1. Scope
This Privacy Policy applies to the LumaVPN mobile application, related VPN services, and the LumaVPN website. It does not govern third-party websites, services, or applications that have their own privacy policies.
2. Information We Process
Device and account identifiers
The App creates or accesses identifiers needed to maintain an app session, including a generated device identifier, identifier for vendor, internal user identifier, user code, authentication token, account UUID, request identifier, and first-open timestamp.
App and device information
We may process the app version, bundle identifier, device model, operating-system version, preferred language, time zone, and country or region setting. This information supports compatibility, authentication, and troubleshooting.
Network and VPN connection information
To select nodes, display network information, establish a VPN connection, and diagnose failures, the App may process your public IP address, approximate country and city, network organization or ASN, selected node identifier, server address, protocol type, latency, connection status, connection timestamps, and technical failure results.
Subscription information
Where subscriptions are available, the App may process subscription entitlement status and expiration information needed to enable premium features. Apple processes payment-card and App Store billing information; LumaVPN does not receive your complete payment-card details from Apple.
Support communications
If you contact us, we process your email address and the information you include in your message, such as device details, screenshots, and issue descriptions.
Information stored locally
The App stores certain settings and records on your device, which may include the selected node, cached node data, subscription display status, remaining VPN duration, connection timing, language preference, and daily check-in dates.
Website information
The current LumaVPN website does not include advertising trackers or analytics scripts. A hosting provider may still process standard server logs, such as IP address, request time, browser type, requested page, and error information, to deliver and secure the website.
3. VPN Traffic
When the VPN is connected, network traffic is routed through the selected VPN infrastructure so the service can operate. Routing necessarily involves transient processing of destination and addressing information. LumaVPN is not designed to inspect the content of your communications for advertising purposes.
No VPN can guarantee complete anonymity or uninterrupted protection. Traffic sent before connection, after disconnection, through an excluded destination, or outside supported tunnel behavior may not pass through the VPN.
4. How We Use Information
- Authenticate app sessions and maintain service access.
- Retrieve, rank, and display available VPN nodes.
- Establish and maintain VPN connections.
- Display IP, approximate location, latency, connection status, and duration.
- Enable subscription features and locally earned VPN time.
- Detect failures, protect service integrity, prevent abuse, and troubleshoot issues.
- Respond to support requests and communicate about material service or policy changes.
6. Third-Party Services
LumaVPN currently relies on or may interact with the following categories of third parties:
- Apple: app distribution, device platform services, subscriptions, payments, and purchase restoration.
- IPinfo and IPWho: public IP, approximate location, and network organization information used by the App.
- VPN and backend infrastructure providers: authentication, node delivery, connection routing, and connection-status reporting.
- Email providers: delivery and storage of support communications.
Your use of third-party services is also subject to their applicable terms and privacy policies.
7. Storage and Retention
We retain information for as long as reasonably necessary to operate the service, maintain security, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and operational need.
Local app data is generally removed when the App is deleted, subject to Apple platform behavior and backups. A generated identifier stored in the iOS Keychain may remain after reinstalling the App until the Keychain entry is removed or the device is reset.
8. Security
We use reasonable technical and organizational safeguards designed to protect information. Certain API requests use encrypted request formats in addition to transport security. However, no network, storage system, or security control is guaranteed to be completely secure.
9. Your Choices
You can disconnect the VPN, change the selected node, adjust supported app settings, manage subscriptions through your Apple Account, and delete the App. You may contact us to ask questions or request action concerning information associated with your app session. We may need information to verify and locate the relevant records, and some requests may be limited by law or legitimate operational requirements.
10. Children
LumaVPN is not directed to children under 13, or the minimum age required by local law to use an online service without parental consent. If you believe a child has provided personal information contrary to this section, contact us so we can review the matter.
11. International Processing
VPN nodes and service providers may operate in multiple countries. Information may therefore be processed outside your country of residence, where data-protection laws may differ. We use reasonable measures appropriate to the information and processing involved.
12. Changes to This Policy
We may update this Privacy Policy as the App, service providers, or legal requirements change. The revised policy will display a new effective date. Material changes may also be communicated through the App or website when appropriate.
13. Contact Us
For privacy questions or requests, email [email protected].