Codpiece Hi, key is on the server, it's a custodian model, there is no other way to do that through chatbot.
And it's aimed at existing Telegram users, I don't expect you to install Telegram if you don't have a need for it, just to use my wallet. And current versions of Android allow you to give permissions one by one when you are about to use specific feature inside the app, so you can have it and reject any prompts for additional permissions.
I do have a feeling that there is a time for some blog post about PapayaBot security model.
It's not as good as hardware wallets, but offers some unique properties and good recovery options.
To sum up, PapayaBot is for you if
- you don't have ledger nano
- you are not sure that you're able to keep private key secure by yourself (without losing it, entering into phishing website or making sure your computer is not compromised ever)