# Privacy Policy — VPN Snake Lite

_Last updated: 2026-06-05_

VPN Snake Lite ("the App") is an iOS VPN client that establishes an OpenVPN
tunnel using a configuration that **you** provide. This document explains what
data the App handles, where that data lives, and what it never does with it.

## 1. Summary

- **We do not collect personal data.**
- **We do not store VPN logs.**
- **We do not transmit telemetry to our servers — because we do not run any servers for the App.**
- **All processing happens locally on your device.**
- **You are responsible for the OpenVPN endpoints you connect to.**

## 2. What data the App handles

The App handles only the following data, and it never leaves your device:

| Data | Purpose | Where it lives | Who can read it |
|---|---|---|---|
| Your OpenVPN configuration (`.ovpn` text) | Establishing the VPN tunnel | iOS Keychain, encrypted at rest | Only the App, on this device |
| Optional username / password | Authenticating to your VPN server, if the config requires it | iOS Keychain, encrypted at rest | Only the App, on this device |
| Connection state and elapsed time | Showing the timer on screen | Memory only — cleared when the App closes | Only the App |

We do not collect: account identifiers, device identifiers, advertising IDs,
IP addresses, browsing history, DNS queries, location, contacts, photos,
or any other personal data.

## 3. Where data is stored

All secrets are stored in the **iOS Keychain** under the
`com.VPN-Snake-Lite.secrets` service identifier. The Keychain encrypts data at
rest using a key derived from your device passcode. Items are configured with
`kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly` and
`kSecAttrSynchronizable = false`, which means:

- Items never sync to iCloud Keychain.
- Items never roam to another device.
- Items are removed automatically if you uninstall the App.

## 4. Third parties and analytics

The App does not embed any analytics SDK, crash-reporting SDK, advertising
SDK, A/B-testing SDK, or third-party tracker. It does not contact any backend
operated by the App's developer.

Apart from the VPN tunnel, the App initiates network traffic in exactly one
optional case: **Connection Insights**. This feature is turned **off by
default**. When you switch it on, the App makes a request to a public
IP-lookup service (such as `ipwho.is`) to display your current public IP
address and approximate location, so you can confirm your traffic is leaving
through the tunnel. That request carries no identifiers from you, is sent only
while the feature is enabled, and the result is kept only in memory — it is
never stored or shared. The live speed counters shown by the same feature are
read locally from the tunnel and never leave your device.

Other than that, the only network traffic the App initiates is the VPN tunnel
itself, which is established **directly** between your device and the server
defined in your OpenVPN configuration. We do not operate, control, or have
visibility into that server.

## 5. The VPN server you connect to

You bring your own `.ovpn` configuration. The remote server defined in that
configuration is operated by you or by a third party of your choosing — not by
us. That server has its own privacy practices, and you should review them
separately.

## 6. Children

The App is not directed to children under 13. It does not knowingly process
personal data from children.

## 7. Your rights

Because the App stores nothing on our side, there is nothing for us to
access, export, correct, or delete on your behalf. To remove all locally
stored data, you can:

- Tap **Clear** on the main screen to remove the saved OpenVPN configuration.
- Delete the App — iOS will purge the Keychain items the App created.

## 8. Changes to this policy

If material changes are made to this document, the updated version will be
published in this repository with a new `Last updated` date.

## 9. Contact

For support or questions about this policy, contact us on Telegram at
[@vpnsnakelitesupport](https://t.me/vpnsnakelitesupport), or open an issue in
this repository.