Privacy Policy ✦ Lystaria

Information We Collect

• Telegram account identifiers: Your Telegram user ID is used to store and retrieve your data.
• Mini app session data: Telegram provides signed init data so we can securely identify you.
• Content you create: Events, reminders, habits, journal entries, reading logs, and settings you submit.
• Settings: Timezone, display name (optional), quiet hours (optional), and other preferences.
• Integration tokens (if you connect Google): OAuth tokens that allow Lystaria to write events to a calendar you choose.

How We Use Your Information

• To provide core features (saving events, reminders, habits, journaling, reading tools, and settings).
• To deliver reminders and notifications you explicitly configure.
• To sync bot-created events into Google Calendar only when you connect your Google account and select a calendar.
• To maintain service stability, troubleshoot errors, and improve reliability.

Google Calendar Integration

If you choose to connect Google Calendar, Lystaria uses Google OAuth to obtain permission to create, update, and delete calendar events created inside Lystaria. This is a one-way sync: events are written from Lystaria into the Google calendar you select.

• What we store: A refresh token (required for offline access), and optionally a cached access token and expiry time.
• What we write: Event title, description, time/date (including timezone), and location if provided.
• Calendar choice: You can choose which Google calendar to write into and change it later.
• Disconnecting: You can disconnect at any time, which removes the stored integration link.

Note: Disconnecting stops future sync. Existing events already created in your Google Calendar may remain unless you delete them manually or delete them through Lystaria before disconnecting.

Data Storage and Retention

• Your content is stored so the bot and mini app can function (events, reminders, habits, journal entries, and settings).
• Integration tokens are stored only if you connect Google Calendar.
• We retain data for as long as needed to provide the service, unless you request deletion or disconnect an integration.

Sharing and Disclosure

• No selling: Lystaria does not sell your personal information.
• Service providers: Hosting and infrastructure providers may process data to run the service.
• Legal: We may disclose information if required by law or to protect against abuse or fraud.

Security

We take reasonable measures to protect your data. No method of storage or transmission is 100% secure, but we aim to minimize risk through access controls and careful handling of integration credentials.