**Operator:** Salt VPN\ **Website:** [https://salt-vpn.com](https://salt-vpn.com/) \ **Email:** [noreply@salt-vpn.com](mailto:noreply@salt-vpn.com)\ **Telegram bot:** [@salt_vpn_a_bot](https://t.me/salt_vpn_a_bot) This Privacy Policy describes how we collect, use, store, and share information when you use the **Salt VPN** mobile application, website, and related services (the “Service”). By using the Service, you agree to this Policy. If you do not agree, please do not use the Service. --- ## 1. Who we are Salt VPN provides a VPN client and subscription service. Accounts and payments are primarily handled via Telegram and our backend APIs. The mobile app connects devices to VPN servers and manages subscription and device slots. --- ## 2. Information we collect ### 2.1 Account and subscription data * Telegram user identifiers and username/login (when you interact with our bot or activate a subscription); * email address, if you provide one; * subscription status, plan, validity period, and device slot limits; * payment-related references needed to confirm a purchase (we do not store full card numbers). ### 2.2 Device and app data To activate and secure a device we may process: * a unique app installation ID (`app_instance_id`); * platform (e.g. Android), app version and build number; * a device fingerprint derived from device model/brand and OS identifiers; * cryptographic material for device authentication (CSR / client certificate enrollment); private keys are generated and kept in the device secure storage (e.g. Android Keystore) and are not exported by the app; * optional attestation / integrity token used to verify a genuine app client. ### 2.3 Technical and connection data When you use the app or website we may process: * IP address, timestamps, and basic request metadata for API and VPN connection setup; * server selection and connection status needed to operate the VPN; * crash or error information if collected for reliability (if enabled). ### 2.4 Local data on your device The app may store locally (e.g. SharedPreferences / secure storage): * preferences (theme, language); * cached subscription/device info; * enrollment/certificate-related cache needed for reconnecting. ### 2.5 What we do **not** intentionally collect We do not sell your personal data.\ We do **not** intentionally log the content of your VPN traffic (websites visited, DNS queries content, files transferred, or message contents) for advertising or profiling purposes.\ Operational logs may include limited technical connection metadata required to run and secure the Service. --- ## 3. How we use information We use the information to: * provide, activate, and maintain VPN access; * authenticate devices and enforce device slot limits; * process and confirm payments and subscriptions; * communicate service notices via Telegram or email (if provided); * prevent abuse, fraud, and unauthorized access; * improve reliability and security of the Service; * comply with legal obligations. --- ## 4. Legal bases (where applicable) Depending on your jurisdiction, we process data based on: * performance of a contract (providing the VPN subscription); * legitimate interests (security, abuse prevention, service improvement); * consent (where required); * legal obligations. --- ## 5. Sharing of information We may share data only as needed with: * **Payment providers** (e.g. bank/payment processor such as Tochka) to complete payments; * **Hosting / infrastructure providers** that run our servers under contract; * **Telegram**, to the extent you use Telegram to interact with our bot; * **authorities**, if required by applicable law. We do not share data with advertising networks for cross-app tracking. --- ## 6. International transfers Servers or processors may be located outside your country. Where required, we take reasonable measures to protect transferred data. --- ## 7. Retention * Account/subscription data: while your account/subscription is active and for a reasonable period afterward for billing, support, and legal compliance; * device enrollment records: while the device is linked to a subscription or until removed/replaced; * payment audit references: as required for accounting and dispute resolution; * local app data: until you clear app data or uninstall the app. --- ## 8. Security We use industry-standard safeguards, including encrypted transport (TLS / mTLS for certain API calls), device-bound keys where supported, and access controls on backend systems. No method of transmission or storage is 100% secure. --- ## 9. Your rights Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or withdraw consent. To exercise rights, contact us at **Telegram bot **[**@salt_vpn_support_bot**](https://t.me/salt_vpn_support_bot) and include your Telegram username / subscription identifier so we can verify the request. You can also: * remove a device from your subscription in the app/bot (where available); * clear app data or uninstall the app to remove local data; * stop using the Telegram bot. --- ## 10. Children’s privacy The Service is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal data from children. If you believe a child provided data, contact us to delete it. --- ## 11. Third-party services Payments, Telegram, app stores (e.g. Google Play), and hosting providers process data under their own privacy policies. Please review those policies as well. --- ## 12. VPN permission and notifications On Android, the app may request VPN permission and show a persistent notification while the VPN is active. Notifications may also be used for connection status. These are required for the VPN to function and are not used for advertising. --- ## 13. Changes to this Policy We may update this Policy from time to time. The “Last updated” date will change, and the new version will be posted at . Continued use of the Service after changes means you accept the updated Policy. --- ## 14. Contact Questions about privacy:\ **Website:** [https://salt-vpn.com](https://salt-vpn.com/) \ **Email:** [noreply@salt-vpn.com](mailto:noreply@salt-vpn.com)\ **Telegram:** [**@salt_vpn_support_bot**](https://t.me/salt_vpn_support_bot)