1. Information We Collect

2. How We Use Information

1. Provide/operate the Service (connectivity, routing, filtering, support).
2. Enforce Acceptable Use (e.g., block/throttle P2P).
3. Improve UX via de-identified/aggregated analytics (feature adoption, error rates, performance).
4. Security/fraud prevention and to comply with legal obligations.

Where required by law, we rely on consent for analytics/marketing and respect your choices.

3. "No Activity Logs"

We do not log: VPN traffic content, per-destination browsing history, or DNS queries tied to an identified user. Limited connection metadata is used operationally and removed within 30 days. Analytics are de-identified or aggregated and not reasonably linkable to you.

4. Sharing & Disclosure

We do not sell personal information. We share with:

1. Service providers (hosting, analytics, crash reporting, email/support) under confidentiality and data-processing terms;
2. App stores/payment processors (for purchases, when launched);
3. Security/abuse partners (e.g., blocklists) to enforce AUP;
4. Legal authorities when required by law or necessary to protect users, the network, or our rights. Where permitted, we will notify you of requests unless legally prohibited.

5. P2P/Torrent Detection & Network Management

P2P is prohibited. We may use automated methods (protocol fingerprinting, destination/port analysis, traffic heuristics) to detect P2P and take action (block/throttle/terminate). We do not store payload contents. Limited metadata tied to a suspected violation may be retained up to 90 days for investigation and legal compliance.

6. ClearWeb & Parental Controls

Filtering decisions evaluate requested domains/hosts against blocklists and reputation sources to block ads, trackers, malware, or adult content. We do not retain per-user DNS query logs for this purpose; we may maintain aggregate counts to improve lists and performance. Over-/under-blocking and site breakage can occur; you can adjust feature settings in the app.

7. Data Retention

1. Account data: while your account is active and then up to 24 months for fraud prevention, accounting, or as required by law.
2. Connection/security metadata: up to 30 days (unless extended up to 90 days for an active abuse/legal investigation), then deletion or anonymization.
3. De-identified/aggregated analytics: retained as needed for UX improvement; not reasonably linkable to you.
4. DMCA/abuse/legal records: as required by law.

8. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, port, or object/restrict processing; withdraw consent; and lodge a complaint with a supervisory authority. Contact us to exercise rights; we will honor them where applicable.

9. International Transfers

We are U.S.-based (backend in the U.S.). When transferring personal data internationally (including from the EEA/UK), we use appropriate safeguards (e.g., Standard Contractual Clauses) or other lawful mechanisms.

10. Security

We use technical and organizational measures (encryption in transit, access controls, segmentation, monitoring). No system is perfectly secure; keep devices updated and use strong authentication.

11. Children's Privacy

The Service is not directed to children under 13. If you enable parental controls for a minor, you are responsible for the child's use. If we learn that we collected personal information from a child under 13 without parental consent, we will delete it.

12. Changes

We may update this Policy. We will adjust the "Last Updated" date and, where required, notify you and/or seek consent.

13. Contact