russia (Object Storage, region ru-central1). These records are deleted by a storage rule after one day; the rule runs periodically, so deletion may happen somewhat later. If the storage in Russia is temporarily unavailable, the update is first saved in the platform's queue and the write to Russia is retried later; retry queue entries older than 3 days are deleted when the queue is serviced. The update is then passed to our server. While an update waits to be passed on, the platform keeps it in full (including the sender's name and the text) — up to 24 hours, and one not delivered in that time for up to 3 more days in a service queue. If the server is temporarily unavailable, that platform itself moderates the chats and runs the join verification, keeping only user, chat and message IDs and the decisions taken until they are synced with the server (usually minutes to a few hours) and for one day after that; a copy of this log (IDs only) is written to the storage in Russia.
We may keep data longer when it is needed to resolve disputes, prevent abuse (for example, records of bans) and comply with the law.
Where data is stored and processed. Personal data is stored and processed in the Russian Federation. The bots, moderation, rating, the mini app, the Otree app and the working database run on a server in Moscow (hosting provider JSC IOT, FirstVDS service). We also use Yandex Cloud storage in Russia (Yandex.Cloud LLC, region ru-central1: Object Storage): incoming bot updates are recorded there, and daily encrypted backups of the working database are kept there (up to 7 daily and 4 weekly). Records of incoming data are kept for up to 8 days. Uploaded files (for example, photo-battle photos) are stored on the Moscow server.
The Telegram client of our service account (TDLib) also runs on the Moscow server: at the server's request it fetches from Telegram what moderation and publishing need — the chat event log, member lists, a profile by username, the history of our channels, live-stream comments. It does not store the stream of chat messages: local message and chat databases are disabled, the client uses memory, and downloaded media are kept temporarily and deleted automatically. Telegram cannot be reached directly from Russia, so the server's requests to Telegram (and to Groq) go through an encrypted channel via our server abroad, which neither decrypts nor stores them.
The server in Germany (Frankfurt am Main; hosting provider Skalk Soft LLC, Koara service) is used only for working tools without personal data: the firmware and app catalogue and downloads, firmware data collection, the websites. Requests to api.otree.pro pass through it encrypted, without being decrypted or recorded, and are decrypted only on the Moscow server. Requests for the catalogue and files reach the server in Germany without the IP address (only an address shortened to the network, for abuse protection), without cookies or identifiers. The fonts and icons of the website and the mini app are hosted on our servers.
Our Telegram communities and bots run on the Telegram platform (Telegram Messenger Inc., British Virgin Islands), including Telegram Serverless. Message texts for automatic moderation (advertising, spam and language checks) and requests to the AI assistant are processed by Groq in the USA: before sending, identifiers, author names, contacts, mentions and profile links are replaced with placeholders, and the author's identifier is not sent separately (details a person writes in free text cannot be ruled out completely). Otree publications are translated by Google Gemini (USA) only when a staff member has selected them by hand and the text contains no personal data; recognisable personal details are replaced with placeholders before sending as well. These services receive only de-identified text: no personal data is sent to them, and no cross-border transfer of personal data takes place.
Retention on the main server: anti-spam events — 7 days; chat message index (IDs only, no text) — 30 days; operational service records — 7 days; closed moderation records — 1 year, with names, usernames and message text removed after 7 days and the Telegram ID removed after 30 days (only the service key remains).
We apply reasonable organisational and technical measures: encrypted connections, storing tokens and codes only as hashes, encryption in Android storage, restricted access to servers. Database backups are encrypted with a key whose private half is kept only by the project owner off the server, so they cannot be read on the server.
However, no method of transmission or storage is completely secure. We cannot guarantee absolute security and are not responsible for leaks caused by circumstances beyond our reasonable control: a hacked or infected device, root access or an unlocked bootloader, your disclosure of data to third parties, failures of third-party services. We will report serious incidents as required by law.
You can:
To do so, write to mail@otree.pro. We will reply within 30 days and may ask you to confirm that the data is yours (for example, by writing from the same Telegram account).
We may refuse or limit a request where the law allows, including when the data is needed to prevent abuse or to comply with the law. After data is deleted or consent is withdrawn, some features may become unavailable. Withdrawing consent does not affect the lawfulness of processing carried out before it. When data is deleted on request, records of active restrictions in our chats (a ban or mute, its reason and the moderation log) are kept on the basis of our legitimate interest until the restriction is lifted.
The Services are not intended for children under 14 (or another age set by the law of your country), and we do not knowingly collect their data. If you believe we have received such data, write to us and we will delete it.
We may change this policy and publish the new version with its update date. Significant changes are additionally announced through the Services. Publication does not replace separate consent where a new processing activity requires it.
This policy is published in several languages. If the versions differ, the Russian version prevails.
For questions about data processing and to exercise your rights, write to mail@otree.pro.
Version dated October 25, 2026. The operator identified in section 1 offers access to the website, Otree app, mini app, ATOM bots and Otree.pro communities under this agreement. Core features are free; paid features are activated separately.
Read the agreement and rules before using the services. Acceptance means explicit confirmation or active use of offered features after access to these terms has been provided: joining a community whose description links to these terms, passing the entry check, sending a bot request, adding a device, posting a community message or reaction. Merely staying in a chat, reading or doing nothing is not acceptance. New terms do not apply retroactively to earlier actions. On first opening the mini app the terms are confirmed with the “I accept” button; we store the Telegram ID, the agreement version, the source and the time of confirmation in the database on our server in Moscow until the data is deleted at your request.
All community activity must comply with its rules (section 20: https://otree.pro/en/privacy#rules). Messages, including those not addressed to the bot, may be checked automatically for moderation. Measures include deletion, warnings, temporary restrictions and removal. Ratings and giveaways follow their separately published feature rules. Do not publish other people's personal data without a lawful basis. Moderation deletes such messages. Do not publish passwords, tokens or other secrets. This is a minimisation rule, not those persons' consent to processing.
This agreement, chat participation and reading the policy do not replace separate consent to personal data processing where required by law. Data, purposes, recipients and retention are described in the policy above. Each process needs an applicable legal basis; a public message does not authorize unrestricted reuse.
Prices, duration, features and renewal conditions are shown before payment. Telegram Stars, Boosty and Tribute apply only where offered in the interface, together with the selected platform's terms. For bot payments use /paysupport; other questions: mail@otree.pro. Mandatory consumer rights and statutory remedies remain unaffected.
You may stop using features, stop the bot and leave a community. Send data deletion requests to mail@otree.pro; applicable law governs their handling. The operator may restrict access for rule violations; decisions can be appealed by email. Technical failures are possible; statutory liability is not excluded. Updated terms are published with a date, and material changes are communicated before application. Contact: mail@otree.pro.
The following GLOBAL rules match the English-language Mini App, version 1.0. Russian-language chats have separate rules: https://otree.pro/ru/privacy#rules. Community rules are not a substitute for consent to personal data processing.
What is forbidden
Politics and religion
What is encouraged
Administration policy
Security
Thank you for using Otree!