QuikoopVPNPrivacy Policy
This policy explains what information QuikoopVPN collects, why, who it is shared with, how long it is kept, and the choices you have. It applies to the QuikoopVPN apps for iPhone, iPad, Mac, Android and Windows, the QuikoopVPN service and this website.
In this policy, "QuikoopVPN", "we" and "us" refer to the operator of the service. If you have any question about this policy or your data, email [email protected].
The short version
- We do not log the websites you visit, the apps you use, your DNS queries or the content of your traffic.
- We keep only what we need to run your account: your email address, your devices, how much data each device uses per hour, the IP address and country each device last connected from, and your purchases.
- We do not show ads, we do not use advertising or analytics trackers, and we do not sell your data.
- You can delete your account at any time in the app.
Information we collect
Account
- Your email address and a password. We store only a salted hash of your password, never the password itself.
- When you reset your password, a one-time code is sent to your email. We store only a hash of the code; it expires after a short time.
Devices
- The name of each device you sign in on (for example "iPhone" or the name you gave your computer), its platform (iOS, macOS, Android or Windows) and when it was added. You can see and remove your devices in the app.
- Connection credentials that we create for each device so it can use our servers.
Free trial protection
To make sure each person and each device gets the free trial only once, we check whether your device or email address has already been used for a trial. For this we keep a one-way hash of a device identifier, which cannot be turned back into the identifier itself. On iPhone and iPad, Apple's DeviceCheck service keeps a "trial used" mark for us instead.
Usage
- How much data each device uploads and downloads, totalled per hour and per server. We use this to run the 1 GB free trial, to plan server capacity and to spot abuse. We do not record what the data was or where it went.
- For each device, the IP address it last connected to our servers from, the country we look up from that address, the time, and the server it used. Each new connection overwrites the previous one, so we do not keep a history. We use this for security (for example spotting an account being shared or stolen) and to help when you contact support. The country is looked up on our own server using an offline database; your IP address is not sent to a third party for this.
Purchases
- What you bought (pass or subscription), when, when it ends, the store transaction ID, whether it was refunded, and whether it was a test purchase. We never receive your card number or other payment details.
When you contact us
- If you email us, we keep the email and anything you choose to include, so we can help you.
What we do not collect
- Browsing history, website addresses, DNS queries, or the content of your traffic.
- Your contacts, photos, precise location or advertising identifiers.
How the apps and our servers handle your traffic
When QuikoopVPN is on, traffic to websites and apps outside mainland China is encrypted and sent through one of our servers. Traffic to websites and apps in mainland China connects directly and does not pass through our servers. Our servers forward your traffic to its destination without inspecting or recording it. Our servers record connection errors and warnings for troubleshooting, without the websites you visit.
The home screen map in the app shows your approximate location by asking ipinfo.io where the current IP address is. When QuikoopVPN is connected this is the location of our server; when it is not, it is the approximate location of your own internet connection. This request goes straight from your device to ipinfo.io, and we do not receive or store the result.
How we use information
- To create and secure your account, sign you in and let you reset your password.
- To connect your devices to our servers and enforce device limits.
- To run the free trial and check what you have paid for.
- To keep the service working: capacity planning, troubleshooting and preventing fraud and abuse.
- To answer your questions and send emails you ask for, such as password reset codes. We do not send marketing emails.
Service providers we use
We share information only with companies that help us run the service, and only what they need:
- Apple — App Store purchases on iPhone, iPad and Mac, and DeviceCheck (see above).
- RevenueCat — manages App Store purchases and web purchases. It receives your QuikoopVPN account number, your purchase history and technical information such as your IP address. For web purchases it also receives your email address, to send your receipt.
- Stripe — processes card, Apple Pay and Google Pay payments made on the web (Android and Windows). Your payment details go directly to Stripe; we never see them.
- ipinfo.io — shows the location on the app's map, as described above.
- Cloud hosting providers — host our servers and database.
- Network and security providers — deliver and protect connections to our website and app servers, and carry one of our connection methods. They process IP addresses and technical request information.
- Email providers — send our emails, such as password reset codes, and host our support mailbox. They process your email address and the content of the emails.
If you would like to know which providers we currently use, email us and we will tell you.
We may also disclose information if required by law, or to protect our users, the service or others from fraud or harm. Because we do not log your browsing, there is no browsing history we could hand over.
Where your information is stored
Our servers are located in several countries and regions. Our VPN servers are all outside mainland China. Our service providers may process information in other countries, including the United States. When information is transferred abroad we rely on these providers' safeguards for international transfers.
How long we keep it
- Your account, devices, hourly usage totals and purchase records are kept until you delete your account. Devices you remove can no longer connect, but stay in your account's records, marked as removed, until then.
- The last-connection IP address is overwritten each time the device connects, and deleted with your account.
- Password reset codes expire after a short time.
- When you delete your account, we delete your account, devices, usage and purchase records from our database right away, and ask RevenueCat to delete your purchase records. Copies in our database backups are removed within 14 days.
- Some things are kept after you delete your account: the hashed device identifier used for trial protection (it cannot be linked back to you once your account is gone), the DeviceCheck flag stored by Apple, records that Apple, Stripe or RevenueCat must keep under their own policies or the law, and emails you sent to support (ask us if you want them deleted).
Your choices and rights
- See and remove devices in the app under Account → Devices.
- Delete your account in the app under Account → Delete Account. If you subscribed through the App Store, also cancel the subscription in your Apple account settings; deleting your QuikoopVPN account does not cancel it.
- Access or correct your information, or ask any question about it, by emailing [email protected]. We will reply within 30 days.
- If you are not satisfied with our answer, you can complain to your local data protection authority.
Children
QuikoopVPN is not intended for children under 16, and we do not knowingly collect information from them. If you believe a child has given us information, contact us and we will delete it.
Security
Connections between the apps and our servers are encrypted. Passwords and reset codes are stored only as hashes, and access to our servers is restricted. No service is perfectly secure, but we work to protect your information and will tell you if a breach affects you.
Changes to this policy
If we change this policy, we will update the date at the top of this page. If the changes are significant, we will also tell you in the app or by email.