Introduction

Welcome to SafePassVPN's Privacy Policy. This policy explains how SafePassVPN ("we", "us", or "our"), operated by ComputeOne, collects, uses, and protects your information when you use our VPN application and website. By using our service, you agree to the terms described in this policy.

What We Don't Collect

We do not collect or store your browsing destinations, DNS queries, or the content of your VPN traffic. Specifically, we never record: • The websites, apps, or IP addresses you connect to through the VPN • Your DNS queries • The content of your traffic While connected, your device sends DNS lookups to a third-party public DNS resolver. We do not receive or store those lookups; the resolver processes them under its own privacy commitments.

Information We Collect

Account information: An account is created automatically when you first open the app, identified by a device identifier. If you add an email address, we collect it and sign you in with one-time codes sent by email — there are no passwords. We also record the IP address and time your account was created. Payment and subscription information: Payments are processed by Google Play or, for website purchases, by our payment processor. We do not receive your card details; we receive only the order and subscription details needed to activate and manage your plan. For website purchases, the payment processor may also share the name, email, and phone number you enter at checkout. Device and diagnostic information: We collect limited device and diagnostic information — such as device model, operating system version, app version, crash reports, and app performance data — to diagnose technical issues and improve performance. We also store a push notification token so we can send you service notifications. App usage analytics: We configure analytics to record usage events such as screens viewed, upgrade and payment steps, and VPN connection events including the server location you selected. Firebase Analytics may also automatically collect certain device, app-instance, session, and approximate-location information, and on Android the advertising ID, as described in Google's documentation. We link these analytics events to your internal SafePassVPN account ID (never your email address) so we can investigate purchase and account issues. These analytics events are separate from the connection records described below and are never used to record the websites, destinations, DNS queries, or contents of your VPN traffic. Data usage: For free-plan accounts, we count how much data you use so we can apply daily and monthly limits. Advertising: The free app shows ads through Google AdMob, which collects your device's advertising ID, approximate location derived from your IP address, and ad interaction data to serve and measure ads. You can reset or delete your advertising ID in your Android settings. Premium users do not see ads. We do not sell your personal data.

VPN Connection Records

As a VPN service provider operating in India, we are subject to applicable Indian cybersecurity and data-retention requirements, including the CERT-In Directions dated 28 April 2022 issued under Section 70B of the Information Technology Act, 2000. We retain certain subscriber, account, and connection information for the periods required by applicable law. For each VPN session, we record: • Your originating (real) IP address and port • The VPN server you connected to • The VPN IP address assigned to your device • When the session started and ended • The amount of data transferred Together with the account information described above (including the IP address and time your account was created), this is the connection information we hold. These records cannot be used to reconstruct your online activity: they contain no destination addresses, websites, DNS queries, or traffic content, because we never collect that information in the first place. They show that a VPN connection existed, when it occurred, which VPN server and VPN IP address were involved, the originating IP address, and the amount of data transferred. They are kept on our central database (not on the VPN servers), encrypted in transit and at rest, with access limited to a small number of authorised administrators. We may disclose them when required or permitted by applicable law, including in response to a valid legal request. See our Transparency Report for how we handle legal requests.

Cookies & Tracking

Our website uses essential cookies and browser storage to keep you signed in and remember your preferences. We also use Google Analytics for Firebase and a website analytics service to understand how the website is used, and Google Ads conversion tracking to measure whether our ads lead to purchases. These services may set their own cookies, governed by their own privacy policies. You may disable cookies in your browser settings, though this may affect certain website functionality.

Who Processes Your Data

We use the following providers and categories of providers to operate SafePassVPN (provider — purpose — data involved). We name our Google services as their terms require; for security reasons we describe our other infrastructure providers by category. Our current list of providers is available on request at contact@safepassvpn.com. • Firebase (Google) — analytics, crash reporting, performance monitoring, push notifications, remote configuration, app integrity checks — device and app-instance identifiers, app events, diagnostics, push token • Google AdMob — ads in the free app — advertising ID, device data, approximate location, ad interactions • Google Ads — measuring website ad conversions — website visit and purchase events • Website analytics service — website usage analytics — website usage events • Google Play — Android payments — purchase and subscription details • Payment processor — website payments — order details and the checkout details you enter • Email delivery provider — sign-in codes and account emails — email address • Cloud database provider — our database — account data, connection records • Cloud hosting providers — hosting for our API and VPN servers — server and network data, system logs • Public DNS resolver — DNS resolution while connected — DNS requests We use these providers to process information necessary to provide specific services. Their processing may also be governed by their own privacy policies and terms.

Data Retention

• Account information (email, device identifier, push token, settings): while your account is active. If you request deletion, we remove it within 30 days. • Account-creation details (IP address and time): 5 years, including after account deletion, in accordance with our retention practices and applicable legal requirements. • VPN connection records: 5 years, including after account deletion, in accordance with our retention practices and applicable legal requirements. • System and security logs: a rolling period of 180 days, where required by applicable law. These logs are distinct from the VPN connection records described above and do not contain your browsing destinations, DNS queries, or traffic content. • Free-plan data-usage counters: reset daily and monthly. • Analytics data: according to the retention settings of the analytics provider. • Payment records: as long as tax and accounting laws require. Deleted information may remain in encrypted database backups for a limited period until those backups are overwritten.

Security

We protect your information with: • Encryption in transit — all app and website traffic to our servers uses HTTPS/TLS, and VPN traffic is encrypted between your device and our VPN servers • Encryption at rest — our database is encrypted on disk • Separation — connection records are kept on our central database, not on the VPN servers you connect to • Restricted access — only a small number of authorised administrators can access stored records • Passwordless sign-in — accounts use one-time email codes, so there is no password to leak or reuse No method of electronic transmission or storage is 100% secure. Contact us immediately at contact@safepassvpn.com if you suspect unauthorised access to your account. For a full breakdown of our infrastructure, legal requests received, and warrant canary, see our Transparency Report at https://safepassvpn.com/transparency

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data: • Right to access: Request a copy of the personal data we hold about you. • Right to correction: Request that we correct inaccurate or incomplete data. • Right to deletion: Request that we delete your personal data ("right to be forgotten"). • Right to portability: Request your data in a machine-readable format. • Right to object: Object to certain types of processing, including direct marketing. To exercise any of these rights, please contact us at contact@safepassvpn.com. We will respond within 30 days.

Children's Privacy

SafePassVPN is intended for users who are 13 years of age or older. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at contact@safepassvpn.com and we will promptly delete such information.

Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (DPDP Act). Any disputes relating to this policy shall be subject to the exclusive jurisdiction of the courts of India. If you are located in the European Economic Area (EEA), you also have the right to lodge a complaint with your local data protection authority.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date below. We encourage you to review this policy periodically. Your continued use of SafePassVPN after any changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us at:

contact@safepassvpn.com

Your Privacy Matters

Table of Contents