Effective Date: May 1, 2026
HeroShield VPN ("we", "us", "our") operates the HeroShield mobile application (the "App") provided by Aloit. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
We are committed to protecting your privacy. HeroShield VPN is designed to provide secure, private internet access and does not log your online activities in a way that can identify you.
By using the App, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the App.
1. Information We Collect
We collect minimal information necessary to provide, improve, and secure the VPN service.
Categories include:
Information You Provide:
■ Account information via Firebase Google Sign-In: When you sign in with Google, we receive your Google account details (e.g., email address, name, profile picture, and unique user ID) to create/authenticate your account and manage subscriptions.
■ Subscription details: Information related to your active subscription status (processed securely via Google Play Billing).
Information Collected Automatically:
■ Device and usage data: Device model, operating system version, unique device identifiers (e.g., advertising ID if applicable), app version, and usage statistics (e.g., connection attempts, session duration).
■ Connection and network data: Temporary IP address, connection timestamps, and server usage data necessary for establishing and maintaining the VPN tunnel. For a privacy-focused VPN, we do not log your browsing activity, destination IPs, or full traffic content.
■ Firebase-related data: Firebase Authentication and other Firebase services may collect technical data such as IP addresses (for security and abuse prevention), user agent strings, and crash/analytics reports. IP addresses in Firebase Auth are typically retained for only a few weeks.
■ Payment-related data: None — all subscriptions and in-app purchases are handled exclusively by Google Play Billing. We do not collect, store, or access your credit card, billing address, or other payment information.
We do not collect sensitive personal data such as precise location (beyond approximate country for server selection), contacts, messages, or browsing history unless explicitly required for core VPN functionality (and only with your consent).
VPN-Specific Note: When the VPN is active, all your internet traffic routes through our servers. We do not inspect, store, or share the content of your traffic for advertising or unrelated purposes. Any temporary logs (if used for troubleshooting or abuse prevention) are minimized, anonymized where possible, and deleted promptly.
2. How We Use Your Information
We use collected information to:
■ Provide and maintain the VPN service (e.g., authenticate users, route traffic, manage server connections).
■ Process and verify subscriptions.
■ Improve app performance, fix bugs, and enhance security (via Firebase Analytics/Crashlytics if used).
■ Prevent abuse, fraud, or violations of our Terms (e.g., excessive connections).
■ Comply with legal obligations and enforce our Terms & Conditions.
■ Communicate important updates (e.g., service changes) if you have an account. We do not use your data for targeted advertising unless you explicitly opt in (and we declare this accurately in the Data Safety section).
3. Data Sharing and Disclosure
We share data only as necessary:
■ With Google/Firebase: For authentication (Google Sign-In), analytics, crash reporting, and subscription processing. Google processes this data according to its own privacy policy and Firebase terms.
■ Service providers: Trusted third-party infrastructure providers (e.g., VPN server hosting) that help deliver the service. They are contractually bound to protect your data and use it only for the specified purposes.
■ Legal requirements: If required by law, court order, or government request (e.g., in Bangladesh or your jurisdiction).
■ Business transfers: In the event of a merger, acquisition, or sale of assets.
We do not sell your personal data. We do not share identifiable VPN usage data (e.g., browsing activity) with third parties for marketing or unrelated purposes.
Google Play Billing: Subscription payments are processed solely by Google; we receive only confirmation of subscription status.
4. Data Retention
■ Account data (e.g., email from Google Sign-In): Retained as long as your account is active or as needed for legal purposes. You can request deletion (see Section 7).
■ Technical/connection logs: Retained only temporarily (days to weeks) for security, debugging, or abuse prevention, then deleted or anonymized.
■ Firebase data: Follows Google's retention policies (e.g., IP logs for a few weeks in Auth).
■ Subscription records: Kept for billing and compliance as required by law. We retain data no longer than necessary for the purposes outlined.
5. Data Security
We implement reasonable technical and organizational measures to protect your information, including encryption for data in transit (VPN protocols) and at rest where applicable. However, no system is completely secure — use of the App is at your own risk. We cannot guarantee absolute security against all threats.
6. Children's Privacy
The App is not intended for children under 13 (or the minimum age in your country). We do not knowingly collect data from children. If we become aware of such collection, we will delete it promptly. Parents/guardians: Contact us if you believe your child provided data.
7. Your Rights and Choices
Depending on your location (including GDPR, CCPA/CPRA, or Bangladesh data protection laws if applicable), you may have rights to:
■ Access, correct, or delete your personal data.
■ Object to or restrict certain processing.
■ Withdraw consent (where applicable, e.g., for non-essential data). ■ Data portability.
To exercise these rights, contact us at mrjak725@gmail.com. We will respond within a reasonable timeframe. Note: Deleting your account may prevent use of subscription features; Google Sign-In data is managed partly by Google.
You can also manage Google Sign-In preferences directly in your Google account settings.
Opt-out: You may uninstall the App or disable the VPN at any time. For analytics, check Firebase/App settings if available.
8. International Data Transfers
Your data may be processed in countries outside your jurisdiction (including by Google/Firebase servers, which may be in the US or elsewhere). We rely on appropriate safeguards (e.g., Google's Standard Contractual Clauses) for such transfers.
VPN Note: Using the App in countries where VPNs are restricted or prohibited is your responsibility. Comply with local laws.
9. Third-Party Services
The App uses:
■ Firebase (Google) for authentication and potentially analytics/crash reporting.
■ Google Play Billing for subscriptions. ■ VPN infrastructure providers.
These services have their own privacy policies; review them (e.g., Google Privacy Policy and Firebase terms).
10. Changes to This Policy
We may update this Policy. The new effective date will be posted at the top. Significant changes will be notified in-app or via email (if you have an account). Continued use after changes means you accept the updated Policy.
11. Contact Us
For questions, concerns, or data requests regarding this Privacy Policy, contact us at:
mrjak725@gmail.com. We are committed to protecting your privacy while delivering a secure and reliable VPN experience.