Privacy Policy

Effective Date: October 8, 2026 · sVPN · Developer: SDEV LLC

Overview

sVPN (listed on the App Store as SDEV VPN) is an iOS VPN app made by SDEV LLC ("we," "our," or "us"). This policy explains what information we collect when you use the app and this website, why we collect it, how long we keep it, and how you can delete it.

The short version: there's no sign-up, we don't record the websites you visit, your DNS queries or your traffic, and the technical logs we do keep are deleted automatically after 7 days.

Information We Collect

Your account (created automatically, no sign-up):

On first launch, the app creates a random device ID and stores it in your device's iOS Keychain. Your account ID (for example, dev_1a2b3c4d) is derived from it.
The app also generates a password for your account. Our server stores your account ID, a bcrypt hash of that password (not the password itself), and when your account was created and last signed in.
For each account, our server generates VPN credentials (a VPN username and password). They're stored on our API server and copied to each VPN server, because the VPN servers need them to let you connect.

Short-lived technical logs:

VPN servers log connection events: your public IP address, the VPN address assigned to you, your VPN username and timestamps. We use these logs only for troubleshooting and security, and they're deleted automatically after 7 days.
Our API server logs the requests the app makes: your account ID, the time of the request, and the app and iOS version (from the app's user agent). Requests reach our API through Cloudflare, so these logs show Cloudflare's addresses, not your IP address. They're deleted automatically after 7 days.

Support emails:

If you contact support from the app, the pre-filled email includes your device model, iOS version, account ID, subscription status, app version, and your current VPN connection status and server. You can edit or remove any of it before sending. As with any email, we'll also see your email address and anything else you include. We use what you send to help with your request.

Information We DO NOT Collect

The websites you visit, your DNS queries or the content of your traffic. We keep no connection history in our database.
Your name, email address, phone number, contacts or location. You don't need any of these to use sVPN (we only see your email address if you email us).
Your device name, model or iOS version as part of your account. We don't store these with your account, and device details stored by earlier versions of the app have been deleted. (Your iOS version does appear in the API logs above, which are deleted after 7 days, and in support emails if you leave it in.)
Payment or purchase details. Apple handles all purchases.
Analytics or advertising data. The app contains no analytics, advertising or tracking SDKs, and this website uses no cookies or analytics.

How We Use Your Information

Create your account and sign the app in
Let you connect to our VPN servers
Troubleshoot problems and keep the service secure
Answer your support requests

Subscriptions & Free Access

Subscriptions are sold and managed by Apple through the App Store. The subscription check happens on your device, and our servers never receive your payment or purchase details.
Free access lasts 2 hours from the app's first launch on your device and is counted on the device. It isn't an App Store free trial and needs no payment details.

Data Sharing

We don't sell your information or share it for advertising. We use these providers to run sVPN:

Apple sells and manages App Store subscriptions.
Cloudflare delivers this website and our API, so it sees the IP addresses of website visitors and of the app when it contacts our API.
Vultr hosts our servers in the United States, Poland and Singapore.
Cloudflare and Google answer your DNS queries while you're connected: Cloudflare (1.1.1.1) on all servers, and also Google (8.8.8.8) on the Warsaw server. They process these queries under their own privacy policies.

Apart from these providers, we only share information when required by law, to protect our rights or property, or with your explicit consent.

Where Your Data Is Processed

Our servers are in the United States (New York), Poland (Warsaw, in the EU) and Singapore, so your information is processed in those countries.

Data Retention

Account and VPN credentials: Until you delete your account, or automatically after 90 days without using the app
VPN server connection logs: Deleted automatically after 7 days
API server logs: Deleted automatically after 7 days
Payment records: Kept by Apple under its own policies; we never receive them

Security

Traffic between your device and our VPN server is encrypted with IKEv2/IPsec (AES-256, SHA-256, Diffie-Hellman group 14).
After our VPN server, your traffic continues to the internet as it normally would. Websites that use HTTPS stay encrypted end to end.
On your device, your device ID and passwords are stored in the iOS Keychain. On our server, your app password is stored only as a bcrypt hash.

Deleting Your Account & Data

In the app: tap the gear icon, then Delete Account & Data. This immediately deletes your account and VPN credentials from our servers. Any remaining log entries expire within 7 days. (This option is available starting with the next app update.)
Your subscription is separate. Deleting your account doesn't cancel your App Store subscription; manage or cancel it in your Apple ID settings.
By email: write to [email protected] with your account ID, which is shown in the app's gear menu.
Unused accounts are deleted automatically. If the app isn't used for 90 days, we delete the account and its VPN credentials. If you come back later, the app quietly sets up a new account; your App Store subscription isn't affected.
Uninstalling the app does not delete your account right away. iOS keeps Keychain items even after an app is deleted, so reinstalling usually restores the same account. To delete it immediately, use the in-app option or email us; otherwise it's deleted after 90 days without use.

Your Rights

Email [email protected] with your account ID to:

Access the information we hold about your account
Correct inaccurate information
Delete your account and data
Get a copy of your data (data portability, where applicable)

Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children.

Changes to This Policy

We may update this policy from time to time. When we do, we'll change the date at the top of this page. For material changes, we'll also post a notice on this website.

Contact

For privacy questions: [email protected] (SDEV LLC)