Privacy Policy — VPN Privacy Tool & Dot

Effective date: August 12, 2026

This Privacy Policy describes how Adveaver OÜ, a company registered in Estonia ("Adveaver", "we", "our", or "us"), collects, uses, and shares information in connection with the VPN Dot mobile application (the "App") and the related websites and services (collectively, the "Services").

Our guiding principle is to collect only the minimum data required to operate a reliable VPN service. We do not monitor, record, or store what you do while connected to the VPN.

If you have any questions about this Privacy Policy or your personal data, contact us at adveavercompany@gmail.com.

1. Information We Do NOT Collect

We designed our systems so that sensitive information about your online activity is never stored. When you use the VPN connection, we do not collect or store:

• your browsing history or the websites and services you access;

• traffic destinations or the contents of your traffic;

• DNS queries;

• your original IP address or the VPN IP address assigned to you during a session;

• connection timestamps or session duration tied to your identity.

Traffic passing through our VPN servers is encrypted and is not logged. Because this data is never stored, we cannot disclose it to anyone — we cannot provide information that does not exist.

2. Information We Collect

We collect the following limited categories of data:

Account information. When you create an account, we collect your email address and an encrypted (hashed) password. We use this to authenticate you, sync your subscription across devices, and communicate with you about the Services.

Device and subscription information. The App assigns a unique identifier bound to your device. We use it, together with your account, to determine your subscription level before establishing a VPN connection and to prevent abuse of free-tier limits.

Purchase information. Subscriptions are processed by Apple through the App Store. We do not receive or store your payment card details. We receive subscription status and transaction identifiers (receipts) from Apple to activate and manage your subscription.

Usage and diagnostics data. We use Google Firebase (Analytics and Crashlytics) to collect aggregated app-usage statistics (e.g., which screens are used, app version, device model, OS version, country-level location derived from a coarse signal) and crash reports. This helps us fix bugs and improve the App. This data does not include your VPN browsing activity.

Push notifications. If you allow notifications, we use Firebase Cloud Messaging and store a push token to deliver service messages. You can disable notifications at any time in your device settings.

Support correspondence. If you contact us, we receive the information you choose to provide (such as your name, email address, and the contents of your message) and use it solely to respond to your request.

3. How We Use Information

We use the data described above to:

• provide, maintain, and improve the Services;

• create and manage your account and verify your subscription level;

• process and manage subscriptions purchased through the App Store;

• diagnose crashes and technical issues;

• respond to your support requests;

• protect the Services against fraud and abuse;

• comply with applicable legal obligations.

Legal bases (GDPR). We process your data on the following legal bases: performance of a contract (providing the VPN service and managing your account and subscription), our legitimate interests (service security, fraud prevention, improving the App), your consent (push notifications, optional analytics where required), and compliance with legal obligations.

4. How We Share Information

We do not sell or rent personal data, and we do not share it with third parties for their marketing purposes. We share limited data only with service providers that help us operate the Services:

• Apple Inc. — processes subscription payments through the App Store;

• Google LLC (Firebase) — analytics, crash reporting, and push notification delivery;

• Hosting and infrastructure providers — operate the servers that run the Services.

These providers process data on our behalf under contractual data-protection obligations. We may also disclose information if required by law — however, as described in Section 1, we do not possess records of your VPN activity and therefore cannot disclose them.

5. Data Retention

• Account information is retained while your account is active.

• Subscription records are retained as required for accounting and legal purposes.

• Analytics and crash data are retained by Firebase for a limited period, after which they are aggregated or deleted.

• Support correspondence is retained for up to 24 months.

When you delete your account (see Section 6), your account data is deleted or irreversibly anonymized within 30 days, except where retention is required by law.

6. Account Deletion and Your Rights

Account deletion. You can delete your account at any time directly in the App (Settings → Delete Account). This permanently removes your account data from our systems. You can also request deletion by emailing us at adveavercompany@gmail.com.

Your rights. Subject to applicable law (including the EU General Data Protection Regulation), you have the right to:

• access the personal data we hold about you;

• correct inaccurate data;

• delete your data;

• restrict or object to processing;

• receive your data in a portable format;

• withdraw consent at any time where processing is based on consent;

• lodge a complaint with a supervisory authority. As Adveaver OÜ is established in Estonia, our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee); you may also contact the authority in your country of residence.

To exercise any of these rights, contact us at adveavercompany@gmail.com. We respond within 30 days.

7. International Data Transfers

Our service providers may process data in countries outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and adequacy decisions.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption of VPN traffic, encrypted storage of credentials, and access controls limiting who within our team can access personal data.

9. Children's Privacy

The Services are not directed to children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above. If the changes are material, we will notify you in the App or by email.

11. Contact Us

Adveaver OÜ (Estonia) Email: adveavercompany@gmail.com

We are committed to resolving any privacy concerns you may have.