RedVPN

Mobile applications

RedVPN Privacy Policy

Last updated: July 27, 2026

RedVPN is operated by Firesoft TOO, also referred to in English as Firesoft LLP ("RedVPN", "Firesoft", "we", "us", or "our").

For purposes of applicable data-protection law, Firesoft TOO is the controller of the personal information described in this Policy.

This Privacy Policy explains how RedVPN handles information when you use:

  • The RedVPN app for Android.
  • The RedVPN app for iOS or iPadOS.
  • RedVPN account, support, legal, and related web pages.
  • The RedVPN VPN service and supporting infrastructure.

This Policy applies to both mobile platforms unless a section specifically refers to Android, iOS, or iPadOS.

Contact

For privacy questions, support requests, or requests to exercise your privacy rights, contact us through:

Privacy Summary

RedVPN provides a VPN service. The app verifies your access, obtains the VPN profile assigned to you, and creates an encrypted VPN tunnel between your device and a RedVPN VPN endpoint.

RedVPN:

  • Does not sell personal or sensitive information.
  • Does not show advertising in the mobile apps.
  • Does not use advertising, analytics, attribution, or cross-app tracking SDKs in the mobile apps.
  • Does not track you across apps or websites.
  • Does not build advertising or browsing profiles.
  • Does not retain the content of your VPN traffic.
  • Does not retain your browsing history, DNS query history, destination domains, or destination IP addresses.
  • Does not use or disclose data obtained from VPN traffic to third parties for advertising, marketing, analytics, profiling, or any other third-party purpose.

RedVPN processes only the limited information described below to provide, maintain, secure, and support the service, manage access, prevent abuse and fraud, and comply with applicable law.

How the Mobile Apps Provide VPN Access

Android

On Android, RedVPN uses the Android VpnService API to create a secure device-level VPN tunnel to a RedVPN endpoint. VPN connectivity is the app's core functionality.

When the VPN is active, network traffic selected by the VPN configuration is routed through the encrypted tunnel in accordance with the VPN profile and Android VPN settings.

RedVPN does not use VpnService to redirect or manipulate traffic for advertising or monetization.

Before the first VPN connection is created, Android displays its system VPN permission prompt. RedVPN also presents an in-app disclosure explaining the VPN's data handling and asks you to affirmatively accept it before activation.

iOS and iPadOS

On iOS and iPadOS, RedVPN uses Apple's NEVPNManager API and a packet-tunnel provider extension to create and manage a secure device-level VPN tunnel to a RedVPN endpoint.

When the VPN is active, network traffic selected by the VPN configuration is routed through the encrypted tunnel in accordance with the VPN profile and Apple VPN settings.

Before RedVPN activates or uses the VPN service, the app presents an in-app disclosure explaining what limited data is processed and how it is used. Apple also displays its system prompt before allowing RedVPN to add a VPN configuration.

VPN Traffic and No-Logging Commitment

To forward traffic through a VPN, RedVPN infrastructure necessarily processes network packets while the VPN connection is active. This transient processing is required to deliver traffic to and from its destination.

RedVPN does not inspect or retain the contents of your VPN traffic for advertising, marketing, analytics, or profiling.

RedVPN does not retain:

  • Browsing or communications content.
  • Browsing history.
  • DNS query history.
  • Destination domains.
  • Destination IP addresses.
  • A record of the websites, apps, services, or internet destinations you access through the VPN.

RedVPN does not sell, use, or disclose to third parties any data obtained through the VPN service for any purpose. Contracted processors may handle only the limited information necessary to provide, secure, or support RedVPN, solely on RedVPN's instructions; they are not permitted to use that information for their own purposes.

Information We Process

Access and subscription information

When you activate or refresh RedVPN, the app sends the access key or subscription token you provide to RedVPN infrastructure over HTTPS. RedVPN uses it to verify access and return the VPN profile and subscription status assigned to you.

RedVPN may process:

  • Access key or subscription token.
  • Subscription identifier and status.
  • Subscription plan and expiration date.
  • Subscription refresh timestamps.
  • Account, assignment, or device identifier assigned by RedVPN.
  • App version, operating-system version, device type, and platform included in service requests.

The app stores the access key, subscription information, and related state locally using platform secure storage or private app storage.

RedVPN does not use Apple or Android advertising identifiers.

VPN profile information

The app receives and stores the VPN profile required to establish your connection. Depending on the profile, this may include:

  • VPN cryptographic keys.
  • RedVPN server endpoint.
  • Internal VPN address.
  • DNS settings.
  • Allowed IP ranges and routing rules.
  • Keepalive settings.
  • Protocol and security options.

This information is used only to validate, establish, maintain, and stop the VPN connection. Sensitive profile values are stored in secure or private app storage and are not used for advertising, tracking, or profiling.

Connection and operational information

To provide, secure, troubleshoot, and protect the VPN service, RedVPN may process limited operational information:

  • Account or RedVPN-assigned device identifier.
  • Connection start and end timestamps.
  • RedVPN server or endpoint used.
  • Total bytes transferred.
  • Source or public IP address used to connect to RedVPN.
  • Connection, protocol, and application error events.
  • Security, fraud-prevention, and abuse-prevention events.

A source IP address may indicate an approximate location such as a country, region, or city. The RedVPN mobile apps do not request precise device-location permission and do not collect GPS coordinates.

RedVPN does not combine operational information with browsing history or destination information, and does not use it to create a profile of your online activity.

Operational information is normally retained for no more than 30 days. It may be retained for longer only when reasonably necessary to investigate a specific security, abuse, fraud, billing, dispute, or legal matter, or when retention is required by applicable law.

Local diagnostics and logs

The mobile apps keep limited diagnostic logs in private app storage to help the app function and to troubleshoot errors. These local logs are not automatically sent to RedVPN.

If you choose "Share diagnostics", the app creates a diagnostics archive and opens the Android or Apple system share sheet. RedVPN receives the archive only if you affirmatively choose RedVPN support as the recipient or otherwise send it to us.

The diagnostics archive may include:

  • App version, build number, and application identifier.
  • Device type or model, operating-system version, and locale.
  • VPN and access status.
  • Subscription plan, expiration status, and RedVPN-assigned device identifier.
  • Tunnel status, byte counters, handshake status, and recent tunnel events.
  • Sanitized application logs and error information.

Before export, the app is designed to redact access keys, configuration URLs, VPN profile lines, endpoints, cryptographic keys, long secrets, and tunnel implementation identifiers.

Support messages and diagnostics sent to RedVPN are normally retained for no more than 90 days. They may be retained longer when reasonably necessary to resolve an ongoing support, security, abuse, fraud, billing, dispute, or legal matter.

Clipboard

The app reads clipboard text only after you tap "Paste key" to activate RedVPN.

The app does not continuously or silently monitor the clipboard and does not read clipboard content in the background.

Clipboard text that is not accepted as a valid RedVPN access key is not intentionally transmitted to RedVPN.

Notifications

If you allow notifications, RedVPN may use local or service-related notifications for:

  • Access-expiration reminders.
  • Access-status notices.
  • VPN or service-related notices.

Notification permission status and reminder-scheduling state may be stored locally on your device. Denying notification permission does not prevent you from using the VPN service.

Account, support, and web pages

Depending on the platform, region, and app version, the app may open RedVPN account, help, support, legal, privacy, or other service pages in your browser.

Information you choose to provide on those pages may include:

  • Account and authentication information.
  • Email address or other contact information.
  • Subscription, billing, and transaction information.
  • Support messages and attachments.
  • Privacy or deletion-request information.

Web pages may use cookies or similar technologies that are necessary for authentication, security, language preferences, session management, and service operation. RedVPN does not use information collected by the mobile VPN apps for third-party advertising or cross-site tracking.

Payments

RedVPN does not collect payment-card numbers inside the Android, iOS, or iPadOS app.

If you make a purchase through Google Play or Apple's App Store, the applicable store processes the payment under its own privacy policy. RedVPN may receive transaction identifiers, product or subscription information, purchase status, and expiration information needed to provide and manage access. RedVPN does not receive your full payment-card number from the app store.

If a purchase is made on a RedVPN web page where permitted, the payment provider processes payment credentials under its own privacy policy. RedVPN may receive the transaction result and limited billing information required for accounting, fraud prevention, customer support, and legal compliance, but does not intentionally store full payment-card numbers.

How We Use Information

RedVPN uses the information described in this Policy only as necessary to:

  • Verify access keys, subscriptions, and service eligibility.
  • Generate and deliver VPN profiles.
  • Establish, maintain, and stop VPN connections.
  • Display subscription and access status.
  • Keep the VPN service available, reliable, and secure.
  • Detect, prevent, and investigate abuse, fraud, and security incidents.
  • Diagnose technical problems and provide support.
  • Send requested or service-related notices.
  • Maintain billing, tax, accounting, and dispute records.
  • Enforce RedVPN terms.
  • Comply with applicable law and valid legal obligations.

RedVPN does not use VPN traffic, operational information, account identifiers, or device identifiers for advertising, cross-app tracking, data brokerage, or creation of marketing or browsing profiles.

Where applicable law requires a legal basis, RedVPN relies on:

  • Contract: to provide account access, subscription access, VPN connectivity, and support requested by you.
  • Legitimate interests: to operate, secure, maintain, and troubleshoot RedVPN; prevent abuse and fraud; protect users and infrastructure; and enforce applicable terms.
  • Legal obligation: to comply with applicable legal, regulatory, tax, accounting, billing, dispute, and lawful-request obligations.
  • Consent: when you affirmatively accept the VPN data disclosure, enable optional notifications, choose to share diagnostics, or initiate a support or privacy request.

Where processing is based on consent, you may withdraw that consent for future processing. Withdrawal does not affect processing that was lawful before withdrawal. Some information remains necessary to provide an active VPN service or comply with legal obligations.

No Sale, Advertising, or Third-Party Use of VPN Data

RedVPN does not:

  • Sell or rent personal or sensitive information.
  • Sell, use, or disclose data obtained through the VPN service to third parties for any purpose.
  • Share VPN traffic, browsing activity, DNS query history, destination domains, or destination IP addresses with advertisers, data brokers, analytics providers, or marketing platforms.
  • Permit infrastructure or support providers to use RedVPN information for their own advertising, marketing, profiling, or other independent purposes.
  • Redirect or manipulate traffic from other apps for monetization.

RedVPN does not include third-party advertising, attribution, or tracking SDKs in its mobile apps.

Service Providers and Disclosures

RedVPN may engage contracted infrastructure, hosting, security, and support providers that act as processors and handle limited information solely on RedVPN's behalf and only as necessary to perform the service RedVPN has instructed them to provide.

These contracted processors are not permitted to use RedVPN information for their own advertising, marketing, profiling, or independent commercial purposes. They are required by contract or applicable law to protect information appropriately and provide privacy protection consistent with this Policy.

Apple, Google, and other app-store or payment providers may process information that you provide directly to them, or information generated through a store or payment transaction, under their own terms and privacy notices. Depending on the service and applicable law, they may act as independent controllers of that information. RedVPN may receive limited transaction information from them as described in the Payments section of this Policy.

RedVPN does not provide contracted processors, app stores, or payment providers with VPN traffic data, browsing or communications content, browsing history, DNS query history, destination domains, or destination IP addresses.

RedVPN may disclose limited information when required by a valid and enforceable legal obligation, or when reasonably necessary to protect the rights, safety, and security of users, RedVPN, or the public. RedVPN reviews requests for validity and scope where legally permitted.

When you use the Android or Apple system share sheet, the recipient you select receives the file or information you chose to share. That recipient handles the information under its own privacy practices.

Security

RedVPN uses safeguards appropriate to the nature of the information it handles. These safeguards include:

  • HTTPS for access, subscription, and configuration requests.
  • An encrypted tunnel between the device and the RedVPN VPN endpoint.
  • Platform secure storage or private app storage for access and profile information.
  • Redaction of sensitive values from user-exported diagnostics.
  • Access controls and operational safeguards for RedVPN systems.

On Android, the app is configured to avoid cleartext network traffic for RedVPN service requests. On iOS and iPadOS, RedVPN uses the system VPN framework and the app's private containers and keychain-compatible secure storage.

No storage or transmission method is completely secure. RedVPN cannot guarantee absolute security, but works to prevent unauthorized access, disclosure, alteration, and loss.

Retention and Deletion

RedVPN retains information only for as long as reasonably necessary for the purposes described in this Policy:

  • Local access key, subscription state, and VPN profile: until you remove access in the app, uninstall the app, or the operating system removes app data.
  • Connection and operational information: up to 30 days.
  • Support messages and diagnostics you send: up to 90 days.
  • Account and subscription records: while the account or subscription is active and afterward as necessary for deletion processing, disputes, fraud prevention, security, and legal obligations.
  • Billing, tax, and transaction records: for the period required by applicable tax, accounting, payment, and legal requirements.

You can remove local access information through the app's settings. Removing access deletes the locally stored access key, subscription details, VPN profile, and related refresh state from the app and disconnects the VPN as applicable.

Uninstalling the app or deleting local app data does not automatically delete backend account, subscription, transaction, support, or operational records.

To request deletion of backend account or subscription information, contact us through:

We aim to complete verified deletion requests within 30 days. Some information may be retained where required or permitted for legal, security, fraud-prevention, billing, dispute, tax, accounting, compliance, or service-protection purposes.

Your Privacy Rights

Depending on your location and applicable law, you may have rights to:

  • Request access to information about you.
  • Request correction of inaccurate information.
  • Request deletion.
  • Request restriction of processing.
  • Object to certain processing.
  • Request portability where applicable.
  • Withdraw consent for future processing.
  • Submit a complaint to a competent data-protection authority.

To exercise a right, use the contact information in this Policy. We may need to verify your identity and authority before acting on a request. We will not discriminate against you for exercising a privacy right.

Children

RedVPN is not directed to children. We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided personal information to RedVPN, contact us so that we can review and, where appropriate, delete it.

International Processing

RedVPN and its contracted providers may process information in countries where RedVPN infrastructure or service operations are located.

Where required by applicable law, RedVPN uses appropriate safeguards for international transfers of personal information.

External Services

RedVPN account, support, payment, app-store, or other external pages may have their own privacy notices. This Policy does not control an independent service's handling of information that you provide directly to that service.

Links to external services do not authorize those services to receive VPN traffic data or browsing activity from RedVPN.

Changes to This Policy

We may update this Privacy Policy when RedVPN's apps, service, legal obligations, or data practices change.

The updated Policy will show a new "Last updated" date. If a change materially affects how the mobile app collects or uses personal or sensitive information, RedVPN will provide any additional notice or consent required by applicable law or app-store policy.