1. Who we are
ZeloVPN, “we”, “our”, and “us” means Nexflare Networks Inc. and the ZeloVPN service it operates. Our guiding principle is to collect only the minimum information needed to run the VPN. The service is designed so that we do not hold a record of what you do online. We cannot hand over information we never stored.
This policy applies to our website at zelovpn.com, the ZeloVPN iOS application, and messages you send to our support address. It does not control how Apple, advertising partners, or other third parties handle information under their own policies.
2. Personal information you choose to give us
You can use the VPN without giving us your name, home address, or phone number. When you open the app, it assigns a unique identifier so we can tell which level of service applies to that install before a connection is established. That identifier is associated with the device, not with your legal name or a billing profile we hold.
Subscriptions are sold as Apple In-App Purchases. Apple processes the payment. We do not receive or store your full payment card number or bank account number. Apple’s privacy policy describes what Apple collects.
If you email us, we receive the information you send: typically your name, email address, the message, and any attachments. We may also see a confirmation when you open an email from us. We use that address to:
- Reply about your service or your message.
- Send service updates and announcements.
- Send occasional product news, if you have not opted out.
You can opt out of marketing emails with the unsubscribe link in those messages. Service messages about a request you made may still be sent. We do not sell your personal information.
3. What we do not log
We do not collect logs of your activity while you use the VPN. In particular, we do not keep:
- Browsing history or the websites you visit
- Traffic destination, data content, or DNS queries
- Your source IP address
- The outgoing VPN IP address assigned to you
- The timestamp of a connection or how long the session lasted
Information about your online activity that passes through our servers is encrypted in transit and is not retained after the VPN session ends. We do not know which user opened a particular site, which user was connected at a specific time, or the original IP address of a user’s device. If we are asked for that information, we cannot provide it, because we do not have it.
4. Service information we do collect
To operate the network and answer support questions, we collect a narrow set of service data:
- App and version. Which app build you are using, so support can reproduce a problem.
- Connection outcome. Whether a connection succeeded on a given day — not the time of day — which VPN location you selected, and the country or ISP you connected from. We do not store your source IP or the outgoing VPN IP.
- Volume. The total amount of data transferred, in megabytes, not the sites or content that made up that traffic. The service is offered without a data cap. If a single install moves so much traffic that it crowds out others, we may contact that user about it.
- Anonymous diagnostics. With the diagnostics available on your device, we may receive failed connection attempts, speed-test results, and crash reports that are not tied to your identity. On iOS, Apple’s crash reporting can be turned off in Settings. These reports help us find problems with a server, an app version, or an ISP. They are not a record of what you browsed.
Many people share the same location on the same day. The aggregates above are not enough to reconstruct one person’s browsing. The App Store privacy label for ZeloVPN describes device identifiers and performance data as data that is not linked to your identity. That matches the practice above.
5. How we use information
We use the information we do collect to:
- Provide, operate, and maintain the VPN and this website
- Check the service level of an install before connecting
- Diagnose outages, crashes, and connection failures
- Improve speed, reliability, and the apps
- Respond to you and send the messages described in this policy
- Process subscriptions through Apple
- Detect abuse and fraud, and enforce our terms
- Meet applicable law, tax, accounting, or valid legal process
6. How we share information
We share information only in these cases:
- Vendors. Providers who host infrastructure, deliver email, or help us operate the service, and only for that work.
- Aggregated or de-identified data. Statistics that cannot reasonably identify you.
- Diagnostics partners. Crash and performance reports as described above, in anonymized form.
- Advertising partners. Only as described in the advertising section, and not your browsing activity.
- A business transfer. If Nexflare Networks Inc. is involved in a merger, financing, sale of assets, or similar transaction, information may transfer as a business asset. The same limits in this policy continue to apply.
- Legal process. To comply with a law that applies to us, to protect users and the service from fraud or abuse, or to respond to you. See the jurisdiction section for how requests from authorities are handled.
- With your consent. Where you ask us to share something specific.
7. Advertising
Premium subscriptions are not an advertising product. The free version of the app may show ads through third-party partners, including Google AdMob. We do not build those ads from your browsing history, and we do not give advertisers your name or a record of the sites you visit.
Advertising partners can collect device identifiers under their own technologies and policies, including across other apps, as described by those partners. You can read Google’s policy at policies.google.com/privacy.
8. Jurisdiction and applicable law
Nexflare Networks Inc. operates ZeloVPN in Canada. We handle personal information under this policy and under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), together with other Canadian privacy laws that apply. An overview is published by the Office of the Privacy Commissioner of Canada.
We disclose account information only when we receive a valid demand that is enforceable in Canada, such as a court order, subpoena, or warrant properly served under Canadian law. A request from outside Canada does not, by itself, require us to turn information over. It has to be recognized through Canadian legal process. Where the law allows, we will tell the affected user before we disclose account information.
Even when a demand is valid, we do not have browsing history, DNS queries, traffic content, source IP addresses, or connection timestamps that would identify what a specific person did online.
9. Data retention
We keep personal information only while we have a current need: to provide a service you asked for, to correspond with you, or to meet a legal, tax, or accounting duty. When that need ends, we delete or anonymize the information. If a copy sits in a backup, we isolate it from further use until the backup cycle removes it.
Support correspondence, including the email address you wrote from, is kept so we can follow up on the same issue. Those messages are handled at support@zelovpn.com.
10. Security
We use physical, technical, and organizational safeguards to protect the information we hold, and we limit access to people who need it for their work. Servers sit in data centers with their own security practices. Those centers are not asked to log VPN traffic or to store personal information about your VPN use. If a facility required that logging, we would stop using it.
No method of storage or transmission is perfectly secure. Because activity logs are not created, a copy of a VPN server would not contain a history that ties a person to a site or a session.
11. Third-party services
The app and website can lead you to services we do not operate, including Apple’s App Store and payment screens, and the sites you choose to open through the VPN. Their privacy practices are their own. Read those policies before you give them information.
12. Children’s privacy
ZeloVPN is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child under 16 has sent us personal information, email support@zelovpn.com and we will delete it.
13. Access, correction, and deletion
You can ask what personal information we hold about you, ask for a correction, or ask us to delete it, by emailing support@zelovpn.com. We may need to confirm that the request comes from you before we change or remove information.
We may decline or limit a request where granting it would break a legal duty, interfere with a legal claim, reveal someone else’s information, or disclose confidential business information. Backup copies are removed on the normal backup cycle.
14. European users
If the GDPR applies to you, we process personal information on one of these bases:
- Contract. To provide the VPN you requested, manage a subscription, and answer support requests.
- Legitimate interests. To keep the service reliable, secure, and effective, and to tell customers about the product they use. You can object where the law gives you that right.
- Consent. Where we rely on consent, you can withdraw it at any time. Withdrawal does not undo processing that was already lawful.
You can opt out of marketing at any time with the link in those emails. To access, correct, delete, export, or object to processing, contact support@zelovpn.com. You may also lodge a complaint with your local supervisory authority.
15. International transfers
Nexflare Networks Inc. operates from Canada, and the VPN network is global. Information we hold may be processed in Canada or in another country where a vendor or server is located. Those countries may not have the same privacy law as your own. When we transfer personal information, we protect it as described in this policy.
16. Changes to this policy
We may update this policy as the product or the law changes. The new version will be posted on zelovpn.com, and the date at the top will change. If we materially change how we use personal information already collected, we will give notice in the app or by email. Continuing to use ZeloVPN after an update means you accept the revised policy.
17. Contact
Questions about this policy, or a request to access or delete personal information, can be sent to our privacy contact:
Nexflare Networks Inc.
Canada
support@zelovpn.com
zelovpn.com