Last updated October 11, 2026
This policy covers the Privacy VPN apps for iPhone, iPad and Android, our servers, and this website. Privacy VPN is a service of Mobile Cosmos LLC (“we”, “us”), which is responsible for your data. Questions: [email protected].
The short version
We don’t record what you do online. Our VPN servers keep no logs of the sites you visit, your traffic, your DNS lookups, or your IP address.
To run the service we keep an anonymous account (no name or email), your subscription status, basic device information, app statistics and crash reports. We do not sell your data.
What we never collect
- The websites you visit, the apps you use, or what you search for.
- The content of your traffic.
- Your DNS lookups.
- Your real IP address on our VPN servers, or any record of when you connected to them, for how long, or how much data you used.
- Anything you do in the app’s private browser: it keeps no history, cookies or cache, and erases everything when you leave it.
- Your name, email address, phone number or payment card details. You don’t sign up, and payments are handled by Apple or Google.
- Your precise location. The app does not ask for location access.
What we collect and why
| Data | Why |
|---|---|
| Account number and Device ID. The app creates an anonymous account the first time it opens. The Device ID is derived from your device’s app identifier (on iPhone also kept in the device Keychain, so reinstalling the app finds the same account). When a subscription moves to a new device, we record which earlier account number it came from. | To recognise your account, keep your subscription, and answer support requests. |
| Device and app information: device model and manufacturer, operating system version, app version, and the language and region set on your device. | To support the devices you use and show the app in your language. |
| Subscription status: whether you are Premium and until when, and purchase records (product, price, date, store transaction ID) from Apple or Google via Adapty. | To give you Premium, prevent fraud, and for accounting and tax. |
| Connection details for the current session: which server you were last given, the protocol, and access credentials for it. Each new connection replaces the previous one; no history is kept. | To connect you, and to keep one subscription on one device at a time. |
| Push notification token (if you allow notifications). | To send service notifications. You can turn them off in your device settings. |
| Error and security logs on our main server: the IP address and app details of a request that failed, a rate limit that was hit, or a Premium check after a purchase. | To fix problems and protect the service from abuse. |
| Web server logs when you visit this website or the app talks to our API: IP address, time, the page or API action, and browser details. Request contents are not logged. | Security and troubleshooting. |
| Messages you send us by email, including the app version and Device ID the app adds. | To answer you. |
We use this data on the basis of our contract with you (providing the service), our legitimate interests (security, fraud prevention, improving the app), legal obligations (accounting and tax), and your consent where the law requires it (for example notifications).
Our VPN servers and DNS
Our VPN servers are set up not to write logs: connection logging is switched off in OpenVPN and Xray, the system journal is kept in memory only, and the server software reports only totals to us, such as how many people are connected, never who is connected or from which IP address.
DNS lookups made while connected are answered by public resolvers: Cloudflare (1.1.1.1), or AdGuard DNS when you turn on the ad blocker. They receive the lookup from our server, not from your device, so they do not see your IP address. We do not log these lookups.
Services we use
These companies process data for us. They receive only what they need for the purpose listed.
| Service | Purpose and data |
|---|---|
| Apple App Store, Google Play | Payments, subscriptions and refunds. They handle your payment details; we never see them. Apple App Attest and Google Play Integrity check that requests come from the genuine app. |
| Adapty | Manages subscriptions and the purchase screens. Receives your account number, purchase records, and the app identifiers listed below. |
| Google Firebase | Analytics, crash reports (Crashlytics), push notifications and app integrity checks (App Check). Receives your account number, app events and device information. |
| AppMetrica | App analytics and crash reports. Receives your account number, app events and device information. Location tracking is off. |
| Meta (Facebook) | Measures how well our ads work. Receives app events and your account number. |
| Branch | Measures which ad or link brought you to the app, and opens links in the app. |
| Cloudflare | Delivers this website and our API, and answers DNS lookups for VPN connections. |
| AdGuard DNS | Answers DNS lookups when the ad blocker is on, from our servers. |
| Hetzner | Hosts our main server: this website, our API and the account database. |
| VPN server hosting | Our VPN servers run with several hosting providers in different countries. They keep no logs (see above), so the providers have no record of your activity either. |
| Backup storage | Copies of our database are stored with a cloud storage provider. |
We may also disclose data when the law requires it, for example in response to a valid court order. Because we keep no activity logs, we have no record of what any user did online to disclose. If the company or its business is sold, data may transfer to the new owner under this policy.
Analytics and advertising identifiers
The app records usage events to understand how it is used and where it fails. Examples: a connection was made (with the protocol and the server country you chose), a connection failed and the type of error, how long a connection lasted in broad ranges, settings you changed, and screens like the browser being opened. These events never include the sites you visit, your searches, IP addresses or server details. Your app language, subscription status and settings are attached so we can compare groups. Firebase and AppMetrica estimate an approximate location (country and city) from the IP address the app reports from, for statistics; while you are connected to the VPN that is our server’s location.
On iPhone and iPad we do not use the advertising identifier (IDFA) and never ask to track you. Partners receive the app’s vendor identifier (IDFV) and their own app-specific identifiers. If you came from an Apple Search Ads ad, Apple provides an anonymous attribution token.
On Android the app uses the Google advertising ID to measure our ads with Meta, Branch and Google. You can reset or delete it at any time in your phone’s settings (Settings > Privacy > Ads, or Google > Ads).
We do not sell your personal information. Sharing identifiers with advertising partners to measure our own ads may count as “sharing” under some US state laws; you can opt out by writing to us, and on Android by deleting your advertising ID.
How long we keep data
| Data | Kept for |
|---|---|
| Account, device information and subscription status | Until you ask us to delete your account. Accounts of automated test devices are deleted after 7 days. |
| Purchase records, subscription events from Adapty, and the link between old and new account numbers | As long as accounting and tax law requires, also after an account is deleted. |
| Error and security logs on our main server | 90 days. |
| Web server logs | Up to 14 days. |
| Connection details for the current session | Replaced at every connection; VPN credentials for a server are deleted when Premium ends. |
| Raw subscription notifications from Apple and Google | 90 days in our database; they may be archived for accounting. |
| Records of changes our staff make to an account | Kept as an audit trail. |
| Backups of our database | Rolling backups for 10 days, plus one backup per year kept as an archive. |
| Analytics and crash data at partners | Under each partner’s own retention settings. |
How we protect it
Traffic between the app and our servers is encrypted. Our API only answers the genuine app, verified with App Attest or Play Integrity. Access to our systems is limited to the people who run the service. No system is perfectly secure, but we design the service so that the data that would matter most, your online activity, is never stored at all.
Your rights and choices
Depending on where you live (for example the European Economic Area, the United Kingdom or California), you can ask us to give you a copy of your data, correct it, delete it, or stop or restrict some processing, and you can object to processing based on legitimate interests. You can also complain to your local data protection authority.
To make a request, email [email protected] with your Device ID from the app’s Settings, so we can find your account. We reply within 30 days.
Delete your account
- In the app, open Settings and tap Device ID to copy it.
- Email it to [email protected] with the subject “Delete my account”.
- We delete your account, device information, connection details and push token within 30 days and confirm by email. Purchase records stay as long as accounting and tax law requires.
Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play first.
- Turn off notifications in your device settings.
- Reset or delete your advertising ID in your Android settings.
- Deleting the app removes its data from your device. On iPhone the Device ID stays in the Keychain so that a reinstall finds your account; ask us to delete the account if you want it gone.
Children
Privacy VPN is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used the service, contact us and we will delete the account.
International transfers
We and some of our partners process data in the United States, the European Union and other countries. Where the law requires it, transfers are protected by standard contractual clauses or equivalent safeguards.
Changes to this policy
When we change this policy we update the date at the top. For significant changes we also tell you in the app or on this website.
Contact
Mobile Cosmos LLC, 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Email: [email protected].