Last updated
Privacy Policy
InVPN is a free VPN that routes your internet traffic through servers around the world. We built it to keep as little information as the service needs to work, and nothing about what you do online.
What We Never Collect
- The websites you visit, the apps you use, or the content of your traffic.
- Your DNS queries. Our DNS resolvers keep no query logs.
- Your name, email, phone number or any account. There is no sign-up.
- Analytics, advertising identifiers or tracking of any kind. The app contains no third-party SDKs.
We don’t sell data, and we never use your device to carry other people’s traffic.
What the Service Stores, and for How Long
An App Attest key identifier and public key
Apple’s App Attest proves requests come from the genuine app, which stops abuse of the free service. The key is random, created on your device, and not linked to you or your Apple ID.
Kept: Deleted 30 days after it was created if it has no active connection
Your device’s VPN public key and its internal tunnel address (10.8.x.x)
Needed for the VPN server to recognise your device.
Kept: Deleted after 7 days without use, or 1 hour if never used
The time of the last secure handshake between your device and a server
Lets us remove connections nobody is using.
Kept: Same as above
Your IP Address
Like any VPN, a server has to know your current IP address to send traffic back to you. It is held in memory while you’re connected and is not written to disk or logged. Our API uses your IP address only momentarily, to limit how many requests a single network can make, and does not store it.
Who Runs the Infrastructure
- Amazon Web Services
- Hosts the VPN servers, located in India (Mumbai and Hyderabad), Singapore, Japan (Tokyo), Australia (Sydney), Germany (Frankfurt), the United Kingdom (London), the United States (Virginia and Oregon), and Canada (Montreal).
- Cloudflare
- Hosts the API the app uses to set up connections. Request logging is turned off.
- Speed test
- The in-app speed test downloads and uploads test data to Cloudflare’s speed test servers (speed.cloudflare.com), which Cloudflare may use for aggregated network statistics. It runs only when you start it, and through the VPN, so Cloudflare sees the VPN server’s address rather than yours.
Each server is subject to the laws of the country it is located in.
Deleting Your Data
Delete the app and remove its VPN configuration in Settings › General › VPN & Device Management. Everything listed above then expires automatically on the schedule above.
Children
InVPN doesn’t knowingly collect personal information from anyone, including children.
Changes and Contact
If this policy changes, we’ll update this page and the date above. Questions: support@invpn.app.