Privacy Policy & Data Safety Disclosures

1. Overview & Commitment

At Unlimited VPN, we believe digital privacy is a fundamental human right. Our Android application is designed around data minimization: we collect only the bare minimum technical data required to validate your active subscription and establish secure WireGuard® encrypted tunnels.

2. Privacy Policy & Data Logging

Unlimited VPN respects your privacy while complying with mandatory regional regulations (such as CERT-In 2022 guidelines). Here is exactly what we log and what we do not:

• No Traffic & Browsing Logs: We do not log destination IP addresses, domain names, websites visited, DNS queries, or app data transferred over the VPN tunnel.
• Connection Metadata Collected: We are required to log your real public IP address, assigned VPN IP, connection timestamps, server location, and bandwidth usage. This session data is securely retained for 180 days.
• Subscriber Information: We record the IP address used during registration and associate it with your subscription. Subscriber records are retained for 5 years after cancellation.

3. Google Play Data Safety Disclosures & Data Collection

In compliance with the Google Play Data Safety Policy, below is the complete breakdown of data processed by the Unlimited VPN Android app:

Data Category	Data Element	Purpose & Usage	Sharing / Storage
Device Identifiers	Anonymous Installation ID (UUID)	Generated locally on first launch to link your premium subscription & subscription state to your device.	Never Shared with 3rd parties
Cryptographic Keys	WireGuard Public Key	Transmitted to backend to register your device on the server peer list and assign an internal VPN virtual IP.	Ephemeral / Volatile Server Memory
Financial & Purchase Data	Google Play Purchase Token	Validated via Google Play Billing API to confirm active subscription or premium subscription entitlement.	Processed securely via Google Play
App Settings	Server Preference & Kill Switch State	Saved locally on your device via encrypted Android DataStore preferences.	Stored 100% locally on device
App Performance	Crash & Error Logs	Basic device info (OS version, model, app version) and error traces collected only when the VPN fails, to help us fix bugs.	Stored securely; never shared with 3rd party trackers

4. Android Permissions Required & Justification

To function seamlessly on Android devices, Unlimited VPN requests the following explicit platform permissions:

• INTERNET: Required to send/receive encrypted WireGuard network packets and check backend API status.
• ACCESS_NETWORK_STATE: Required to detect changes between Wi-Fi and mobile data connections.
• BIND_VPN_SERVICE: Android platform permission allowing the app to configure kernel-level virtual network adapters.
• FOREGROUND_SERVICE & FOREGROUND_SERVICE_SPECIAL_USE (vpn): Required by Android 14+ (API 34) to maintain active VPN protection while the app runs in the background.
• RECEIVE_BOOT_COMPLETED: Required to restore auto-connect VPN protection upon device reboot if enabled in settings.

5. Encryption & Security Architecture

Unlimited VPN uses state-of-the-art WireGuard® protocol cryptography featuring ChaCha20-Poly1305 symmetric encryption, Curve25519 key exchange, and BLAKE2s hashing. Communication with backend control servers is protected using TLS 1.3 and HMAC-SHA256 request authentication.

6. Third-Party Services & Zero Tracking

We rely on trusted infrastructure providers operating under strict security standards. We strictly do NOT embed any third-party advertising, analytics, or behavioral tracking SDKs (such as Firebase Analytics, Google Analytics, or AppsFlyer) into our Android app.

• Google Play Billing (Google LLC): Handles all subscription transactions, premium subscription tracking, and billing processing. No credit card details ever reach Unlimited VPN servers.
• Cloudflare Workers & Supabase: Serverless API layer and database infrastructure used strictly for anonymous device peer registration, crash reporting, and subscription entitlement validation.
• VPNResellers: Our trusted upstream VPN infrastructure provider used dynamically via the backend to fetch available VPN server locations and provision encrypted WireGuard accounts.

7. Data Retention & User Data Deletion Rights

In accordance with Google Play's User Data Deletion policies and our regulatory obligations, data retention is strictly managed by automated database policies:

• Automated Data Expiry: Connection logs (timestamps, IPs, bandwidth) are hard-coded to automatically delete from our database 180 days after the session ends. Subscriber records are automatically deleted 5 years after subscription cancellation to comply with CERT-In 2022 directions.
• Local Data Wiping: You can wipe all local settings, WireGuard keys, and installation identifiers at any time by navigating to Android Settings → Apps → Unlimited VPN → Clear Storage / Data or uninstalling the app.
• Server Data Deletion Request: You may request complete erasure of your anonymous installation ID record and subscription entitlement tokens from our backend database by emailing our team at support@bestvpnproxy.in. Requests are processed within 48 hours.

8. Children's Privacy (COPPA Compliance)

Unlimited VPN does not knowingly collect or solicit personal information from children under 13 years of age. If we learn that we have inadvertently collected data from a child under 13, we will delete that data immediately.

9. Contact Privacy Compliance Officer

If you have questions, feedback, or concerns regarding our privacy practices, please contact our dedicated Privacy Compliance Officer:

📧 Email: support@bestvpnproxy.in
🌐 Website: https://bestvpnproxy.in/