PRIVACY POLICY

Effective Date: January 1, 2026
Last Updated: September 30, 2026

BanglaTach operates this VPN mobile application.

This Privacy Policy explains how BanglaTach collects, uses, processes, shares, retains, and protects information when you use our Service.

This Privacy Policy is intended to address applicable requirements under the Google Play Developer Program Policies and, where applicable, the GDPR, CCPA/CPRA, VCDPA, and LGPD.

By using our Service, you acknowledge the practices described in this Privacy Policy.

1. Data Controller Information

Data Controller: BanglaTach

Email: arifullislamluck2@gmail.com

For privacy-related questions, requests, complaints, data access, correction, deletion, or opt-out requests, you can contact us at the email address above.

Data Protection Officer / Privacy Contact

Data Protection Officer (DPO): BanglaTach Privacy Team

Email: arifullislamluck2@gmail.com

The BanglaTach Privacy Team handles privacy inquiries and requests relating to personal data processing.

2. Use of Android VpnService

Our application provides VPN services as its core functionality and uses the Android VpnService API to establish a VPN tunnel between the user's device and our VPN server.

The VPN connection is used to provide the requested VPN functionality, such as connecting users to available VPN servers.

Our VpnService practices

• Data transmitted between the device and the VPN tunnel endpoint is encrypted using the VPN protocol and applicable security mechanisms.

• We do not use VpnService to collect or inspect users' browsing history.

• We do not intentionally record the websites users visit.

• We do not inspect the content of users' communications transmitted through the VPN tunnel.

• We do not use VpnService to inject advertisements into websites or applications.

• We do not redirect or manipulate traffic from other applications for advertising or monetization purposes.

• We use the VPN connection only to provide the core VPN functionality of the application.

Google Play requires VPN applications using VpnService to document the VPN functionality and encrypt data between the device and VPN tunnel endpoint.

3. Information We Collect

We collect and process only information that is reasonably necessary to provide, maintain, secure, analyze, and improve our Service, operate subscriptions, and display advertisements.

The information may include the following categories.

A. Device and Advertising Identifiers

Depending on the user's device, operating system, and third-party SDK configuration, we may process:

• Advertising ID / Google Advertising ID

• Device or other identifiers

• Firebase Installation ID

• App instance identifiers

• IP address

• Device model

• Operating system version

• App version

These identifiers may be processed by our service providers for advertising, analytics, diagnostics, security, and application functionality.

B. App Usage and Technical Information

We may collect or receive:

• App interaction information

• Session information

• VPN connection status

• Connection duration

• Selected VPN server

• App version

• Crash reports

• Diagnostics

• Performance information

• Error information

• Technical logs required to maintain service reliability

We do not intentionally collect or store users' VPN browsing history.

C. IP Address

Your IP address may be temporarily processed when:

• Establishing a VPN connection

• Maintaining a VPN session

• Detecting technical or security issues

• Preventing abuse or fraud

• Providing server connectivity

We do not intentionally use your IP address to create a browsing-history profile.

D. Approximate Location

Approximate location may be derived from an IP address by us or our third-party service providers for purposes such as:

• Server optimization

• Service availability

• Security

• Analytics

• Advertising, where applicable and permitted

We do not intentionally collect precise GPS location through the VPN functionality.

If a future version of the application requests precise location permission, the application will request the applicable Android permission and provide the relevant disclosure.

4. Subscription and Purchase Information

If you purchase a subscription through Google Play, Google Play processes the payment transaction.

We may receive information necessary to determine subscription status, such as:

• Subscription status

• Product/subscription identifier

• Purchase or transaction identifier

• Purchase date

• Renewal or expiration information

• Subscription-related status information

We do not receive or store your full credit card, debit card, or bank account number through the Google Play billing system.

Payment information is processed by Google Play according to Google's applicable policies and terms.

5. Information We Do NOT Collect

We do not intentionally collect or store:

• VPN browsing history

• Websites visited through the VPN

• DNS browsing history for profiling purposes

• Content of websites accessed through the VPN

• Messages transmitted through the VPN

• Passwords

• Credit/debit card numbers

• Bank account numbers

• Government identification numbers

• Biometric information

• Health information

• Religious beliefs

• Political beliefs

• Sexual orientation

• Personal communications transmitted through the VPN

We also do not intentionally inspect or store the content of users' VPN traffic.

6. How We Use Information

We may use information for the following purposes:

Service Operation

• Establish and maintain VPN connections

• Provide VPN server connectivity

• Diagnose connection problems

• Improve service reliability

• Maintain application functionality

Security and Fraud Prevention

• Detect abuse

• Prevent fraudulent activity

• Protect our infrastructure

• Investigate security incidents

• Prevent unauthorized use

Analytics and Performance

• Understand application performance

• Diagnose crashes

• Identify technical problems

• Improve application stability

• Analyze general usage patterns

Advertising

• Display advertisements within the application

• Measure advertising performance

• Support advertising delivery

• Manage advertising-related identifiers and preferences where applicable

Subscription Management

• Verify subscription status

• Process subscription-related functionality

• Enable premium features after a valid purchase

• Detect subscription expiration or renewal

7. Advertising and Third-Party Services

BanglaTach may use third-party services and SDKs to provide advertising, mediation, analytics, diagnostics, notifications, and application functionality.

Depending on the version and configuration of the application, these services may include:

• Google AdMob

• Google Firebase

• TopOn Mediation

• Meta/Facebook advertising services

• OneSignal, where enabled

These providers may process information such as:

• Advertising identifiers

• Device or other identifiers

• IP address

• Device information

• App information

• App interaction information

• Approximate location

• Diagnostics and performance information

The exact information processed by each provider may depend on the SDK version, configuration, user's device settings, applicable law, and the provider's own privacy practices.

We do not authorize third-party advertising providers to use our VPN service to inject advertisements into websites or manipulate VPN traffic.

8. Data Sharing

We do not sell your personal data for monetary consideration.

However, certain information may be shared with or made available to third-party service providers when necessary to provide our Service.

These parties may include:

Advertising and Advertising Mediation Providers

Advertising providers and mediation platforms may process advertising identifiers, device information, IP address, app information, and related advertising or measurement information.

Analytics and Crash Reporting Providers

Analytics and diagnostic providers may process application usage information, device information, crash reports, and performance information.

Cloud and Infrastructure Providers

Infrastructure or hosting providers may process technical information required to operate VPN servers and application infrastructure.

Payment and Subscription Providers

Google Play may process subscription and purchase information necessary to provide in-app subscriptions.

Security and Fraud Prevention Providers

Service providers may process technical information when necessary to protect the Service against fraud, abuse, attacks, or other security threats.

Legal and Regulatory Authorities

We may disclose information when reasonably necessary to:

• Comply with applicable law

• Respond to valid legal processes

• Protect our rights

• Protect users

• Investigate fraud or security incidents

• Comply with regulatory requirements

9. Your Right to Know About Data Sharing

Depending on your jurisdiction, you may have the right to know:

• What categories of personal information we collect

• What categories of personal information we share

• The purposes for which information is processed

• The categories of third parties that receive or process information

• The categories of personal information disclosed to those third parties

• The retention period or criteria used to determine retention

• Whether information is sold or shared for targeted advertising

To request this information, email:

arifullislamluck2@gmail.com

Subject: Data Sharing Request

We will review and respond to valid requests in accordance with applicable law.

10. Sale and Sharing of Personal Information

We do not sell personal information for monetary consideration.

However, under certain privacy laws, including the California CCPA/CPRA, certain disclosures of personal information to advertising or analytics providers for cross-context behavioral advertising or targeted advertising may be considered “sharing” even when no money is paid directly for the personal information.

Where applicable, you may request to opt out of the sale or sharing of your personal information.

11. How to Opt Out of Targeted Advertising or Data Sharing

You may take the following steps to limit personalized advertising:

Android Advertising Settings

You can review or change your Android advertising/privacy settings and limit advertising personalization through the settings available on your device.

The exact settings and names may vary depending on your Android version and device manufacturer.

Privacy Request

You may also send us an opt-out request:

Email: arifullislamluck2@gmail.com

Subject: Do Not Sell or Share My Personal Information

Please include:

• Your request

• The name of the application

• Any information reasonably necessary for us to identify and process your request

We will process valid opt-out requests as required by applicable law.

Opting out of targeted advertising does not necessarily mean that you will stop seeing advertisements. You may continue to receive contextual or non-personalized advertisements.

12. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Our general retention practices are:

VPN Connection Information

Temporary technical information required to establish or maintain a VPN connection is retained only for the period reasonably necessary to provide and secure the VPN service.

We do not intentionally retain users' VPN browsing history.

Advertising and Device Identifiers

Advertising and device identifiers may be processed for advertising, analytics, fraud prevention, and application functionality according to the applicable third-party provider's retention policies and the user's applicable privacy choices.

Analytics Data

Analytics information may be retained for a limited period necessary to analyze application usage, improve functionality, and maintain service performance.

Crash and Diagnostic Data

Crash reports and diagnostic information may be retained for as long as reasonably necessary to identify, investigate, and resolve technical problems.

Subscription Information

Subscription-related information may be retained for as long as necessary to provide subscription functionality, maintain financial/accounting records, resolve disputes, prevent fraud, and comply with applicable legal requirements.

Legal or Security Retention

Certain information may be retained for a longer period when reasonably necessary for:

• Fraud prevention

• Security investigations

• Dispute resolution

• Legal obligations

• Regulatory requirements

• Enforcement of agreements

When information is no longer reasonably necessary, we will delete, anonymize, or de-identify it where reasonably practicable.

13. Legal Basis for Processing

Where the GDPR or another applicable privacy law requires a legal basis for processing, we rely on one or more of the following legal bases:

Performance of a Contract

We process information when necessary to provide the VPN service requested by the user, including establishing VPN connections and providing subscription features.

Consent

Where legally required, we rely on user consent for activities such as certain personalized advertising, optional analytics, or other processing that requires consent.

Users may withdraw consent where applicable.

Legitimate Interests

We may process information when reasonably necessary for our legitimate interests, including:

• Maintaining and improving the Service

• Preventing fraud and abuse

• Protecting network and application security

• Diagnosing technical problems

• Protecting our legal rights

We consider the rights and interests of users when relying on legitimate interests.

Legal Obligations

We may process or retain information when necessary to comply with applicable laws, regulations, court orders, or other valid legal requirements.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights including:

• Right to access your personal information

• Right to know how your information is collected, used, and shared

• Right to correction/rectification of inaccurate information

• Right to deletion/erasure of personal information

• Right to data portability

• Right to restrict processing

• Right to object to certain processing

• Right to withdraw consent

• Right to opt out of targeted advertising

• Right to opt out of the sale or sharing of personal information where applicable

• Right to lodge a complaint with a relevant supervisory authority

These rights are subject to applicable legal limitations and exceptions.

15. How to Exercise Your Privacy Rights

To exercise your rights, contact:

BanglaTach Privacy Team

Email: arifullislamluck2@gmail.com

Subject: Privacy Request

You may request:

• Access to your data

• Correction of your data

• Deletion of your data

• Information about data sharing

• Information about data retention

• Withdrawal of consent

• Opt-out from targeted advertising

• Opt-out from sale/sharing where applicable

We may request reasonable information necessary to verify the request and protect against unauthorized access to personal information.

We will respond to valid requests within the period required by applicable law.

16. Regional Privacy Rights

California — CCPA/CPRA

California residents may have the right to:

• Know what personal information is collected

• Know the purposes for collection

• Know the categories of third parties with whom information is shared

• Request access to personal information

• Request deletion

• Request correction

• Opt out of sale or sharing of personal information

• Limit certain uses of sensitive personal information where applicable

• Not receive discriminatory treatment for exercising applicable privacy rights

We do not sell personal information for monetary consideration.

However, certain disclosures for targeted advertising may constitute “sharing” under California law. California residents may submit an opt-out request using the contact information in Section 15.

Virginia — VCDPA

Virginia residents may have rights, subject to applicable exceptions, including:

• Access

• Correction

• Deletion

• Data portability

• Opt-out of targeted advertising

• Opt-out of the sale of personal data

• Opt-out of certain profiling

Requests can be submitted using:

arifullislamluck2@gmail.com

European Economic Area — GDPR

Where the GDPR applies, users may have the right to:

• Access personal data

• Correct inaccurate personal data

• Request deletion

• Restrict processing

• Object to processing

• Receive portable data

• Withdraw consent

• Lodge a complaint with a supervisory authority

The legal bases we use for processing are described in Section 13.

Brazil — LGPD

Where LGPD applies, users may have rights including:

• Confirmation of processing

• Access to personal data

• Correction

• Anonymization, blocking, or deletion where applicable

• Data portability where applicable

• Information about public and private entities with which data is shared

• Revocation of consent

• Review of certain automated processing decisions where applicable

Requests may be submitted using:

arifullislamluck2@gmail.com

17. Data Protection Officer / Privacy Contact

For privacy and data protection matters, our designated privacy contact is:

BanglaTach Privacy Team

Email: arifullislamluck2@gmail.com

The privacy contact can assist with:

• Data access requests

• Data deletion requests

• Data correction requests

• Data sharing inquiries

• Data retention inquiries

• GDPR-related requests

• CCPA/CPRA requests

• VCDPA requests

• LGPD requests

• Privacy complaints

18. Children's Privacy

Our Service is not directed to children under the minimum age required by applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If we learn that we have collected personal information from a child where such collection is not permitted, we will take reasonable steps to delete the information.

Parents or legal guardians who believe that a child has provided personal information may contact us at:

arifullislamluck2@gmail.com

19. Security

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction.

VPN traffic between the user's device and the VPN tunnel endpoint is encrypted using the applicable VPN protocol and security mechanisms.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

20. International Data Transfers

Depending on the location of our service providers, your information may be processed or stored in countries other than your country of residence.

Where applicable, we take reasonable steps to ensure that international transfers of personal information are handled in accordance with applicable privacy laws and appropriate safeguards.

21. Third-Party Privacy Policies

Third-party providers used by the Service may have their own privacy policies and data practices.

Users should review the applicable policies of third-party providers, including where relevant:

• Google

• Google AdMob

• Google Firebase

• TopOn

• Meta

• OneSignal

Their processing of information may be governed by their own privacy policies and terms.

22. Account Deletion and Data Deletion Requests

BanglaTach does not require users to create a traditional account to use the core VPN functionality.

If an account creation feature is introduced in a future version, users will be provided with an appropriate account deletion mechanism as required by applicable Google Play policies and applicable law.

Users may also contact us to request deletion of personal information that we hold, subject to applicable legal and security exceptions.

Google Play's current account-deletion requirements apply specifically where an app enables users to create accounts and require an appropriate deletion pathway.

23. VPN Traffic and Browsing Privacy

BanglaTach provides VPN connectivity but does not intentionally:

• Record websites visited by users

• Store browsing histories

• Inspect the contents of websites accessed through the VPN

• Sell browsing histories

• Inject advertisements into websites

• Modify advertising traffic from other applications for monetization

• Create browsing profiles based on users' VPN traffic

Technical information may still be processed when necessary to establish connections, maintain network security, prevent abuse, or diagnose technical problems.

24. Limitation of Liability

We strive to provide a reliable VPN service, but we do not guarantee that the Service will always be uninterrupted, error-free, or available.

Users are responsible for complying with the laws and regulations applicable to them when using a VPN service.

25. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our Service

• Changes to our data practices

• Changes to third-party services

• Changes to applicable laws

• Changes to Google Play requirements

When we make material changes, we will update the “Last Updated” date at the top of this Privacy Policy.

Your continued use of the Service after an updated Privacy Policy becomes effective means that you acknowledge the updated policy.

26. Contact Us

For any questions, privacy requests, data access requests, deletion requests, correction requests, data sharing inquiries, or opt-out requests, contact:

Data Controller: BanglaTach
Data Protection Officer / Privacy Contact: BanglaTach Privacy Team
Email: arifullislamluck2@gmail.com