Is it safe?
What a Telegram bot can and cannot see, why bot chats are not encrypted, how to spot a scam bot, what we store, and how to delete it in one command.
A Telegram bot can read the messages you send it and see the public part of your profile. It cannot see your phone number, your contacts, your other chats or anything else in your account. Emberia stores your messages so she can remember you, and /delete confirm erases them within 24 hours.
What can any Telegram bot actually see?
Telegram's bot platform is narrow on purpose. A bot in a private chat receives the messages addressed to it and a small profile block, and nothing more.
| The bot gets | The bot does not get |
|---|---|
| Your numeric Telegram user ID | Your phone number |
| Your first name, last name and @username if you set one | Your contact list |
| Your app language code | Any other chat, group or channel you are in |
| The messages, photos and voice notes you send it | Your location, unless you deliberately send it |
One thing people assume and should not. Bot chats are not end to end encrypted. Telegram's Secret Chats are, but bots cannot use them, so any bot on the platform can read what you write to it by design. That is true of every AI companion bot in Telegram, ours included, and anyone who tells you otherwise is selling something.
What we store, and for how long
Messages and the facts she remembers about you (your job, your schedule, the people you mention) sit in our database, because memory is the whole point. Alongside that we keep your settings, your language and timezone, the timestamp of your age confirmation, your plan, and which page sent you to the bot.
We keep it until you delete it. There is no rolling purge, because a girlfriend who forgets last month is not the product anyone wants.
What we never collect: no email, no password, no phone number, no card. There is no sign-up form, so there is nothing to fill in and nothing to leak.
Two things do leave our servers, and you should know about both. The text of your conversation goes to a language model API to generate her replies. Product events (a purchase, a bot start, hitting the free limit) go to our analytics with your user ID attached, and never with message content.
How do you delete everything?
Type /delete confirm. Not /delete, which only asks you to confirm.
That wipes messages, memories, relationship state, usage counters, queued messages and the attribution record, and resets your settings. It finishes within 24 hours. Purchase records survive, because accounting rules require them, and your identity row survives so the same Telegram account still works if you come back.
Run /export first if you want a copy. It sends a JSON file into the chat with your messages, your memories and the relationship state behind them. It is the same data a formal access request would produce, handed over in a few seconds instead of a month.
Blocking the bot in Telegram stops the messages but does not delete anything. Use /delete confirm for that.
How do you spot a scam bot?
The AI girlfriend niche in Telegram attracts imitators, and the tells are consistent.
| Red flag | What a legitimate bot does |
|---|---|
| Asks for your phone number, email or password | Asks for nothing, Telegram is already the account |
| Sends you to an outside checkout page or a wallet address | Sends a Telegram invoice with a Pay button, in the chat |
| Asks you to log in to Telegram again via a link | Never asks you to log in at all |
| Promises a real woman behind the screen | Says out loud that it is software |
| No website, no terms, no way to contact a human | Has all three |
The login one is the dangerous one. A page that asks you to enter your Telegram code is a session hijack attempt, not a payment step. No bot on the platform ever needs that code.
Copycat usernames are common too. Check the handle character by character. Ours is @Emberia_Bot and there is no other.
What went wrong at other companies
Two incidents get cited in almost every article about this niche, and they are worth reading as a checklist rather than as gossip.
Muah.ai was breached in 2024 and roughly 1.9 million user email addresses were exposed. In 2025 the companion apps Chattee and GiMe leaked around 43 million messages. In both cases the damage came from data that did not need to exist in that form: an email address tied to a named account, and chat logs stored without a deletion path.
Our answer is structural, not a promise. We do not ask for an email, so there is no email to expose. Telegram holds the account, so there is no password database. You can pull everything out with /export and destroy it with /delete confirm, without writing to anyone.
The honest remainder: we store chat text, and stored chat text can always be stolen. Everything above is about keeping that pile as small and as easy to erase as we can.
Frequently asked questions
- Can the bot see my phone number?
- No. Telegram never hands a bot your phone number unless you tap a button that explicitly offers to share it, and Emberia has no such button. The bot sees your numeric user ID, your display name, your @username if you have one and your app language.
- Are my messages read by humans?
- No, unless you write to support about a specific chat and ask us to look at it. We do not sell chat data and we do not train public models on it. The text of your messages does go to a language model API to generate each reply, which is unavoidable for any product of this kind.
- How do I delete my account?
- Type /delete confirm in the chat. Messages, memories, relationship state, settings and the record of which page you arrived from are erased within 24 hours. Purchase records stay, because we are required to keep them for accounting, and you can start fresh with the same Telegram account whenever you want.
Related
Updated: 2026-09-15