Privacy Policy

1Who is responsible

The data controller is the individual developer listed as the seller of the app on the App Store (“we”). For any privacy question, message us in the in-app support chat (Support tab).

2What stays on your iPhone only

• the subscriptions and server configurations you add, your selected mode and server, routing rules, latency results and settings;
• the diagnostic log — the last 400 connection and error events. Subscription links, keys, passwords and full server addresses are masked as soon as they are written;
• the access token for the app server — in the iOS Keychain.

Subscriptions, configurations and the log are kept in a folder excluded from iCloud backups and protected by iOS encryption. Speed and traffic figures on the home screen are calculated on the device and never sent anywhere.

3Device identifier (HWID)

On first launch the app creates a random identifier, the HWID. It is not derived from your iPhone’s serial number, your Apple ID or the advertising identifier (IDFA). The HWID is stored in the Keychain on this iPhone only and survives reinstalling the app, so your provider does not count the phone as a new device. You can view and copy it in the app’s Settings, under “About”.

The HWID is sent to your subscription provider (section 4) and to the app server (section 5). “Delete App Data” does not change it; the HWID is erased together with the Keychain when you reset the iPhone (“Erase All Content and Settings”).

4What your subscription provider receives

Your subscription comes from the provider you chose, not from us. When the app downloads or refreshes a subscription — when you add it, when you tap refresh, and automatically about once an hour — the provider receives your IP address, the HWID, the app name and version, the iOS version and the device type (“iPhone”). The provider uses the HWID to count devices under the terms of your subscription. In return it sends the server list and, optionally, the expiry date and data usage.

While the VPN is on, your internet traffic goes through the provider’s servers. We do not control them and receive no data about your traffic; the provider handles data under its own privacy policy.

5What the app server receives

The app server is our server for shared settings, the support chat, notifications and news. VPN traffic never passes through it.

5.1. Shared settings

At launch and from time to time the app downloads data that is the same for everyone: home screen settings, texts and the routing rules catalog. These requests carry no HWID or other identifier — the server sees only your IP address and the app and iOS versions.

5.2. Device registration

The device is registered on the server only when you open the support chat or news, turn on notifications, or add a subscription from a connected provider (section 5.3). We receive the HWID, the iPhone model (for example “iPhone17,1”), the iOS and app versions; the server also stores the IP address and the time of the last request. The device receives a random access token, and only its hash is stored on the server.

5.3. Subscriptions from connected providers

If you add a subscription from a provider connected to the app server, the app sends its link to the server to link the device to it: to show the expiry date and device count, remind you before it expires, and keep your support history after a reinstall. Links to other providers’ subscriptions and your own configurations are never sent to the server.

5.4. Support chat

The messages and photos you send to the chat. The app gets access only to the photo you pick, not to your whole library. Before sending, the photo is downscaled and re-encoded as JPEG, so location and other photo metadata are not transmitted.

5.5. Notifications

If you turn them on: your Apple Push Notification service token and the categories you choose — “Support & Subscription” (chat replies and expiry reminders for subscriptions from connected providers) and “News”. The server also keeps the number of the last news item you read to show the unread badge.

5.6. Diagnostic reports

For subscriptions from connected providers you can send the diagnostic log to support manually (Settings → Diagnostics & Log → Log, after a confirmation), and automatically only with your consent: after the first connection error the app asks whether to send the log (“Always Send”, “Just This Time” or “Don’t Send”). With “Always Send” the log is sent on connection errors, at most once every 10 minutes; change your choice with the “Send Error Reports Automatically” switch in Settings. A report contains connection times and steps, error messages, app and iOS versions, the iPhone model, the connection mode and VPN module memory figures. If you turned on the traffic log (a diagnostic tool that turns itself off after 2 hours), the report also includes its summary: how many connections went through which servers, DNS answers and connection errors; of the sites, only the ones that failed to load are named. Subscription links, keys, passwords and full server addresses are masked on the device. With other providers’ subscriptions the log is never sent — you can only copy it.

6What we do not collect

• the content of your traffic, the websites and apps you use, DNS queries (except the traffic log summary if you turned it on and sent a report yourself — section 5.6);
• your name, phone number, email, contacts or location (unless you write them in the chat yourself);
• the advertising identifier (IDFA): the app has no ads, no third-party analytics and no tracking SDKs;
• camera images: the camera is used only to read a QR code on the device; frames are never sent or saved.

7How we use data

Only to make the app’s features work: to show subscription status, answer you in the chat, send notifications, investigate connection errors and protect the server from abuse (rate limiting). We process data to fulfil your requests, and send notifications only with your consent, which you can withdraw at any time.

We do not use data for advertising or profiling, we do not sell it, and we do not share it with third parties other than the service providers listed in section 8. We may disclose data only where applicable law expressly requires it.

8Who else may receive data

• Your subscription provider — see section 4.
• Apple delivers notifications through the Apple Push Notification service. Notifications never contain subscription links or keys. If you enabled “Share With App Developers” in iPhone settings, Apple may share anonymous crash reports with us.
• CacheFly and Cloudflare — only when you run a speed test (Settings → Diagnostics & Log → Speed Test): the app downloads a test file from cachefly.cachefly.net and exchanges test data with speed.cloudflare.com. They see your IP address or, if the VPN is on, the VPN server’s address.
• Google — to measure latency, the app sends short empty requests to www.gstatic.com through each server. They go through the VPN servers, so Google sees the server’s address, not yours, and receives no data about you.
• Telegram — support messages and diagnostic reports are delivered to our support staff through the Telegram messenger.
• Hosting providers run the app server and the content delivery network (CDN). They process data only as technical service providers.
• Websites you open yourself in the in-app browser handle data under their own policies.

9How long we keep data

• device record, notification token and last-read news number — until you delete app data or ask us to delete them;
• support messages and photos — until you delete app data. If the device is linked to a subscription from a connected provider, the conversation belongs to that subscription and is deleted on request in the support chat;
• diagnostic reports — no longer than 30 days;
• server technical logs (IP address, time and request path) — no longer than 30 days.

10How to delete your data

In the app: Settings → “Delete App Data”. On the iPhone this removes subscriptions, settings, the log and caches, and the VPN profile from iPhone settings. On the server it deletes the device record, notification token, diagnostic reports and support conversation (except a conversation linked to a subscription from a connected provider — see section 9).

If you have already deleted the app, install it again (the HWID stays the same) and tap “Delete App Data”, or message us in the in-app support chat (Support tab) and we will delete your data within 30 days.

11Your rights

You can ask what data we hold about you, have it corrected or deleted, restrict processing or withdraw consent. Notifications and automatic reports can be turned off in the app’s Settings. For any other request, message us in the in-app support chat (Support tab) and include your HWID — we reply within 30 days. You may also contact the data protection authority in your country.

12Security

The app talks to the server over HTTPS only. The access token is kept in the Keychain and stored on the server only as a hash. App files on the device are protected by iOS encryption.

13Children

The app is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has sent us data, contact us and we will delete it.

14Changes to this policy

If this policy changes, we will update this page and the text in the app (Settings → About → Privacy Policy) and change the date above. We will announce material changes in the app in advance.

15Contact

In-app support chat — the Support tab