Privacy Policy

This Privacy Policy explains how Velochron Network LLC ("Velochron", "we", "us", "our") collects, uses, and protects information when you use the Velochron application and related services (collectively, the "Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication, account recovery, and service communications
• Account credentials — stored in encrypted form; we cannot access your plaintext password

1.2 Device Information

We automatically collect:

• Device identifier — a locally generated, hashed identifier used for device authentication and trial management; not your hardware serial number or advertising ID
• Operating system and version — e.g., "Android 13", "Windows 11", "iOS 18"
• App version — to determine update eligibility and troubleshoot issues

1.3 Usage Data

• Traffic statistics — aggregate upload/download bytes for plan accounting; we do not inspect or log the content of your traffic
• Connection status — connected/disconnected state, selected server node, routing mode
• Basic error codes — connection failures, timeout counts for service reliability monitoring
• Short-term connection metadata — for each outbound flow routed through our VPN servers, we retain in memory only (approximately 5 minutes per user, automatically purged by a ring buffer) the target hostname or IP, destination port, per-flow byte counters, and connection duration. Used exclusively for: (a) routing optimization — identifying popular destinations to improve split-routing heuristics and regional server placement; and (b) abuse detection — identifying and stopping use of the service for DDoS origination, credential stuffing, spam, port scanning, or other activities that violate our Terms of Service. This metadata is never persisted to disk, never combined with account records to build a personal browsing profile, never used for advertising or marketing, and never shared with or sold to third parties.

1.4 Customer Support Data

When you submit a support ticket through the in-app feedback system:

• Your message — the text you write describing your issue
• Device and connection context — automatically attached to help diagnose your issue (OS version, app version, current node, connection state)
• Application logs — recent diagnostic logs (up to 240 entries) are automatically attached; these contain connection events, error messages, and performance metrics but do not contain browsing history, URLs, or personal content

2. Information We Do NOT Collect

We explicitly do not collect, store, or process:

• Long-term browsing history or a persistent record of websites you visit
• DNS query logs (we do not record DNS lookups)
• Contents of your communications (emails, messages, page bodies, etc.)
• Contacts, photos, files, or media on your device
• Precise or coarse location data
• Microphone or camera access
• Activity on other apps or websites (no cross-app tracking)
• Advertising identifiers (IDFA)

Note: short-term server-side connection metadata — including destination hostnames — described in §1.3 is not a "browsing history" in the sense above: it is held in memory only for ~5 minutes per user, never aggregated into a personal profile, never used for advertising, and never shared with third parties. It exists solely to keep routing efficient and to stop abusive traffic.

3. How We Use Your Information

4. Data Sharing and Disclosure

• We do not sell your personal data.
• We do not share data with third-party advertising platforms.
• We do not use your data for ad targeting or profiling.
• We may disclose information only when required by applicable law or to protect the safety and integrity of the Service.

5. Data Storage and Security

• Account credentials are stored using industry-standard encryption.
• Authentication tokens on your device are encrypted before storage.
• Temporary configuration files containing connection parameters are deleted immediately after use.
• We apply reasonable technical and organizational safeguards, but no internet transmission is absolutely secure.

6. Data Retention

• Account data — deleted within 30 days after account cancellation.
• Traffic statistics — retained for the current billing cycle plus up to 90 days, then automatically purged.
• Support tickets — retained for up to 1 year for service quality purposes, then deleted.
• Diagnostic logs — stored only on your device (up to 240 entries); logs attached to support tickets are retained with the ticket.

7. Subscriptions and Payments

• If you subscribe via Apple App Store, payment is processed entirely by Apple. We do not have access to your payment card or billing details.
• Subscriptions auto-renew within 24 hours before the current period ends unless you cancel.
• You can manage or cancel subscriptions at any time in Settings → Apple ID → Subscriptions.
• If you subscribe via our website, payment is processed by our authorized payment provider.

8. Traffic Throttling

When your monthly traffic quota is exhausted, connection speed may be reduced to a lower limit as specified by your plan until the next billing cycle resets your quota. No additional charges are incurred for throttled usage.

9. Children's Privacy

The Service is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.

10. Your Rights

You may:

• Access and update your account information through the app
• Change your password at any time
• Bind or update your recovery email
• Cancel your account and request data deletion
• Submit a data access request by contacting us at [email protected]

11. International Data Transfers

Our servers are located in multiple jurisdictions. By using the Service, you consent to the transfer of your information to servers outside your country of residence. We ensure appropriate safeguards are in place for such transfers.

12. Policy Updates

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].

14. App Origin and Branding

Velochron is developed and operated under the Velochron brand. The iOS application, subscription pages, support flow, Terms of Service, and this Privacy Policy use the same Velochron service identity.