Privacy Policy
Last updated: November 4, 2026
- 1. Who we are
- 2. What we never collect
- 3. What we collect and why
- 4. Ads on the free plan
- 5. Legal bases (EEA/UK)
- 6. Who we share data with
- 7. How long we keep data
- 8. Security
- 9. Your choices and rights
- 10. International transfers
- 11. Children
- 12. Changes and contact
1. Who we are
Veil VPN (“Veil”, “we”, “us”) is provided by NITROBITE S.R.L., Chișinău, Republic of Moldova. We are the controller of the personal data described in this policy. You can reach us at support@veilvpn.app.
This policy applies to the Veil app for iPhone, our VPN servers and our website at veilvpn.app.
2. What we never collect
When you are connected to Veil, your traffic is encrypted between your device and our VPN server and then sent on to the internet. We do not collect or store:
- the websites, apps or services you use, or your browsing history;
- DNS queries;
- the content of your traffic;
- the IP address you connect from, or the VPN IP address assigned to you, in any log;
- the amount of data you transfer;
- your name, email address, phone number or payment details.
Our VPN servers are configured not to write connection logs, and our authentication server does not keep connection records (“accounting”). Your IP address is necessarily processed in memory while you are connected, so traffic can be routed back to you, but it is not stored.
3. What we collect and why
| Data | Why we need it |
|---|---|
| Installation identifier — a random token created when you first open the app. We store only a one-way hash of it, the app version and the date the app last contacted our servers. | To let the app talk to our servers securely without an account, and to keep the service working and free from abuse. |
| VPN credentials — a random VPN username for your installation and a hashed password that is replaced each time you connect, with the time it was last issued. | To sign you in to our VPN servers. The password is never stored in readable form. |
| Subscription information — if you subscribe, the app sends us the transaction signed by Apple. We keep the original transaction ID, the product, the expiry date and whether it was refunded or revoked. Apple also notifies us of renewals and cancellations. | To unlock Premium on your devices and keep it in sync with your subscription. We never receive your name, Apple ID or payment details. |
| Push token — only if you allow notifications. | To send service updates and offers. You can turn notifications off in the app or in iOS Settings at any time. |
We do not use analytics or crash-reporting SDKs. If you have chosen to share analytics with app developers in iOS, Apple may give us aggregated crash reports and usage statistics, which do not identify you.
Our website does not use cookies, analytics or trackers.
4. Ads on the free plan
The free plan is supported by ads from Google AdMob. Premium subscribers do not see ads, and the ad SDK is not started for them.
- Consent. If you are in the European Economic Area, the UK or Switzerland, Google's consent form asks you how your data may be used for ads before any ad is requested.
- Tracking. iOS asks whether Veil may use your device's advertising identifier (IDFA). If you choose “Ask App Not to Track”, Google does not receive it and you may still see ads that are not personalized.
- What Google may collect. To show and measure ads, and to prevent ad fraud, Google may collect device and app information, your IP address, approximate location derived from it, and your interactions with ads. This happens inside Google's SDK under Google's Privacy Policy; see also how Google uses information from apps that use its services.
Ads are shown from within the app, not inside your VPN traffic. We do not inject ads into websites, and the ad SDK cannot see your browsing.
5. Legal bases (EEA and UK)
- Performance of a contract — to provide the VPN service and Premium features you request.
- Legitimate interests — to keep the service secure, prevent abuse and limit the number of devices per subscription.
- Consent — for push notifications and for personalized ads. You can withdraw consent at any time.
- Legal obligation — to keep records required by tax and accounting law, where applicable.
6. Who we share data with
We do not sell or rent personal data. We share it only with service providers that help us run Veil:
- Hosting providers that operate the servers for our API and VPN locations;
- Apple, for in-app purchases, subscription notifications and push notifications;
- Google, for ads on the free plan, as described above.
We may disclose information if required by law. Because we do not keep activity or connection logs, we cannot link online activity or an IP address to a user.
7. How long we keep data
- Installation and VPN credential records are kept while you use the app and deleted when you delete your data from the app (see below) or ask us to.
- Subscription records are kept for as long as the subscription is active and afterwards for as long as needed for accounting and legal requirements.
- Push tokens are removed when you turn notifications off or when Apple tells us they are no longer valid.
8. Security
Traffic between the app and our VPN servers is encrypted with IKEv2/IPsec (AES‑256‑GCM). Communication with our API uses HTTPS. We store hashes instead of tokens and passwords, keep servers updated and limit access to them. No system is perfectly secure, but we design Veil so there is as little data as possible to protect.
9. Your choices and rights
- Delete your data: in the app, go to Settings → Delete My Data. This removes your installation record, VPN credentials and push token from our servers. It does not cancel an Apple subscription.
- Ads: change your ad consent in Settings → Privacy Choices (where available), and tracking permission in iOS Settings → Privacy & Security → Tracking. Subscribing to Premium removes ads.
- Notifications: turn them off in the app or in iOS Settings.
- Subscriptions: manage or cancel them in iOS Settings → [your name] → Subscriptions.
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its processing, and to withdraw consent. Because Veil has no accounts, we usually cannot identify you from an email alone; using the in-app option is the most reliable way to delete your data. You can also contact us at support@veilvpn.app, and you have the right to complain to your local data protection authority.
California residents: we do not sell or share personal information for cross-context behavioral advertising, except where you allow personalized ads from Google on the free plan, which you can decline as described above.
10. International transfers
Our servers are located in several countries, and our service providers may process data outside your country. Where data leaves the EEA or UK, we rely on adequacy decisions or the European Commission's Standard Contractual Clauses.
11. Children
Veil is not directed at children under 13 (or under 16 in the EEA), and we do not knowingly collect their personal data.
12. Changes and contact
We will update this page when our practices change and revise the date at the top. For significant changes we will also let you know in the app.
Questions or requests: support@veilvpn.app · NITROBITE S.R.L., Chișinău, Republic of Moldova.