Privacy Policy
Access Keys and multiple devices
An account can link up to five active devices and share its subscription across them. The Access Key is a secret login credential, separate from the public user ID. Our database stores a SHA-256 digest of the high-entropy Access Key, not its plaintext. The key is transmitted over HTTPS during login or generation and stored in the iOS Keychain on your device. Anyone holding the key can sign in to your account. Never publish it or include it in support messages.
Each device has its own signing key and VPN connection credentials. We retain device association, revocation and last-seen records to authenticate requests and enforce the device limit. Login rate limiting temporarily stores a digest derived from the connecting network address and request counters. Removing a device revokes its API access; VPN access is removed when the node synchronizes the updated device list. Access Key reset can sign out other devices. Signing out does not cancel your Apple subscription or delete the server-side account.
The first-run privacy screen loads locally. Device registration is not initiated until you agree and choose to create an account. You can review these documents before agreeing. Copies of Access Keys placed on the clipboard by the app are local-only and expire after two minutes; you remain responsible for any copies you save elsewhere.
This policy describes how DogVPN handles information when you use our application, VPN service and support. For privacy questions or requests, contact support@dogvpn.io.
Information used to provide the service
- Account and device records: a generated user ID, device public key and key fingerprint, platform, app version, registration and last-seen timestamps. These help authenticate your device without requiring an email-based account.
- Subscription records: product identifiers, Apple transaction and original transaction identifiers, subscription expiration, transaction environment and related account records. Apple processes App Store payments; the app does not ask you for payment-card details.
- Connection credentials: a VPN credential associated with your account and selected node, its validity period and related timestamps, used to authorize VPN access.
- Security and operational information: signed-request timestamps and nonces to prevent replay attacks, API request paths, response timing and errors. Servers and infrastructure providers receive network information such as your IP address when you connect. Access logs and diagnostics may contain this information, depending on deployment settings.
- Support: your email address, messages and any diagnostic information you choose to provide.
VPN traffic and split tunneling
The VPN processes network packets and destination information to route your traffic. DNS resolution also involves the configured DNS provider. Traffic excluded by split-tunneling rules travels directly through your ordinary internet connection and is not protected by the VPN tunnel. A VPN does not make all online activity anonymous or protect information you disclose to websites.
This policy does not promise that every infrastructure component operates without logs. Operational logging depends on server, proxy and diagnostic configuration. Please contact us for questions about the handling of particular connection information.
How information is used
We use information to deliver and maintain the service, authenticate requests, validate purchases, enforce subscription access, prevent abuse, troubleshoot problems, respond to support requests and meet applicable obligations. Where a legal basis is required, processing depends on providing the service you request, legitimate interests in security and reliability, legal obligations, or consent where required.
Local storage
We use an on-server country database to estimate the country of your connection's exit IP for regional availability rules. IP Geolocation by DB-IP, licensed under CC BY 4.0. The estimate does not establish nationality or physical location. Local utility tools process text on your device without uploading or saving it; copying a result puts it on the local clipboard for up to 60 seconds.
The app stores account and membership information, language preferences, location lists, application configuration and encrypted connection configuration on your device. Device cryptographic keys are stored using the platform's secure key storage. Some keychain data may remain after uninstalling the app. Local caches allow the app to display information and reconnect without downloading every item again.
Service providers and disclosures
Hosting and network providers, DNS services, Apple and email support providers process information needed for their roles. The app may contact GitHub or a configuration CDN to obtain public configuration when the primary source is unavailable; these providers receive ordinary request metadata such as IP address. External providers have their own privacy policies. We may disclose information when required by applicable law, to address fraud or security incidents, or as part of a lawful business transfer with appropriate protections.
Retention and security
Account, subscription and credential records are retained as needed to provide access, restore purchases, resolve disputes and meet applicable recordkeeping obligations. Support messages and operational records are retained according to their purpose and operational requirements. Expiration of a subscription does not itself delete account records. Contact us to request deletion; information required for legal or security reasons may need to be retained.
We use HTTPS, signed requests and encryption for sensitive connection configuration. No storage or transmission system can be guaranteed completely secure.
Your choices and rights
You can stop using the VPN, change app settings, manage your subscription through Apple and request access, correction or deletion by emailing us. Include your in-app user ID when helpful, but never send private keys or passwords. We may verify ownership before acting. Rights to restriction, objection, portability, consent withdrawal or a complaint to a data-protection authority depend on applicable law. Deleting an account or uninstalling the app does not cancel an Apple subscription.
International processing and children
VPN nodes and service providers may process information outside your country, where laws may differ. Applicable safeguards and legal requirements govern these transfers. The service is not directed to children under 13 or a higher minimum age required locally. Contact us if you believe a child has provided personal information.
Changes and contact
We may update this policy as the service changes. The updated date identifies the version, and material changes will be communicated as required by applicable law. Contact: support@dogvpn.io.