Privacy policy
What data UZARO uses, where it is stored and how you can control it.
Last updated: November 4, 2026
What this covers
This policy covers the UZARO app, the uzaromessenger.uz website and the UZARO servers.
UZARO runs on the Telegram network: the app connects through Telegram’s open API (TDLib). UZARO is not an official Telegram app.
In short
- UZARO does not see or store your messages, calls or files: they go straight to Telegram’s servers.
- The UZARO server only keeps what the business section (shops, ads) and overall statistics need.
- We do not sell your data or give it to anyone for advertising.
- The app has no ad trackers and no advertising analytics.
Data that goes through Telegram
Your phone number, messages, contacts, photos, videos, files, stories and calls are sent to Telegram’s servers and handled under Telegram’s privacy policy.
Message translation and voice-to-text also run on Telegram’s services.
Bots, channels and mini apps, including the bots in the AI hub, belong to their owners. What you send them is handled under those owners’ rules.
Data on your phone
- The chat cache and your Telegram session sit in an encrypted database. Its key is kept in the Android Keystore or iOS Keychain.
- The archive of deleted and edited messages and the history of contact changes stay only in the app’s storage on your phone and are never sent anywhere.
- The PIN itself is never stored: secure storage keeps only its salted PBKDF2 hash.
- Uninstalling the app removes this data from the phone. App data is excluded from Android backups.
Data on the UZARO server
The server does not know your Telegram account. It keeps:
- An anonymous customer ID and the device type (Android or iOS). Your Telegram ID is not used.
- Usage statistics: the day you opened the app, the Hub or Films, one record per day. Only the total number of users is calculated from it.
- The text, photos and videos of shops, products and ads you create. They are shown publicly to other users.
- A photo of your payment receipt, if you upload one. Only the admins who check payments can see it.
- Your name, username and phone number — only after you agree to share them in the app.
- When in-app purchases are enabled, the purchase confirmation from Google Play or the App Store. Card details never reach us.
- Technical logs: IP address, request time and path. Location coordinates and access tokens are not written to the logs.
Location
Location is used only when you send it in a chat (through Telegram) or sort nearby places in the Hub. In the second case the coordinates are sent to the server to calculate distance and are not stored. The app never tracks your location in the background.
Device permissions
- Contacts — with your permission, sent to Telegram to find people you know on Telegram.
- Camera and microphone — for photos, videos, voice messages and calls, only while you use them.
- Location — in the two cases described above.
- Photos and files — only to send the files you pick.
- Notifications — to tell you about new messages.
You can turn off any permission in your phone’s settings at any time.
Notifications
On Android, notifications arrive through Google Firebase Cloud Messaging. For this the phone’s notification token is given to Telegram, and the notification itself passes through Google’s servers.
Crash reports
If crash reporting (Sentry) is enabled in an app version, a crash sends the error trace and the device type. No name, phone number, message text or screenshot is sent. This feature is off in current versions.
Why we use data
- To show shops, products and ads to buyers.
- To check payments for ads and extra shops.
- To detect and stop fraud, spam and attacks.
- To see overall usage numbers and improve the service.
- To meet legal requirements.
Where data is stored
The UZARO servers are in a Contabo GmbH data centre in France. Data that goes through Telegram is stored on Telegram’s servers.
Security
The website and the app talk to the server over HTTPS (TLS 1.2 or later).
Admins see only the data their job needs, and every admin action is logged. Passwords are stored only as hashes.
No system is perfectly secure. If you find a vulnerability, write to the address below.
How long data is kept
- Shop, product, ad and profile data is kept until you delete it or ask us to.
- Payment receipts are kept as long as checking payments and bookkeeping require.
- Technical logs are kept in a limited size, and old entries are deleted automatically.
Your rights
- Find out what data is kept about you.
- Have wrong data corrected.
- Ask for your data to be deleted.
- Withdraw your consent to share your profile at any time.
- Complain to the authority responsible for personal data.
Deleting your data
You can delete shops, products and ads in the app itself.
To delete all your data on the server, write to the address below with the subject “Data deletion”. We complete requests within 30 days.
Data on your phone is removed when you uninstall the app. You can delete your Telegram account in Telegram’s settings or at my.telegram.org/delete.
Children
UZARO is not meant for children under 13 and does not knowingly collect data about them.
Changes
If this policy changes, this page and the date at the top are updated. Important changes are announced here before they take effect.
Contact
For questions about privacy, data deletion or security: