Privacy policy

The public website at this address, the Gemzy Telegram Mini App and the Gemzy admin dashboard. Browsing the public website does not require an account and sets no cookies.

• From Telegram, when you open the Mini App: your Telegram user ID, first and last name, username, language, Premium status and profile photo link. Telegram signs this data and we verify the signature; we never receive your phone number or messages.
• Your activity in Gemzy: points and XP history, completed activities, quiz and article attempts, missions, streaks, competition entries, rewarded-ad sessions and the provider's confirmation of them, and one record per day you use Gemzy (the date only).
• Rewards: for a USDT withdrawal, the receiving address and network you enter, the amount, its status and the transaction reference an administrator records. For a gift card, the order details and the name on your Telegram account. We never ask for seed phrases, private keys or bank details.
• Referrals (when enabled): who invited whom and whether the invitation qualified.
• Security records: a hashed session token, events such as rate-limit hits or repeated claims used to detect abuse, and reviewer notes. Your IP address is used briefly to rate-limit sign-in and appears in our hosting provider's request logs; it is not stored in your Gemzy profile.

• To sign you in and keep your points balance and history accurate.
• To confirm activities and rewarded ads before awarding points, and to process rewards you request.
• To prevent fraud and abuse. Signals are reviewed by people; nothing is decided automatically.
• To produce aggregate statistics (for example daily active users). These do not identify you.

We do not sell personal data and do not use it for advertising profiles.

On leaderboards other players see your first name, the initial of your last name, your Telegram profile photo, your rank and points. If you joined through someone's referral link, that player sees your first name, last initial and referral status. Your username and Telegram ID are not shown.

• Telegram, which hosts the Mini App and verifies channel membership for channel tasks.
• Vercel (hosting) and Neon (database), which process data on our behalf.
• AdsGram, whose ad SDK runs in the Mini App when you watch a rewarded ad and receives your Telegram user ID to serve the ad and confirm it was watched.
• Tremendous, only if you redeem a gift card: the order and the name on your Telegram account.
• USDT withdrawals are sent by an administrator to the address you provide; public blockchains record the transfer.

The Mini App and admin dashboard use one strictly necessary, HttpOnly session cookie to keep you signed in. There are no analytics or advertising cookies.

• Sessions expire after 24 hours by default.
• Sign-in rate-limit records are deleted after one day; abuse evidence after 90 days.
• Points ledger, reward and audit records are kept while your account exists, because they are needed to keep balances and payouts accurate.

You can ask for a copy of your data or for your account to be deleted through the contact page. Records we must keep to account for rewards already paid may be retained where the law requires.