Privacy Policy
Service: ShelfKit — a file catalog inside Telegram (bot and Mini App)
Version: 2026-11-01 · This English text is the governing version; translations are provided for convenience.
1. Who is responsible for your data
The controller of your personal data is Sergei Ianchuk, Republic of Serbia. Contact for privacy questions: support@dailykit.top.
2. The short version
- We do not download or store your files. They stay in Telegram. To show you small previews of photos, videos and documents in the catalog, we take from Telegram the small pictures it makes of them and pass them to you without keeping them.
- We keep an index of the files you forward to the bot: names, types, sizes, captions and references to the messages.
- The bot sees only what you send or forward to it. It cannot read your Saved Messages or your other chats.
- When you type the bot’s name in any chat to send a file from your catalog, Telegram passes the bot the text you type after the name. The bot searches your catalog with it and does not keep that text.
- We do not use advertising or tracking tools and do not sell data.
- You can delete your catalog yourself in the Mini App at any time.
3. What data we process
| Data | Where it comes from | Why we need it |
|---|---|---|
| Telegram user ID, first name, username, language code | Telegram, when you start the bot or open the Mini App | To recognise your account, keep your catalog separate from others, and choose the interface language |
| For each forwarded file: file name, type, size, kind of attachment (document, photo, video, audio, animation, voice message, round video message), caption text, Telegram file identifier, the identifier of the preview Telegram made of the file (if it made one), chat and message identifiers, date added | The message you send or forward to the bot | To show the entry in your catalog, to search it, to send the file back to you, and to let you send it to a chat you choose |
| The text you type after the bot’s name in any chat (inline mode), and your user ID | Telegram, while you type | To find files in your catalog and show them to you for sending. It is not kept |
| Folders and tags you create | You | To organise your catalog |
| Where you came from: the tag of the link you first opened the bot with, if it had one | The link | To see which links bring people to the service; it is kept with your account |
| How many times the links of each tag were opened: a number per tag and day, without who opened them | The link | The same |
| How often parts of the service were used (the Mini App opened, files added, files sorted, files sent back): a number per kind and day, without who used them | The service | To see whether a change made the service easier to use |
| Payments: Telegram payment identifier, plan, amount in Stars, date, subscription period and renewal status | Telegram, when you pay | To activate and renew Pro, handle refunds and keep accounting records |
| Withdrawal from a purchase: the name of your Telegram account as the statement showed it, the language of your Telegram, the date and time of the statement, of the refund and of the acknowledgement | You, when you withdraw, and the service | To carry out the withdrawal, return the Stars, send you the acknowledgement and show later when the withdrawal was made |
| Technical logs: IP address, time, requested address, response code, size and duration of the response | Your device, with each request | To keep the service secure and to find faults |
The requested address in a log line can contain what you typed into the search field, the tag you chose, and the identifiers of folders and files.
We do not receive your phone number, your contacts, your card or bank details, or the contents of your files, except the previews described above, which we pass to you and do not keep.
When you send a file from your catalog to another chat, Telegram delivers it in your name, without the caption kept in the catalog; the recipients see that the message was sent via the bot. We do not learn which chat you sent the file to, or whether you sent it. With the query Telegram tells the bot the type of the chat (private, group, channel); we do not use or keep it.
The caption of a forwarded message is stored as text. Do not forward to the bot messages whose captions contain information you do not want kept in the catalog, or delete the entry afterwards.
4. Legal grounds
- Performing our contract with you (the Terms of Service): account data, catalog data, payments, withdrawal from a purchase.
- Legal obligations: keeping payment records for as long as accounting and tax law requires.
- Our legitimate interest in keeping the service secure and working: technical logs and rate limiting.
These grounds correspond to Article 6(1)(b), (c) and (f) of the EU General Data Protection Regulation and to the equivalent provisions of the Serbian Law on Personal Data Protection.
5. Who else is involved
- Telegram. You use the service through Telegram. Telegram processes your messages, files and payments as an independent service under its own privacy policy. When you ask for a file, our server instructs Telegram to send it to your chat with the bot.
- Hosting provider: DigitalOcean, LLC (United States). The servers we rent from it are in its data centre in Frankfurt am Main, Germany. It runs them on our behalf under its data processing agreement.
We do not share your data with anyone else, except where the law requires it.
6. Where data is kept and international transfers
The database is located in Germany, in the European Union. The hosting provider is a company from the United States; if its staff reach the servers from there, the transfer is covered by the EU–U.S. Data Privacy Framework and, should that framework fall away, by the standard contractual clauses of its data processing agreement. We are established in Serbia and access the data from there for support and maintenance.
7. How long we keep data
| Data | Kept for |
|---|---|
| Catalog entries, folders, tags | Until you delete them or clear your catalog |
| Account data (user ID, name, username, language) | While you use the service; deleted on request, see section 8 |
| Payment records | 10 years after the end of the year of the payment (the period Serbian accounting law sets for such books); then they are deleted |
| Withdrawal statements | Together with the record of the payment they belong to, and deleted with it |
| Technical logs | Up to 14 days |
| Session token | Kept only in the memory of the open Mini App; valid for up to 7 days |
If the service is discontinued, all user data is deleted, except records the law requires us to keep.
8. Your rights
You have the right to access your data, to have it corrected, deleted or restricted, to object to processing, and to receive your data in a portable form.
- Delete your catalog yourself: Mini App → Settings → Clear data. This permanently removes all file entries, folders and tags. Files in Telegram are not affected.
- Delete your account data, or use any other right: write to support@dailykit.top. We answer within 30 days. Payment records we are legally required to keep are retained until that obligation ends.
You may also complain to a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs); in the EU, the data protection authority of the country where you live.
9. Cookies and tracking
The Mini App does not set cookies and does not use analytics, advertising or tracking tools.
The website dailykit.top sets no cookies either, runs no analytics and loads nothing from other servers; the server that delivers its pages writes no log of visits.
10. Children
The service is not directed at children. You may use it only if you are old enough to use Telegram under Telegram's terms.
11. Security
Access to the Mini App is authenticated with launch data signed by Telegram; no passwords are used. Requests are sent over an encrypted connection. Access to the database is limited to the operator.
12. Changes
We may update this policy. The current version is always available from the bot (/privacy) and the Mini App. If a change is significant, we will tell you in the bot chat.