Sécurité sur Telegram
Your safety on Telegram, explained plainly.
Worried about Telegram? Your concerns are legitimate. Here is who sees what, the steps that lock your account, and the choices you have if you prefer to avoid the messaging app.
Who sees what
| Your information | Telegram | Trévor, server in Switzerland | Nobody else |
|---|---|---|---|
| Your messages written in the chat | Yes, it keeps them on its servers | Yes, encrypted in our database | Claude reads your free questions only if you gave your separate agreement |
| Your voice messages and photos | Yes, like your messages | Yes. The voice message is transcribed on our server, then the audio is deleted | Nobody |
| Your phone number | Yes, it is your Telegram account | No, Telegram does not give it to bots | People who already have it in their contacts |
| Messages from your care team and files | A notification only | Yes, in your secure space | The carers you authorise |
| Your record, charts and export | The link, not the page | Yes, encrypted in our database | Your care team, if you give access |
Five steps to lock your account
Add a two-step verification password
Réglages > Confidentialité et sécurité > Validation en deux étapes. Choisis un mot de passe que only you know and a recovery e-mail address. Without this password, another device cannot open your account, even with your number.
Set a passcode lock
Réglages > Confidentialité et sécurité > Code de verrouillage, avec ton empreinte ou ton visage. Someone who takes your phone cannot read your conversations.
Hide your phone number
Réglages > Confidentialité et sécurité > Numéro de téléphone, puis «Personne». Les gens qui ont déjà ton numéro dans leurs contacts le gardent.
Hide notification previews
Dans Telegram : Réglages > Notifications et sons, puis éteins «Aperçu du message». The lock screen no longer shows your replies. Menu names may vary with your version.
Keep your phone to yourself
Avant de prêter ton téléphone, ferme Telegram. Dans Réglages > Appareils, log out devices you do not recognise.
Check that it is the real Trévor
The real bot is called @TrevorDrepano_bot. Open it with the buttons on this site. Trévor never asks for your password or a code received by SMS.
Trévor's guarantees, held by the code
- Your database is hosted in Geneva, Switzerland, and backed up every night in encrypted form. Names, messages, answers and watch measurements are encrypted in it.
- Messages and files from your care team never pass through Telegram. You open them through your personal link, and every opening is written in an access log that you read in /donnees.
- /supprimer erases your whole account and your files. Encrypted backups disappear within 30 days.
- Claude receives nothing without your separate agreement, which you can withdraw in “Mes données”. It receives the minimum, without your first name or messaging ID.
- Trévor does not ask for a family name, an address or an insurance number.
The limits, stated as they are
- The messages you write in the chat stay at Telegram under its rules. We can neither re-read it nor erase it there.
- End-to-end encryption does not exist for a conversation with a bot.
- The processing contract with Anthropic and the analysis of the transfer outside Switzerland are still to be attached to the file. Detail is on the Data protection page.
FAQ
Does Telegram read my messages?
Telegram keeps conversations with a bot on its servers, encrypted between your phone and its servers. It can therefore read them under its own rules. What Telegram calls a “secret chat”, end-to-end encrypted, exists between two people. We know of none with a bot, so we do not promise that encryption.
Where is Telegram based, and who runs it?
The privacy policy names Telegram Messenger Inc. as controller, with group companies in the British Virgin Islands and Dubai. For people who signed up from the European Union, it states servers in the Netherlands. It gives no headquarters. Pavel Durov is Telegram's known founder. We draw no guarantee either way from this.
Does Telegram pass data to authorities?
Its policy says it may hand over a suspect's IP address and phone number after a court order and a legal review. It announces a quarterly transparency report. Message content is not named in that rule. We cannot claim it stays out of reach.
How long does Telegram keep my data?
Security data, such as the IP address and devices used, is kept for 12 months at most. An account inactive for 18 months is deleted by default, and you can change this period in the settings. For messages in a conversation with a bot, the policy gives no precise duration: we cannot promise one.
And my voice messages?
A voice message sent to Trévor is a message in the conversation, so Telegram keeps it like the others. On our server it is transcribed without leaving Switzerland, then the audio is deleted. Only the understood text is processed, and a health datum is saved only after your “Oui, c'est ça” button.
Can Trévor ask me for my password?
Never. Trévor never asks for your Telegram password or a code received by SMS. The real bot is called @TrevorDrepano_bot. Open it from a link on this site.
I do not want to use Telegram. What can I do?
The Coach Drépano Android app talks directly to our server in Switzerland, with no messaging app in between. Trévor also exists on WhatsApp, at Meta, with the same limit for a bot. In every case, you can write nothing sensitive in the chat.
Is my personal link safe?
Telegram sees the link in the conversation, not the page it opens. Someone who reads your conversation can open the link while it is valid. That is one more reason to set a passcode lock and keep your phone to yourself.
Facts about Telegram checked on 15 October 2026 in its privacy policy (telegram.org/privacy), its FAQ (telegram.org/faq) and its documentation (core.telegram.org). Its rules may change. The detail of our own protections is on the page Data protection.