Privacy Policy

Last updated: October 3, 2026

Numbra VPN is a mobile VPN built to know as little about you as possible. If this policy and the software ever disagree, the software is the bug.

Who is responsible

LLC "Ecosystem Number One" is responsible for your data; questions go to supportumbervpn@gmail.com.

What data we receive

Only what the service needs to work, and what you choose to give us.

When you use the VPN

The app creates an anonymous account by itself: a random identifier with no name, email, or phone number. For each device we keep its model, platform, and public key, an irreversible hash of the phone's identifier (only to protect invitations from abuse), the selected server, your address inside the tunnel, a connection identifier, your sign-in sessions, and when the device last reached the service; everything else is your choice. Neither the private key nor the identifier itself ever leaves your phone.

Your IP address lives in server memory while the connection lasts; we do not record it or pass it on. We learn your network's country from the connection or from your phone to suggest settings, and do not save it.

When you invite a friend

We keep your invite code, who invited whom, when an invited friend first connected (the person who invited them sees this), rewards, and the labels you give friends in your list (only their author sees them; a friend can label you the same way). If you installed from Google Play through an invite, the code is taken from the store once.

When you link Telegram

Optional. We receive your Telegram identifier, username, name, language, and a note if you block our bot. With it you can get your account back on a new phone or after reinstalling.

When you subscribe to news

Your email address is kept while you are subscribed, only for the confirmation and the news; we do not track opens or clicks. After you unsubscribe the address is erased; an irreversible fingerprint remains so that one address cannot unlock a reward twice.

When you contact support

Messages and replies are kept while your question needs them; connection details only if you attached them.

When you pay

The order record and the confirmation from the payment platform; card numbers and payment details never reach us.

Anonymous statistics — your choice

Off until you turn them on; they cannot be linked to you.

On first launch, the "We value your privacy" screen's "Customize" button shows the cards "Necessary" (always on) and "Anonymous statistics" (off). The same switch is under "Profile".

They report how a connection attempt ended: your carrier's network name and type, the protocol, success, and whether our main or backup address was used (never the address itself) — with no account or device identifier; the app sends no timestamp. We keep only overall counters from which no individual can be identified: detailed ones (by carrier and protocol) for up to 72 hours, then daily totals.

What we never collect

We do not collect this under any circumstances.

The content of messages and files, contacts, photos, microphone audio, precise location, the list of your apps. We build no device fingerprint, apart from the hash named above.

What the app checks by itself

Sometimes the app contacts outside services directly; we do not receive the answers.

The app asks an external address-check service to show the address the internet sees you under, and when mobile data fails, it checks whether a few well-known sites open; with the VPN off, they see your ordinary connection. With the VPN on, domain name lookups go through the tunnel to a public DNS service and show it our server's address. The results stay on your phone.

Why we use data

To run the service, and for nothing else.

• The VPN, invitations, rewards, support, payments: our contract with you (our Terms).
• Statistics, news, linking Telegram: your consent, which you can withdraw at any time.
• Protection against abuse, security, backups: our legitimate interest; you can object.
• Accounting and answers to lawful requests: the law.

Who receives data

We do not sell data; it reaches only those the service needs and those you choose.

• Server hosting — for the service and the VPN nodes.
• A delivery and attack-protection network — sees technical details of the connection.
• An email delivery service — your address and the email text, if you subscribed; it keeps sending records for up to 30 days.
• Backup storage — only encrypted backups, which it cannot read.
• The payment platform — if you pay.
• Telegram — if you message our bot or link your account; its own policy applies.
• Google Play — if you installed from it: only aggregate statistics and the invite code, never data that could identify you.

Some recipients are outside the EU (the email service is in the United States); these transfers are protected by the safeguards EU law requires, and you can ask us for a copy. If you ask, we will name the specific recipients of your data; we will add any new category here before it receives any data.

We disclose data when the law requires it; we will not weaken the promises of this policy voluntarily.

Security

Everything between you and us is encrypted.

The app talks to the service over a secure connection, and VPN traffic is encrypted up to our server. Account access keys are kept in a form that cannot be used to sign in.

How long we keep data, and deleting it

As long as you use the service; you can delete your account at any time.

• Account, devices, settings, invitations, rewards — while you use the service.
• Ended sign-in sessions — up to 90 days.
• The remainder of a deleted account, without identifying fields — indefinitely (see the deletion page).
• Detailed statistics counters — up to 72 hours.
• Load figures of our servers (not about people) — 90 days.
• Support and payments — as long as needed for the question, accounting, and the law.
• The fingerprint of an email address after account deletion — up to 48 hours.
• Backups — anything deleted, including an account, disappears from them within 45 days at the latest.

Delete your account under "Profile" or through the data deletion page. Unsubscribe from news through the link in any email. Without linked Telegram, removing the app takes the account's key with it for good.

Your rights

You are in control of your data.

You can get a copy of your data (also in a portable form), correct or delete it, restrict or object to its use, and withdraw consent. We make no automated decisions that affect your rights. Write to supportumbervpn@gmail.com with the identifier from "Profile"; we reply within 30 days. You can also complain to the data protection authority of your country.

Children

The service is not for children; we do not knowingly collect their data.

Changes

If the policy changes, the date at the top changes. We will announce changes in what we collect in the app or in our Telegram channel.

Contact

Questions and deletion requests: supportumbervpn@gmail.com or the support link in the app.