Privacy Policy - OnlyTunnel

Last updated: 2026-02-26

Your privacy is fundamental to our service. This policy explains what data we collect, how we use it, and what we do not collect.

1. Our Core Principle

OnlyTunnel is built on a strict no-logs policy. We do not monitor, record, or store your browsing activity, DNS queries, traffic content, or connection timestamps.

2. What We Collect

To provide the service, we collect the following minimal data:

- Account information: email address and encrypted password for authentication.
- Device information: device name, platform, and a hashed device identifier for device management.
- Traffic usage: aggregate download bytes per billing cycle for quota management only. We do not track which websites or services consume this traffic.
- Subscription status: your current plan, billing period, and expiration date.

3. What We Do NOT Collect

- Browsing history or visited URLs
- DNS queries
- Traffic content or packet payloads
- Source IP addresses or connection timestamps
- Any information about the applications you use through the VPN

4. How We Use Your Data

- Account information: to authenticate you and manage your account.
- Device information: to enforce device limits per your subscription tier.
- Traffic usage: to track quota consumption and display usage in the app.
- Subscription status: to determine your service entitlements.

5. Data Storage and Security

Your data is stored on secured servers with encryption at rest. Passwords are hashed using industry-standard algorithms and are never stored in plaintext. We implement appropriate technical measures to protect your data against unauthorized access.

6. Third Parties

- Apple: processes payments through In-App Purchase. Apple's privacy policy governs their handling of payment data.
- We do not sell, rent, or share your personal data with any other third parties.
- We do not use third-party analytics or advertising SDKs.

7. Data Retention

- Account data is retained while your account is active.
- Traffic usage counters reset each billing cycle.
- Upon account deletion, all associated data is permanently removed within 30 days.

8. Children's Privacy

OnlyTunnel is not intended for children under 4. We do not knowingly collect data from children.

9. Your Rights

You may request to:

- Access the personal data we hold about you.
- Correct inaccurate data.
- Delete your account and all associated data.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app. Continued use of the service constitutes acceptance of the updated policy.

11. Contact

If you have questions about this policy, please contact us at auok.top@gmail.com.