Privacy Policy

Last updated: July 15, 2026

Ember Labs ("we", "us", "our") operates the Ember VPN application ("Ember VPN" or the "Service"). This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

We are committed to collecting the minimum amount of data necessary to provide a reliable VPN service:

• Device Identifier: A randomly generated device ID used solely for account management and session authentication. This identifier cannot be used to determine your identity.
• Connection Timestamps: We record the time you connect to and disconnect from our servers. This data is used exclusively for service delivery, capacity planning, and abuse prevention.
• Subscription Status: Information about your subscription tier (Free or Pro) and its validity, as provided by Apple.
• Aggregate Bandwidth Usage: Total data transferred per session for enforcing free-tier limits. This is not associated with any browsing activity.

2. Information We Do NOT Collect

Ember VPN is built on a strict no-logs principle. We do not collect, store, monitor, or log any of the following:

• Traffic logs or packet contents
• DNS queries or resolution history
• Browsing history, visited URLs, or web activity
• Your originating IP address after you disconnect from the VPN
• Any information about the applications or services you use while connected
• Connection speed or latency data tied to individual users

3. How We Use Your Information

The limited data we collect is used for:

• Authenticating your device and managing your account
• Delivering and maintaining the VPN service
• Enforcing free-tier usage limits
• Diagnosing technical issues and improving service reliability

4. Data Retention

Connection metadata (timestamps and aggregate bandwidth data) is automatically deleted after 30 days. Device identifiers are retained for the duration of your account. If you uninstall the app and do not reconnect for 90 days, all associated data is permanently deleted.

5. Third-Party Services

Ember VPN integrates with the following third-party services:

• Apple App Store: Handles all payment processing for subscriptions. We do not receive or store your payment information. Apple's privacy policy governs payment data.
• Cloudflare: Provides DNS resolution services. Cloudflare processes DNS queries according to their privacy policy. We do not receive DNS query data from Cloudflare.

We do not sell, rent, or share your personal data with any third party for advertising or marketing purposes.

6. Data Security

All connections to Ember VPN are encrypted using AES-256 via the WireGuard protocol. Our servers operate on bare-metal infrastructure in secure data centers. Server-side data is encrypted at rest, and access is restricted to authorized personnel only.

7. Children's Privacy

Ember VPN is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us at [email protected].

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Request access to the data we hold about you
• Request deletion of your data
• Request correction of inaccurate data
• Object to or restrict processing of your data

Because we collect minimal data and do not track your identity, in most cases there is very little data to provide. To exercise any of these rights, contact us at [email protected].

9. International Data Transfers

Our servers are located in multiple countries. By using Ember VPN, you consent to the transfer of your connection metadata to the server location you select. We ensure all server locations maintain the same strict no-logs policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the app and on our website. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

Ember Labs
Email: [email protected]