NanoVPN Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) explains what data the mobile application “NanoVPN” (“App,” “we,” “us,” “our”) collects and processes, and how we protect user information (“you,” “user”). By using the App, you agree to the terms of this Policy.

2. Data We Collect

We collect only the data necessary for the operation, improvement, and monetization of the service.

2.1. Data You Provide

Email address (when you contact support or purchase a subscription).
Payment information transmitted through Google Play Billing (order ID, purchase token); we do not store your card or banking details.

2.2. Data Collected Automatically

Through built-in libraries and SDKs* the App automatically collects:

Device identifiers (Android ID, Advertising ID, Firebase Instance ID).
Usage data (app launches, screens viewed, events, session length).
Diagnostic data (crash reports, error logs, device model, OS and App version).
Network data (connection speed, IP address, ping) for the Speed Test feature and VPN optimization.
Advertising identifiers and approximate location (derived from IP) for displaying (non-)personalized ads via Google AdMob.
Push notification tokens (Firebase Cloud Messaging) for delivering service messages.

*The main SDK list includes Google Firebase Analytics, Crashlytics, Remote Config, Messaging, Google AdMob, Google Play Billing.

2.3. What We Do Not Collect

VPN traffic logs (websites visited, DNS queries, content of transferred data).
Browsing history, SMS, contacts, photos, or other personal files.

3. Purposes of Processing

Providing and supporting VPN connectivity and the speed-test feature.
Improving app stability and performance (analytics, crash reports).
Displaying advertisements and managing subscriptions/purchases.
Sending essential service notifications (e.g., subscription expiry).
Complying with legal obligations and preventing fraud.

4. Legal Bases

We process data under Article 6 of the GDPR: (a) consent; (b) performance of a contract (VPN service); (c) compliance with legal obligations; (f) legitimate interests (service maintenance, security, monetization).

5. No-Logs VPN

We follow a No Logs policy — we do not record or store your real IP address, visited sites, DNS queries, traffic metadata, or content. All network activity passes through an encrypted tunnel and is not retained after your session ends.

6. Cookies and Tracking Technologies

The App itself does not use cookies, but partner SDKs (Google AdMob, Firebase) may use similar identifiers to cap ad frequency, combat fraud, and perform analytics.

7. Sharing Data with Third Parties

We share data only with the partners below, and only to the extent needed to deliver services:

Google LLC — Firebase Analytics, Crashlytics, Cloud Messaging, AdMob, Play Billing.
Infrastructure providers (VPS/VDS) — anonymized network metrics for load balancing.

No data is sold to third parties.

8. Retention and Deletion

Analytics logs and crash reports are stored in Firebase for up to 24 months unless you withdraw consent. Payment records are kept per Google Play policies. You may request deletion of your user data at any time (see Section 11).

9. Data Security

We apply TLS 1.2+ encryption for all transmissions, maintain isolated environments, regularly update server and client software, and follow the principle of least privilege for staff access.

10. International Data Transfers

Data may be processed on servers outside your country. We rely on Standard Contractual Clauses (SCCs) and other GDPR-approved mechanisms to ensure adequate protection.

11. Your Rights

Under the GDPR you have the right to:

access your data;
rectify inaccuracies;
erase data (“right to be forgotten”);
restrict processing;
object to processing or withdraw consent;
receive data in a structured, machine-readable format.

To exercise these rights, contact us (Section 13). We will respond within 30 days.

12. Children’s Privacy

NanoVPN is not intended for individuals under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with information, please notify us and we will promptly delete it.

13. Changes to This Policy

We may update this Policy periodically. We will notify you in-app or via push notification. The revision date is shown at the top of the page.

14. Contact Us

For privacy questions, requests, or complaints, contact us:
Email: kawunapps@gmail.com