Privacy Policy

Effective date: 2026-08-17

This Privacy Policy explains how Securqbit LLC (“Securqbit”, “we”, “us”) collects and uses information when you use our websites, applications, and VPN services (“Services”).

We aim to collect as little data as possible and to be clear about what we do collect.

Our no-log commitment is specific, and we would rather state it plainly than let it be read as more than it is: we do not log your VPN traffic, your DNS queries, or the sites you visit. That is not the same as collecting nothing. To run accounts, fix crashes, and support advertising in the mobile app, a limited amount of data is processed — and this policy sets out exactly what.

1. Data Controller

Securqbit LLC is a company established in the United States and acts as the data controller responsible for personal data processed in connection with the Services. You can reach us regarding any privacy matter at [email protected].

2. Information We Collect

2.1 Information you provide

  • Account information (such as email) if you create an account
  • Support communications you send us

2.2 Information collected to operate the service

We may collect limited operational data needed to:

  • maintain service stability and prevent abuse
  • troubleshoot reliability issues
  • secure our systems

Examples may include:

  • service errors and diagnostic data from the app
  • high-level service events (e.g., connection success/failure counts)

We do not collect browsing history or traffic contents.

2.3 Crash reporting and analytics

The mobile app includes Firebase Crashlytics and Google Analytics for Firebase, both provided by Google, for two narrow purposes:

  • Crash and stability reporting (Firebase Crashlytics) — when the app crashes or hits an error, it sends a technical report so we can fix the problem. A report can include the stack trace, your device model, operating system and app version, device language and settings relevant to the fault, the app’s recent internal state, and an installation identifier generated by Crashlytics. Crash reports are collected automatically while the app is installed.
  • In-app purchase analytics — aggregate measurement of subscription and purchase events so we can understand which plans are used and keep billing working.

Crash reports and analytics events are technical and aggregate in nature. They never contain your VPN traffic, browsing history, DNS queries, or the contents of anything you transmit through the tunnel. We do not use crash or purchase analytics to build advertising profiles.

2.4 Advertising

Parts of the mobile app are supported by advertising served through Google AdMob. Advertising applies to the app only — there are no ads and no advertising trackers on this website.

To serve, cap, measure, and protect ads against fraud, the AdMob SDK and Google may process:

  • your device’s advertising identifier (the Android Advertising ID or, on Apple platforms, the IDFA, where you have permitted its use)
  • the IP address your device presents to Google’s ad servers, and coarse location derived from it
  • device and app information such as model, operating system version, app version, and language
  • ad interaction data, such as which ads were shown, viewed, or tapped

Advertising never has access to the VPN tunnel. The ad SDK does not receive your VPN traffic, the sites you visit, your DNS queries, or the contents of anything you transmit, and we do not supply it with your account email or billing data.

For advertising, Google acts as an independent controller in its own right for some of this processing. Google’s handling of ad data is described in its privacy and terms and advertising notices.

Your choices about ads. In the European Economic Area, the United Kingdom, and Switzerland, the app asks for your consent before showing personalized ads and lets you change or withdraw that choice later from within the app. On Apple platforms, personalized advertising also depends on the App Tracking Transparency permission, which you can grant or refuse when prompted and change at any time in your device settings. You can additionally reset or delete your advertising identifier in your device settings. Declining or withdrawing consent does not remove advertising from ad-supported parts of the app — the ads shown become non-personalized instead.

3. What We Do NOT Collect

Whatever else this policy describes, the following are never logged, and this holds for all of the third-party services named above:

  • websites, URLs, or domains you visit
  • DNS queries tied to you or your device
  • traffic contents
  • messages, files, or content you transmit

Because we do not create these records, we cannot produce them — to a buyer, a partner, or an authority.

4. How We Use Information

We use information to:

  • provide and maintain the Services
  • improve performance and reliability
  • respond to support requests
  • protect against abuse and attacks

5. Legal Bases for Processing (GDPR)

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process personal data under the following legal bases in the General Data Protection Regulation (GDPR):

  • Performance of a contract (Art. 6(1)(b)) — to provide the Services you request, manage your account, and process subscriptions and purchases.
  • Legitimate interests (Art. 6(1)(f)) — to keep the Services stable, secure, and reliable; to prevent abuse; and for the crash reporting and aggregate in-app purchase analytics described in Section 2.3. We balance these interests against your rights and use only aggregate or technical data for this purpose.
  • Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information to comply with the law.
  • Consent (Art. 6(1)(a)) — for personalized advertising and for reading or storing information on your device where the law requires consent, as described in Section 2.4, and anywhere else we specifically ask for it. You may withdraw consent at any time, and withdrawal does not affect processing carried out before you withdrew.

6. Sharing of Information

We do not sell personal data, and we never share VPN activity data, because we do not have any.

We may share information:

  • with service providers (processors) that help us run the Services — for example infrastructure hosting, and Google for the crash reporting and analytics described in Section 2.3 — under confidentiality and data-protection obligations
  • with Google, as an advertising partner, for the ad serving and measurement described in Section 2.4
  • if required by law, or to protect rights, safety, and security

Some United States state privacy laws define “sharing” or “selling” broadly enough to cover the use of advertising identifiers for cross-context behavioral advertising. Where that applies, you can opt out by refusing or withdrawing advertising consent in the app, refusing the App Tracking Transparency prompt on Apple platforms, or enabling the opt-out setting for your advertising identifier in your device settings.

7. International Data Transfers

Securqbit LLC is based in the United States, and some of our service providers (including Google) process data in the United States and other countries. When we transfer personal data of individuals in the EEA, the United Kingdom, or Switzerland outside those regions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.

8. Data Retention

We retain information only as long as necessary for the purposes above, then delete or anonymize it where feasible. Aggregate analytics and crash data are retained only for as long as needed to understand product usage and fix reliability issues. Crash reports and advertising data held by Google are retained under Google’s own retention schedules for those products.

9. Your Rights

9.1 EEA, United Kingdom, and Switzerland (GDPR)

If you are in the EEA, the United Kingdom, or Switzerland, you have the following rights regarding your personal data:

  • the right to access the personal data we hold about you
  • the right to rectification of inaccurate or incomplete data
  • the right to erasure (“right to be forgotten”)
  • the right to restrict processing
  • the right to data portability
  • the right to object to processing based on legitimate interests
  • the right to withdraw consent at any time, where processing is based on consent

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law. Exercising your rights is free of charge and will not lead to any disadvantage.

You also have the right to lodge a complaint with your local data protection supervisory authority if you believe your data has been handled unlawfully.

9.2 United States state privacy rights

Residents of US states with comprehensive privacy laws (such as California, Colorado, Connecticut, Texas, and Virginia) may have the right to know what personal information we process, to request its deletion or correction, and to opt out of targeted advertising and of the “sale” or “sharing” of personal information as those laws define it. The advertising opt-outs described in Section 6 are the fastest route; you may also contact us at [email protected]. We will not discriminate against you for exercising these rights.

10. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Security

We use reasonable technical and organizational measures to protect information. No system is 100% secure, but we design our infrastructure with security as a priority.

12. Children’s Privacy

The Services are not directed to children under the age required by law in your jurisdiction, and we do not knowingly collect personal data from them. We do not knowingly serve personalized advertising to children.

13. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the effective date above.

14. Contact

Privacy questions and data requests: [email protected]