What Telegram Can and Cannot See in Your Chats
"Can Telegram read my messages?" has two honest answers, and which one applies depends on the kind of chat you are in. In an ordinary cloud chat, Telegram stores your messages and holds the keys to them. In a Secret Chat, it holds neither.
Most people never choose between the two, so they end up with a vague sense that everything is either completely private or completely exposed. Neither is true. This step lays out exactly what the service holds, what it can technically read, and what it hands over and when — using Telegram's own privacy policy rather than rumour.
What you will be able to do after this step
- check_circle Tell a cloud chat from a Secret Chat, and say what each one protects.
- check_circle List what Telegram stores about you beyond your messages.
- check_circle Choose the right kind of chat for a conversation, instead of worrying about all of them.
Two kinds of chat, two different promises
Every conversation you have ever had on Telegram is one or the other. Almost all of them are the first kind.
cloud_done Cloud chat (the default)
lock Secret Chat
Neither is "the safe one". A cloud chat protects you from losing your history; a Secret Chat protects you from a copy existing anywhere else. Different problems, different tools.
inventory_2 Everything Telegram holds about you
Messages are only part of the picture. This is the full inventory, taken from Telegram's privacy policy, with what each item means in practice.
| What | Stored by Telegram? | Readable by Telegram? | In practice |
|---|---|---|---|
| Cloud chat messages and files | Yes, encrypted | Technically yes | The keys are stored in data centres in other jurisdictions from the data, so a local engineer or intruder cannot get to them. Automated systems may scan cloud chats for spam and phishing. |
| Secret Chat messages and files | No | No | The servers only relay scrambled data they have no key for. |
| One-to-one calls | No | No | Call audio and video are end-to-end encrypted, whether you call from a cloud chat or a Secret Chat. |
| Your phone number | Yes | Yes | It identifies your account. Who else sees it is a privacy setting (Step 048). |
| Your contacts | Only if you allowed syncing | Names and numbers | Used to tell you when a contact joins. You can stop syncing and delete them. |
| IP address, devices, apps, username changes | May be collected | Yes | Kept for spam and account security, for twelve months at most. |
| Messages someone reported | Yes | Yes | Moderators may read a message its recipient reported as spam or abuse. |
| Posts in public channels and groups | Yes | Yes | Public rooms are cloud chats that anyone can open. Treat them as published. |
Two items deserve a second look. What you post in a public group is public, including to people who are not members, which Step 062 returns to. And a report turns a private message into a reviewed one: if you send something to a person who reports it, it is no longer only between the two of you.
gavel When Telegram hands data over
The privacy policy is specific about this. If Telegram receives a valid order from judicial authorities confirming that you are a suspect in a case involving criminal activity, it may disclose your IP address and phone number after its own legal review. Such disclosures are counted in a quarterly transparency report published at t.me/transparency.
Notice what is on that list and what is not. It names identifiers — who you are and where you connected from — rather than the contents of your conversations. For most people this changes nothing day to day. For the small number of people whose threat is a government, it is the single most important fact on this page, and Step 046 is written for them.
smart_toy The third parties you invite in
Telegram is not the only party that can see what you send. The others are the ones you choose, often without thinking of it as a choice.
Bots and mini apps receive whatever you send to them, and they run on their owners' servers, not Telegram's. A bot added to a group as an administrator can see that group's messages. Clicking a link a bot gives you can reveal your IP address to whoever runs the site behind it.
Voice-to-text, where you use it, sends the audio of that voice message for transcription, and Telegram's policy names Google as a provider it may use for this.
The person you are talking to is always the largest one. Every protection on this page stops at their screen. What they save, forward or photograph is out of Telegram's hands entirely — which is why Step 051 argues that a Secret Chat is the wrong tool when the risk is the other person.
rule Three beliefs worth correcting
"Telegram is end-to-end encrypted." Only Secret Chats and calls are. Ordinary chats, groups and channels are cloud chats, encrypted in transit and in storage, with the keys held by Telegram.
"Deleting a message removes it everywhere." In a cloud chat, deleting for everyone removes it for all participants; deleting only for yourself leaves the other person's copy on the server as part of their history. A Secret Chat deletion always tells the other device to delete too.
"If it's private, Telegram can't see anything." The honest version is narrower and more useful: Telegram designs its storage so that people who work near the servers cannot read cloud data, and it cannot read Secret Chats or calls at all.
touch_app Try it now — five minutes
- Open one of your most private conversations and look at its header A Secret Chat shows a padlock beside the name and appears as a separate chat from your ordinary one with the same person. If there is no padlock, it is a cloud chat.
- Start a Secret Chat once, so you know where it is Open the person's profile, then use the menu (⋮ on Android, More on iPhone) and choose Start Secret Chat. Telegram Desktop cannot open Secret Chats; the native macOS app can.
- Check what you share from your contacts On a phone: Settings > Privacy and Security > Data Settings. This is where contact syncing can be switched off and synced contacts deleted from the server.
How a Secret Chat is set up, how its keys are checked, and why most conversations are better left as cloud chats.
help Questions
Can Telegram employees read my ordinary chats?
Telegram stores cloud chats encrypted and keeps the keys in data centres in other jurisdictions, specifically so that engineers or intruders at one location cannot reach the data. It does hold the keys, though, which is how your history reaches a new device. Automated anti-spam systems can analyse cloud chats, and moderators may read a message someone reported.
Why is not everything end-to-end encrypted?
Because end-to-end encryption and multi-device cloud history pull in opposite directions. A message that only two devices can decrypt cannot appear on your new laptop or be searched from the web. Telegram made the cloud the default and Secret Chats the option; other services made the opposite choice and accepted weaker syncing.
Are group chats ever end-to-end encrypted?
Group messages are cloud chats, and Secret Chats exist only between two people. Calls are where encryption goes further: one-to-one calls are end-to-end encrypted, and so are the newer group calls that let everyone compare the same set of verification emoji. Do not assume the same of every live voice chat held inside a large group. Step 059 covers what calls do and do not reveal.
Does Telegram sell my data or use my chats for ads?
Its privacy policy says it does not use the contents of private chats or contact lists for ad targeting. Sponsored messages appear in large public channels and are based on the topic of the channel, not on what you have written.
If I delete my account, what happens to my data?
Deleting the account removes your messages, media and contacts from Telegram's cloud. It cannot reach copies other people already have on their own devices or in their own history. Account & Identity Step 038 covers doing it properly.
What Telegram can see
The whole inventory on one page: the two kinds of chat first, then calls, account metadata and the one case where Telegram hands data over. Tap to open it at full resolution.
