Privacy policy

Reminder Bot · Last updated 2026-11-09

1. Who is responsible

The controller under the EU General Data Protection Regulation (GDPR) is:

2. What we process when you use the bot

2.1 Your Telegram profile

Telegram sends us, with every message: your numeric Telegram user ID and chat ID, first name, last name and username (if you have them), and your Telegram language setting. We use them to tell users apart, to address you by name and to answer in your language.

2.2 Your reminders

• Content: the text you send, or the caption, file name, title or question of a photo, file, audio, contact, place or poll.
• Media: photos, videos, voice notes, files, locations and stickers are not copied to our server. We store the message's ID and ask Telegram to re-send the original when the reminder is due. If you delete the original message in Telegram, we can only send the text we stored.
• Scheduling: the reminder time, repeat rule, status (waiting, scheduled, sent, done, deleted), how often we nudged you, and when each of these happened.

2.3 Your settings

Your timezone and language, and, for a short time, what the bot is waiting for (for example a time you are about to type).

2.4 Setting your timezone

• Sharing your location: we use the coordinates once, on our own server, to look up the timezone. We store only the timezone name (e.g. "Europe/Berlin"), never the coordinates.
• "Detect automatically": this opens a small page that reads your device's timezone name and sends only that name back through Telegram. The page loads a script from Telegram (telegram.org), so Telegram receives your IP address under its own privacy policy.

2.5 Protection against abuse

To stop floods of messages, we count each user's messages per minute. The counter is kept only in memory and disappears after two minutes. If you block the bot, we note when, so we stop sending you messages.

3. Our website

When you visit this website, our server logs your IP address, the date and time, and the page you requested. We need this to run and secure the site. The logs are size-limited and overwritten automatically, usually within days. Telegram messages never appear in these logs.

The public pages set no cookies and use no analytics, tracking pixels, external fonts or other third-party services. The usage numbers on the home page are totals counted from our database. They are not based on tracking visitors.

4. Purposes and legal bases

• Providing the reminder service (sections 2.1–2.4): Art. 6(1)(b) GDPR, because it is necessary to provide the service you asked for.
• Security, abuse prevention, server logs and aggregated statistics (sections 2.5 and 3): Art. 6(1)(f) GDPR. Our legitimate interest is a secure, reliable service that is fair to all users.

5. Who has access

• Telegram carries every message between you and the bot and stores your chats. Telegram is an independent controller; see telegram.org/privacy.
• Our hosting provider, IONOS SE, Montabaur, Germany], runs our servers and database on our behalf under a data processing agreement (Art. 28 GDPR).
• Authorized staff of Code Hospital Co. KG can see stored data, including reminder texts, through a password-protected admin area. They use it only to operate the service, help users and prevent abuse.

We do not sell your data and we do not pass it to advertisers or any other third parties.

6. Transfers outside the EU

We do not transfer your data outside the EU/EEA ourselves. Telegram may process data in other countries under its own responsibility.

7. How long we keep data

• We keep your profile, settings and reminders while you use the bot, so it can remind you and show your history (/done).
• When you delete a reminder (/list, 🗑), we stop it and hide it from you. The record stays in our database until you ask us to delete your data.
• Reminders that never got a time are closed automatically after 3 days.
• If you ask us to delete your data, we delete your profile and all your reminders within 30 days.
• Server logs: see section 3.

8. Your rights

Under the GDPR you have the right to:

• access your data (Art. 15)
• have it corrected (Art. 16) or deleted (Art. 17)
• restrict its processing (Art. 18)
• receive it in a portable format (Art. 20)
• object at any time to processing based on our legitimate interests (Art. 21)

To use any of these rights, email privacy@codehospital.com and tell us your Telegram username or user ID.

You also have the right to complain to a data protection supervisory authority (Art. 77 GDPR). Ours is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany (ldi.nrw.de).

9. Stopping

You can stop using the bot at any time by blocking it or deleting the chat in Telegram. We then stop sending you messages. To have your stored data deleted as well, email us (section 8).

10. Other points

• We do not use automated decision-making or profiling.
• You don't have to give us any data, but without your messages the bot can't remind you of anything.
• The service is not intended for children under 16.
• We will update this policy if the service changes. The date at the top shows the current version.

If the English and German versions of this policy differ, the German version prevails.