Privacy Policy

We collect the minimum amount of information necessary to operate the Service: **Account Information:** When you create an account, we collect your email address. This is used for authentication, account recovery, and essential service communications. **Subscription Information:** If you subscribe to our Premium plan, payment processing is handled entirely by Google Play Billing. We receive a purchase token to verify your subscription status but do not have access to your payment card details or financial information. **Usage Metadata:** We collect limited, aggregated metadata to maintain service quality, including: total bandwidth consumed (for enforcing plan limits), connection timestamps (for session management), and the server location you connect to. This data is not linked to your browsing activity. **Device Information:** We may collect basic device information such as operating system version and app version to provide technical support and improve the Service.

X2VPN operates under a strict no-log policy regarding your VPN usage: - We do NOT log your browsing history or the content of your internet traffic. - We do NOT log your originating IP address when connected to our VPN servers. - We do NOT log the IP addresses of the websites or services you visit. - We do NOT log DNS queries made while connected to the VPN. - We do NOT monitor, record, or store the content of your communications. We are technically unable to match a specific user to specific network activity or browsing behavior on our VPN servers. Our VPN infrastructure is designed so that connection logs are not retained beyond the duration of your active session.

The limited information we collect is used solely to: - Provide and maintain the VPN Service. - Authenticate your identity and manage your account. - Verify subscription status and enforce plan limits (bandwidth, device count). - Send essential service communications (e.g., account verification, security alerts). - Detect and prevent abuse, fraud, or violations of our Terms of Service. - Improve and optimize the Service performance and reliability.

We use the following third-party services in connection with the Service: **Google Play Billing:** Processes in-app purchases and subscription payments. Google's privacy policy governs the collection and use of your payment information. Learn more at https://policies.google.com/privacy. **Google AdMob:** Our Free plan may display advertisements served by Google AdMob. AdMob may collect device identifiers and usage data to deliver relevant ads. You can manage your ad preferences in your device settings. Learn more at https://policies.google.com/technologies/ads. **Resend (Email Service):** We use Resend to deliver transactional emails such as account verification and password reset messages. Only your email address is shared with Resend for this purpose. Learn more at https://resend.com/privacy. We do not sell, rent, or trade your personal information to any third party.

We retain your account information (email address) for as long as your account is active. If you delete your account, we will remove your personal information within 30 days, except where retention is required by law. VPN session metadata (bandwidth counters, connection timestamps) is retained only for the duration necessary to enforce plan limits and is purged regularly. We do not retain any VPN traffic logs, as described in our No-Log Policy above.

We implement industry-standard technical and organizational measures to protect your data, including: - AES-256 encryption for all VPN traffic. - Encrypted storage of account credentials. - Secure HTTPS connections for all API communications. - Regular security audits and infrastructure updates. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us at [email protected].

Depending on your jurisdiction, you may have the following rights regarding your personal data: - **Access:** Request a copy of the personal data we hold about you. - **Correction:** Request correction of inaccurate personal data. - **Deletion:** Request deletion of your personal data and account. - **Portability:** Request a portable copy of your data. - **Objection:** Object to certain processing of your personal data. To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Our servers are located in multiple countries (Vietnam, United States, and Spain). By using the Service, you consent to the transfer of your information to these locations. We ensure that appropriate safeguards are in place to protect your data regardless of where it is processed.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the app or on our website and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: X2VPN Email: [email protected] Website: https://x2vpn.com