Privacy Policy

1) Summary

• We collect the minimum data required to operate a VPN account and keep the service secure.
• We do not build profiles based on the websites you visit.
• We process technical connection data (e.g., last handshake time and traffic counters) to provide the VPN service.
• We use Firebase (Google) to provide authentication and backend infrastructure.

2) Data We Collect

Account data

• Email address (if you sign up with email/password).
• Firebase user identifier (uid) used internally to link your account and VPN access.

Device and VPN service data

• Device identifier you provide to the service (used to enforce “one active device per account”).
• WireGuard peer identifiers/keys and an assigned internal VPN IP address.
• Connection state and telemetry needed to operate the service, such as last handshake timestamp and traffic counters (RX/TX bytes).

Support and security logs

• Audit events related to security-sensitive actions (e.g., config issuance, key rotation, access revoke).
• Basic request logs for debugging and abuse prevention.

What we do not intentionally collect

• Browsing history (which websites you visit).
• Content of your traffic.

3) How We Use Your Data

• Provide VPN connectivity and generate WireGuard configuration for your account/device.
• Enforce account rules (e.g., single active device at a time).
• Operate, secure, and improve the service (e.g., detect abuse, debug failures).
• Communicate with you about support requests and important service changes.

4) Sharing and Third-Party Services

We use third-party infrastructure providers to run the service. These providers may process data on our behalf:

• Google Firebase (Authentication, Cloud Functions, Firestore, Hosting).
• DNS provider configured in the VPN profile (example: 1.1.1.1).
• Apple (if/when you purchase subscriptions through the App Store).

We do not sell personal data.

5) Data Retention

We retain account and service data for as long as needed to provide the service, maintain security, and resolve disputes. You may request deletion of your account data by contacting us (see “Contact”).

6) Security

We take reasonable measures to protect data, including access controls and secure transport where applicable. No method of transmission or storage is 100% secure.

7) Your Choices

• You can sign out and stop using the VPN at any time.
• You can request access or deletion of your account data by contacting us.

8) Children

mVPN is not intended for children under 13. If you believe a child has provided personal data, contact us.

9) Changes to This Policy

We may update this policy from time to time. The “Last updated” date will reflect the latest version.

10) Contact

If you have questions about this Privacy Policy or want to request access/deletion, contact: mozghovii@gmail.com