Privacy Policy

This policy applies to the Suave VPN mobile application and related services operated by SuaveLogix ("we," "us," or "our"). It is intended for users who access Suave VPN through the app or through links from our Google Play and Apple App Store listings.

By using Suave VPN, you agree to the practices described in this policy. If you do not agree, please do not use the app. This policy is written to be understandable and is designed to reflect applicable privacy requirements such as GDPR and CCPA, without claiming formal legal compliance that has not been independently verified.

Privacy at a Glance

• Suave VPN uses WireGuard to encrypt traffic through the VPN tunnel.
• We do not monitor, record, or store your browsing history, visited websites, DNS queries, traffic content, or destination addresses.
• We collect account information (such as your email address), device and VPN provisioning information, and limited usage metadata (such as bandwidth counters).
• The app uses Firebase Analytics and Firebase Crashlytics, and Google AdMob for advertising and rewarded access.
• We do not sell your personal information.
• You can delete your account in the app via Settings → Delete Account.

Our VPN Activity No-Logs Commitment

Suave VPN uses the WireGuard protocol to create an encrypted VPN tunnel. We do not monitor, record, or store:

• Browsing history
• Visited websites or URLs
• DNS queries
• Traffic content
• Destination addresses
• A history linking you to websites or online services accessed through the VPN

API request logs do not record users' originating IP addresses. Suave VPN does not sell personal information.

Because we retain limited account, device, server-association, bandwidth, and timestamp metadata needed to operate the service, Suave VPN should not be described as a "zero-log VPN."

Information We Collect

Account information

We collect your email address for account creation, authentication, email verification, password reset, and support. Passwords are stored on our servers only as one-way bcrypt hashes; plain-text passwords are not stored.

Email verification uses one-time codes. Password-reset tokens and verification codes are not written to production logs.

Basic account information also includes:

• An internal user ID
• Your account role
• Account creation date
• Email verification status
• Last-login timestamp

Device and VPN provisioning information

We store a device name that you provide.

A WireGuard key pair is generated on your device. Only the WireGuard public key is sent to and stored by our service. The WireGuard private key remains on your device and is stored using your platform's secure keystore.

We also store VPN provisioning information needed to operate your connection, including the selected server or peer association and your assigned tunnel address. The WireGuard public key is a persistent technical identifier associated with your device record; it should not be described as anonymous.

Usage metadata

We store per-user and per-device bandwidth counters, including bytes sent and received, along with associated timestamps, peer identifiers, and server identifiers.

This metadata is used to display usage statistics, enforce plan or temporary-access limits, operate the VPN service, and prevent abuse. It does not contain traffic contents, browsing destinations, URLs, or DNS queries.

Analytics, diagnostics, and advertising data

Through Firebase Analytics, Firebase Crashlytics, and Google AdMob, we and our service providers may collect technical and usage information such as app interactions, app version, device and operating-system information, crash traces, diagnostics, advertising identifiers, ad interactions, and other identifiers supplied by those SDKs, subject to their configuration and your consent choices where applicable. See the dedicated sections below for more detail.

Information We Do Not Collect

Through the VPN service itself, we do not collect:

• Browsing history or visited URLs
• DNS queries
• Traffic content or destination addresses
• A record linking your VPN activity to specific websites or online services
• Your originating IP address in API request logs

Firebase Analytics, Firebase Crashlytics, and AdMob do not receive VPN traffic content, browsing history, visited URLs, or DNS queries from Suave VPN.

Apple App Store and Google Play subscription or payment processing are not currently integrated. Suave VPN does not currently process in-app purchases or payment-card data through those stores.

How We Use Information

We use the information we collect to:

• Create, authenticate, and manage your account
• Send verification and password-reset emails through our email provider
• Provision and maintain your VPN connection
• Display usage statistics and enforce plan or temporary-access limits
• Operate, secure, and improve the app and service
• Diagnose crashes and technical errors
• Understand app usage and improve features through analytics
• Show advertisements and offer rewarded access for temporary VPN use
• Provide customer support
• Comply with applicable law and respond to valid legal requests
• Protect users, the service, and others from abuse

Local Data Stored on Your Device

Access tokens, refresh tokens, and your WireGuard private key are stored using your device's secure storage or keystore.

A basic cached account profile and non-secret application preferences may be stored locally on your device.

Locally cached VPN connection information may include the server, tunnel address, DNS configuration, peer identifier, source of access, and expiration time. This local information is used to restore application and VPN connection state.

Uninstalling the app does not automatically delete your server-side account. To remove your account and associated server-side records, use Settings → Delete Account in the app or the external deletion method described below.

When and With Whom We Share Information

We do not rent or sell your personal information. We may share information only with service providers needed to operate the app, including:

• Firebase and Google (Analytics and Crashlytics)
• Google AdMob (advertising)
• Hosting infrastructure
• VPN server infrastructure
• Our configured SMTP email provider

We may also disclose information when required by applicable law, a valid legal process, or when we believe disclosure is necessary to protect users, the service, or others.

Because we do not collect browsing records through the VPN, we cannot provide browsing history or similar VPN activity logs in response to legal requests.

Firebase Analytics and Crashlytics

Suave VPN uses Google Firebase Analytics to understand app usage and improve features, and Firebase Crashlytics to diagnose crashes, stability problems, and technical errors.

Firebase may process technical and usage information such as app interactions, app version, device and operating-system information, crash traces, diagnostics, and identifiers supplied by the Firebase SDK, subject to the final Firebase configuration. Firebase data should not be described as fully anonymous.

Firebase is operated by Google and processes information according to Google's and Firebase's terms and privacy documentation. Analytics and crash reports do not include VPN traffic content, browsing history, visited URLs, or DNS queries.

Firebase Privacy Policy: https://firebase.google.com/support/privacy

Advertising and Rewarded Access

Suave VPN uses Google AdMob for advertising. Non-subscribers may view rewarded advertisements to obtain temporary VPN access.

AdMob may process advertising identifiers, device information, ad interactions, approximate location inferred from IP address, and other data according to Google's policies and the application's consent and configuration choices. Suave VPN does not sell this information.

AdMob's advertising processing is separate from VPN traffic processing. AdMob does not receive your VPN browsing activity, traffic content, or DNS queries.

Google advertising and privacy documentation: https://policies.google.com/technologies/ads

Data Retention

We retain account information and usage metadata for as long as your account remains active, and for a reasonable period afterward as needed to operate the service and comply with applicable law.

When you delete your account, we remove your account and associated server-side records according to our deletion process. Some information may remain temporarily in backups or where retention is required by law; we do not promise immediate deletion from every backup unless that has been verified for our systems.

Account and Data Deletion

You can permanently delete your account within the app through Settings → Delete Account. Account deletion removes your account and associated server-side records according to the application's deletion process.

If you cannot access the app, you may request account deletion by emailing support@suavelogix.com.

Deleting the app from your device alone does not delete your server-side account.

Security

We use reasonable safeguards to protect information, including:

• WireGuard encryption for traffic passing through the VPN tunnel
• TLS for client-server API connections in production
• Bcrypt hashing for stored passwords
• Secure device storage for authentication tokens and your WireGuard private key
• Sensitive request bodies, authentication tokens, verification codes, password-reset tokens, WireGuard public keys, and assigned tunnel addresses are not intentionally written to application logs

No method of transmission or storage can be guaranteed to be completely secure.

International Data Transfers

Your information may be processed and stored in the United Kingdom and in other locations where our hosting, VPN, and service providers operate. By using Suave VPN, you understand that your information may be transferred to, stored in, and processed in countries that may have different data-protection laws than your country of residence.

Your Privacy Rights

Depending on where you live, you may have rights regarding your personal information, such as the right to access, correct, delete, or receive a copy of your data, and the right to object to or restrict certain processing.

Residents of certain regions, including the European Economic Area and California, may have additional rights under GDPR, CCPA, or similar laws. To exercise your rights, contact us at support@suavelogix.com. We will respond in accordance with applicable law.

Where required, you may also have the right to lodge a complaint with your local data-protection authority.

Children's Privacy

Suave VPN is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at support@suavelogix.com and we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the app or by email. Your continued use of Suave VPN after changes become effective means you accept the updated policy.

This policy must be updated before Apple App Store or Google Play payment or subscription processing is released.

Contact Us

If you have questions about this Privacy Policy or our data practices, contact us:

• Legal company name: SuaveLogix
• Business address: Icon Office, 182-184 High Street North, London E6 2JA, United Kingdom
• Privacy / support email: support@suavelogix.com