Effective date: 2026-07-11

  Contact: igorvorogushin1@gmail.com

  Pump VPN ("the app", "we") is a network client for the VLESS protocol (and VMess, Trojan, Shadowsocks). We respect

  your privacy. This document explains what data the app processes and how.

  Summary

  - There are no accounts and no registration. You supply your own server configuration (key).

  - We do not collect, store or transmit your traffic, browsing history or personal data to any server operated by the

  developer.

  - Everything the app creates (server configs, statistics, logs, settings) is stored locally on your device.

  What data the app processes

  Stored locally on your device (not sent to us):

  - Server configurations. They contain connection credentials. When a PIN is set, they are encrypted (AES-GCM; the key

  is derived from the PIN via PBKDF2 with a salt; the PIN itself is never stored). This data never leaves the device.

  - Per-server traffic statistics (bytes downloaded/uploaded).

  - Connection log (start/stop/error events).

  - App settings (language, theme, DNS, split tunneling, etc.).

  This data is excluded from Android cloud backup and from device-to-device transfer.

  Outbound network requests:

  - Server geolocation and latency. To show a country flag and ping, the app queries the third-party service ip-api.com,

  sending it the IP address of your server. See ip-api.com's own policy. No personal user data is sent.

  - Connection traffic. It goes through the server that you configured yourself. The developer does not operate that

  server and does not log or inspect your traffic.

  Permissions and why they are used

  - VPN (VpnService) — creates the network tunnel (core function).

  - Camera — scanning a server key from a QR code. Images are not saved or transmitted anywhere.

  - Notifications (POST_NOTIFICATIONS) — showing connection status.

  - Foreground service — keeping the tunnel running in the background.

  - Ignore battery optimizations — with your consent, for reliable background auto-reconnect.

  Sharing with third parties

  We do not sell or share your data with third parties. The app contains no ads, no analytics and no trackers. The only

  outbound call is to ip-api.com for geolocation/latency.

  Children

  The app is not directed at children and does not knowingly collect data about children.

  Data deletion

  All data is stored on your device. You can erase it in the app ("Erase all data" / three wrong PIN attempts) or by

  uninstalling the app.

  Changes

  We may update this policy. The current version is always available at this page, with an updated effective date.

  Contact

  For privacy questions: igorvorogushin1@gmail.com