Your key, whether you generate it in the app, or imported, is never exposed to us. It's stored in the localstorage of the webview inside telegram, basically it is in your device.
*All high risk issues were resolved post-audit
https://www.verichains.io/?search=sss