Privacy Policy

HuruVPN ("HuruVPN", "we", "us", or "our") provides a virtual private network (VPN) service and mobile application (the "Service"). Protecting your privacy is the reason this Service exists, and this Policy explains — in plain language — what information we do and do not collect, how we use it, and the choices you have.

1. Information we do NOT collect

• We do not log the websites, services, or apps you access through the VPN.
• We do not store your DNS queries or the content of your network traffic.
• We do not record your original IP address alongside your activity to build a profile of you.
• We do not sell or rent your personal information to third parties.

2. Information we do collect

To operate a reliable, secure Service, we process a limited amount of data:

a. Anonymous device & account data

When you use the app, we create an anonymous device identity so we can issue you a secure VPN configuration. This includes a randomly generated device identifier and a public cryptographic key. No email or personal login is required to use the free tier.

b. Technical session metadata

We keep minimal operational data such as which server a device is provisioned on, aggregate bandwidth counters, and connection timestamps needed to manage capacity, prevent abuse, and troubleshoot. This data is not used to profile your online behavior.

c. Subscription & billing

When you unlock Premium with a coupon, we record which coupon code was activated, on which account, and when, together with the plan it grants and its expiry — this is what lets us verify and enforce your entitlement. If the coupon was issued to an authorized reseller, that reseller can see that the coupon was activated and when (for their sales reporting), but not your identity or activity. Coupons are non-refundable (see the Terms). If you instead purchase Premium through Google Play or the Apple App Store, the transaction is processed by that store and we receive only a purchase token / receipt to activate your entitlement. We do not receive or store your full payment card details.

d. Diagnostics (optional)

If you enable crash reporting in Settings, we may receive anonymized crash and stability information to fix bugs. You can turn this off at any time.

3. Advertising

The current version of the HuruVPN app does not display third-party advertisements and does not collect or use the device advertising identifier (AD_ID). If ad-supported features are introduced in a future release, we will update this Policy and add the required disclosures before enabling them.

4. How we use information

• To provide, maintain, and secure the VPN Service.
• To provision your device with a working, encrypted configuration.
• To manage server capacity and prevent fraud or abuse.
• To verify and activate Premium subscriptions.
• To improve reliability and fix problems (with optional diagnostics).

5. Data sharing

We share data only with service providers who help us operate (for example, app-store billing verification), and only to the extent necessary. We may disclose information if required by valid legal process — but we cannot produce activity logs we do not keep.

6. Data retention

We retain operational metadata only as long as needed for the purposes above, then delete or aggregate it. Anonymous device records may be removed after prolonged inactivity.

7. Security

Your VPN keys are generated on your device and sealed to it. Traffic is protected with WireGuard using Curve25519 key exchange and AES-256-GCM encryption. We apply administrative and technical safeguards to protect the limited data we hold.

8. Your rights

Depending on your location (including under the GDPR and CCPA), you may have the right to access, correct, or delete personal data we hold about you, and to object to certain processing. Because the free tier is anonymous, we may be unable to identify data relating to a specific individual. To make a request, contact us at [email protected].

9. Children

The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

10. International transfers

Our servers operate in multiple countries. By using the Service you understand your connection may be routed through, and limited operational data processed in, regions outside your own.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected here with a new "Last updated" date. Continued use of the Service after changes means you accept the updated Policy.

12. Contact us

Questions about privacy? Email [email protected] or visit our Contact page.