Are Telegram Bots Safe? What a Bot Can Actually See

Search for whether Telegram bots are safe and you mostly get one answer: a list of scams. Fake support bots, crypto bots that vanish with your deposit, phishing pages dressed as a bank. That is a real problem, and it is also a different question from the one you probably have.

The question that matters when you are about to hand a perfectly legitimate bot your grocery spending is narrower and more practical: what can it actually see? Not what could a malicious bot do — what does the Telegram platform technically allow, what does this particular bot do with that, and where is the line.

This article answers that for Smart Budget specifically, including the parts that are inconvenient for us. We build it, so read the last section too: it is a checklist for evaluating any bot, ours included.

What a bot sees in a private chat — and what it cannot do at all

In a one-on-one chat the answer is simple: the bot receives the messages you send it. Text, photos, voice notes, files. That is the whole list.

What it does not get is the part people usually worry about. A bot cannot open your other conversations, cannot read the chat you have with your sister, cannot enumerate your contacts, and cannot pull your location out of thin air. Your phone number reaches a bot only if you tap the button that shares it. Your location reaches it only if you send it.

What it does get automatically, the moment you press Start, is the basic profile Telegram attaches to every message: your user ID, your first and last name as you set them, your username if you have one, and your interface language. That is how any bot knows to answer you in Spanish without asking.

In a group, one setting changes everything

This is where most explanations get vague, so here is the mechanism. Telegram gives every bot a setting called privacy mode. Its documentation is blunt about the default and the exception:

"Privacy mode is enabled by default for all bots, except bots that were added to a group as admins (bot admins always receive all messages)."

With privacy mode on, a bot in a group receives a short list: commands aimed at it, replies to its own messages, messages sent through it inline, and service messages. Your ordinary conversation never reaches it.

With privacy mode off — or with the bot added as an administrator — it receives everything posted in that group.

So when you add any bot to a family chat, that single setting decides whether it sees your budget notes or your entire family conversation. It is worth knowing which one you are agreeing to, for any bot, not just this one.

Can the bot's owner read your messages?

A bot is not a separate creature living inside Telegram. It is a program running on its developer's server, and every message the bot receives is delivered there. So the straight answer is: whatever reaches the bot, its owner can technically read. In a private chat that is what you send it. In a group with privacy mode off, that is the whole group.

Telegram itself gives the owner no window into your conversations — there is no chat history in a bot's settings. A message ends up in front of a person only if the bot's code saves or logs it. And a chat with a bot is an ordinary cloud chat: encrypted between your phone and Telegram's servers, not end to end, so the bot's server receives it as plain text.

That turns "can they read it" into a better question: what does this particular bot keep? Two limits hold for every bot regardless of settings: it gets nothing from chats it is not in, and in a group it never receives messages posted by other bots.

For Smart Budget: message text is not saved and not written to any log. What gets stored are the structured fields of financial entries, described in the next section. As the person running the bot, I do have access to that database — so what I could see are amounts and categories, not your conversation.

How it works in Smart Budget, concretely

Privacy mode is off. In a group, the bot receives every message posted there.

We are not going to dress that up, because it is a direct consequence of the thing the product is built around. You write groceries 84.20 in the chat, with no command and no form, and it gets logged. For that to work, the bot has to be allowed to look at messages that are not addressed to it. Turn the setting the other way and the feature stops existing: you would be typing /add before every entry, which is exactly the friction we are trying to remove.

There is no clever third option here. It is a genuine trade, and you should make it knowingly.

What happens to a message that is not about money

Every message the bot receives is sent to Google Gemini to be classified. The model is what decides whether something is an expense, a question, or your partner asking what time dinner is. There is no keyword filter in front of it, because a keyword filter cannot tell "spent a thousand on groceries" from "what time are we meeting?" reliably, and it would break the plain-language questions the bot is supposed to answer.

What happens next is the part that matters:

• Only what is recognised as a financial entry is stored. "What time are we meeting?" produces no database record at all.
• What is stored are structured fields, not your message: amount, category, type, description, currency, date. The description is written by the model — it is not a copy of what you typed.
• Raw message text is not written to any log.

So the honest summary is a split: in transit everything in the group passes through classification; in storage only money survives, and only as fields.

Admin rights are not what lets it read your messages

Smart Budget asks to be an administrator of the group. That request is about one thing: pinning the quick-start guide so nobody has to scroll for the command list. It is not what gives the bot access to messages — that comes from the privacy setting described above, which is independent.

If you would rather not grant admin, the bot works normally without it. You simply do not get the pinned guide.

This is worth checking on any bot you add to a group. Administrator rights can include deleting other people's messages and removing members. A budgeting bot has no business doing either, and "we need admin to read messages" is not a reason — reading is a separate setting.

Where the data goes, and how to take it back

Two external services, both named in our privacy policy rather than buried:

Google Gemini processes the text and receipt photos to recognise transactions. Under Google's paid API terms this currently means prompts are not used to train Google's models — and we say "currently" deliberately, because those are Google's terms and Google can change them, not something we control.

Google Cloud Firestore stores the resulting records, with daily and weekly backups. Nobody else. We do not sell data and do not hand it to advertisers.

Getting it back out is not a support ticket. /exportmydata returns everything stored for that chat as a single CSV, free, at any time, without a subscription. /deletemydata permanently erases all of that chat's data once you confirm it with /deletemydata CONFIRM.

One honest exception to that deletion: the date that chat's free trial started, and the Telegram account ID that started it, are kept separately so the free trial cannot be reset over and over. It is a technical anti-abuse marker with no financial content — but it is not nothing, so it belongs in this list rather than in a footnote.

How to check any bot in five minutes

None of this is special to us. The same five questions work on every finance bot you are considering, and any bot that cannot answer them has told you something. We put four of them through their own sites in our comparison of Telegram budgeting bots.

• Does it ask for bank logins, card numbers or SMS codes? Close it. No expense tracker needs them, and a real one will never ask.
• Is there a privacy policy you can actually read, naming the third parties? "We take your privacy seriously" with no names is not a policy. If AI is involved, some model provider is processing your text — it should be named.
• Can you get your data out and delete it yourself? A command that does it immediately is a much stronger signal than an email address promising to.
• Why does it want administrator rights? Ask what for. If the answer is "to read messages," that is either a misunderstanding or a fudge — reading is a separate setting.
• How does it get paid? A product with an obvious business model has a reason to behave. One that is free forever with no explanation is monetising something, and you should know what.

Applying that checklist to Smart Budget: no bank credentials, ever — payments go through Telegram Stars, so card details never reach us. Policy names Gemini and Firestore. Export and deletion are self-service commands. Admin is for pinning. And we charge $1.99 a month, which is the honest answer to the last question.

If you are still uneasy after that, there is a version of this that costs you nothing: start in a private chat with the bot instead of a group. It sees only what you send it, you get the full feature set except shared budgeting, and you can decide about the group later, once you have seen what it actually does with a receipt. We would rather you did that than took our word for it.

Roman

Founder of Smart Budget — building it because I got tired of spreadsheets myself.