Privacy Policy

1. Scope and operator

This Privacy Policy applies to the VPN - Fast & Unlimited iOS and iPadOS app, its VPN and API services, the vpnfastunlimited.com website, and support communications operated by Jarski LLC (collectively, the “Service”). The initial v1.0 App Store offering is limited to the United States. Jarski LLC is the entity responsible for the Service’s data practices. Third-party services have their own privacy practices, as described below.

2. Information we process

We and our service providers process the categories below. Some information is stored; other information is processed only long enough to deliver or secure a request.

Accountless identifiers and service records

The app creates a random device identifier. Our backend creates random customer and installation identifiers so the Service can operate without an email-and-password account. We store these identifiers with status and version fields, app platform and bundle information, and timestamps. They may be linked to a VPN device, security records, region selection, connection records, and subscription records.

VPN configuration and region records

To provision VPN access, we receive and store the device identifier, the device’s WireGuard public key and a hash of that public key, the selected region, the assigned internal VPN address, key and record versions, connection status, and creation, update, revocation, and operation timestamps. We maintain a public region catalog containing availability, maintenance, and Free or Premium eligibility information. We also keep bounded operation records needed to safely complete or recover provisioning and revocation.

Security and App Attest information

We use Apple App Attest to help verify that sensitive requests come from a valid instance of our app. We process one-time challenges, App Attest key identifiers, attestation and assertion objects, app and environment information, cryptographic verification data, and exact request-binding information. We store hashes of key identifiers and challenges, the verified public key, Apple attestation receipt, assertion counter, validation category, app bundle version, key status, challenge bindings and digests, accepted counters, and related timestamps. We do not receive the App Attest private key.

Subscription and purchase information

If you purchase or restore a subscription through Apple, Apple handles your payment credentials. We do not receive your payment-card or bank-account details. We may receive and verify Apple-signed transaction, renewal, App Transaction, and server-notification data. We store normalized records such as product and subscription-group identifiers, transaction and original-transaction identifiers, purchase and expiration dates, renewal, grace-period, billing-retry, upgrade and revocation state, ownership type, environment, notification identifiers and results, and verification timestamps. A random backend customer UUID may be supplied to Apple as an appAccountToken to correlate verified purchase evidence with the correct accountless customer record. That token is correlation evidence, not a login credential. We retain cryptographic hashes of signed transaction material rather than the raw transaction or renewal JWS after verification.

Support communications

If you contact us, we receive your email address and the contents and metadata of your message. Please do not send passwords, private keys, access tokens, or other sensitive credentials.

3. Information kept on your device

The app stores its random device identifier, WireGuard private key, complete WireGuard tunnel configuration, and App Attest key identifier and enrollment status in the iOS Keychain. A shared Keychain tunnel item is available only to the signed main app and packet-tunnel extension and is configured as device-only. Apple manages the App Attest private key, which is not available to us. Apple’s Network Extension preferences hold a persistent Keychain reference and limited non-secret configuration metadata, not the WireGuard private key itself.

The app stores minimal non-sensitive state needed for features such as privacy-disclosure acknowledgement, automatic Premium-promotion timing, safe display-only region caching, and advertising frequency controls. StoreKit and iOS may retain purchase and VPN preference information under Apple’s controls. If advertising is enabled, Google’s User Messaging Platform (“UMP”) may store consent and privacy-choice information on the device.

4. VPN traffic and network processing

When you connect, your device sends encrypted WireGuard traffic to our VPN server. The server decrypts and routes that traffic to its destination and routes responses back to you. This processing necessarily exposes technical network information to the VPN server while the connection is active, including the VPN peer, timing, transfer counters, and destination IP addresses needed for routing. Traffic that uses end-to-end encryption, such as HTTPS, remains encrypted between your device and the destination service; traffic that is not end-to-end encrypted may be readable while being routed.

The current configuration directs DNS requests through the VPN to Cloudflare’s 1.1.1.1 resolver. That resolver may process DNS request data under Cloudflare’s terms and privacy practices. Websites and online services you visit generally see the VPN server’s public IP address rather than your home or mobile public IP address.

The Service’s application and customer database are not designed to log or persist VPN traffic contents, DNS queries, browsing or destination history, or per-user bandwidth history. Current WireGuard runtime state can expose a peer’s most recent handshake time and transfer counters while the Service is operating, but the application does not write those values to the customer database.

A VPN does not make you anonymous. Your internet provider can see that you connect to a VPN server; destination services can collect information directly from you; and apps, websites, cookies, fingerprinting, account sign-ins, malware, and other technologies can identify or track you independently of the VPN.

5. Operational, security, website, and diagnostics data

Our API disables its ordinary per-request access log, and the current reverse-proxy configuration does not enable a separate HTTP access log. Warning and error diagnostics are retained for reliability, security, fraud prevention, and incident response. Diagnostics are designed not to include request bodies, authorization credentials, WireGuard keys, VPN traffic contents, DNS queries, browsing destinations, or per-user bandwidth.

Firewall, operating-system, hosting, and network systems may process or log metadata such as source and destination IP addresses, ports, protocols, timestamps, blocked connection attempts, requested paths, and errors. The VPN endpoint and hosting provider necessarily process your source public IP address to establish and maintain a connection, although the customer database does not contain a customer source-IP field.

Our website is static and does not intentionally include our own analytics, advertising tags, login, payment form, or contact form. Website, DNS, security, and email-routing providers may process ordinary delivery and security data such as IP address, browser or user-agent information, requested page, timestamp, email-routing metadata, and security signals.

We have not integrated a separate first-party analytics or crash-reporting service. Apple, and Google if advertising is activated, may collect diagnostics under their own platform and SDK practices.

6. Advertising and consent

Current preparation status: advertising is disabled while launch configuration and consent testing are completed. Google Mobile Ads and Google’s User Messaging Platform (“UMP”) are included only in the main app; they are not included in the packet-tunnel extension.

Intended launch operation: only users whose subscription state is authoritatively confirmed as Free may be eligible for advertising. A labeled banner may appear on the visible Home screen while the VPN is disconnected. An occasional interstitial may appear only after a user-requested disconnect has completed and the app already shows that the VPN is disconnected. Ads do not delay or control connection or disconnection. Premium users receive no ads. Users whose subscription state is loading or unavailable receive no ads, and no ad is shown while the VPN is connected, connecting, disconnecting, preparing, or in recovery.

We do not intentionally provide Google or participating advertising technology providers with VPN traffic contents, DNS queries, browsing destinations, WireGuard configuration or keys, App Attest private-key material, or activity derived from traffic passing through the VPN. This distinction does not mean that Google processes no information. Ordinary ad requests and SDK operation may involve the device’s IP address and IP-derived approximate location, device or advertising identifiers when available, ads viewed, interactions with ads and the app, crash information, performance data, and other delivery, measurement, fraud-prevention, security, and diagnostic information. Google and participating providers process that information under their own notices. Learn more about how Google uses information from apps that use its services.

The intended launch strategy is contextual and does not request App Tracking Transparency permission or intentionally use Apple’s advertising identifier. Google’s publisher first-party identifier is disabled. If a later configuration would constitute tracking under Apple’s rules, we will update this policy and the App Store privacy disclosures and obtain App Tracking Transparency authorization before accessing tracking data. Refusing optional advertising consent will not block the legitimate Free VPN experience.

Where required, UMP requests current consent information before any ad request, presents the applicable Google-certified privacy message, identifies participating advertising technology providers, and determines whether ads may be requested. When UMP requires it, the app presents a visible “Privacy and cookie settings” control so you can review or withdraw choices. Withdrawal does not affect processing that lawfully occurred before withdrawal. If UMP does not permit an ad request, the app fails closed and the VPN remains usable.

7. How and why we use information

We use information to provide and maintain the Service; establish, operate, reconnect, and revoke VPN access; allocate internal VPN addresses; manage regions and devices; verify app integrity; prevent replay, fraud, abuse, and conflicting registrations; verify Apple subscription status and provide purchased features; recover incomplete operations; diagnose errors; maintain backups; respond to support requests; enforce our terms; and comply with legal obligations.

Where applicable law requires a legal basis, we process information as necessary to perform our agreement with you and provide the Service you request; for our legitimate interests in securing, maintaining, troubleshooting, and preventing abuse of the Service, balanced against your rights; with consent when required, including for certain advertising or device-storage activities; and to comply with legal obligations or establish and defend legal claims.

We do not sell VPN traffic contents, DNS queries, browsing destinations, WireGuard keys, or App Attest private-key material. We do not use or disclose those categories for advertising, marketing, analytics, or user profiling. If advertising is activated, the advertising data described in Section 6 may be considered a “sale,” “sharing,” or use for targeted advertising under some privacy laws even when no money is paid for the data; applicable choices will be provided as required.

8. Service providers and other disclosures

We use providers to operate, secure, distribute, support, and, if separately approved, monetize the Service:

• Apple, for iOS and iPadOS, App Store distribution, StoreKit subscriptions, App Attest, Keychain, and Network Extension;
• DigitalOcean, for API and VPN-server hosting;
• Cloudflare, for domain, website delivery or proxying, email routing, security services, and the configured 1.1.1.1 DNS resolver; and
• Google and participating advertising technology providers, only if advertising and consent services are activated as described in Section 6. The applicable providers will be identified in the UMP privacy message and associated provider list.

We select and configure service providers under terms and controls intended to require protection of information consistent with this policy and applicable law. Their services may process information in countries other than your own and are also governed by their own privacy notices. We may disclose information when reasonably necessary to comply with law or valid legal process; protect users, Jarski LLC, or the Service; investigate fraud, abuse, or security incidents; enforce agreements; or complete a merger, financing, reorganization, or transfer subject to applicable legal requirements.

9. Retention

We use the periods and criteria below for Jarski-controlled systems. A documented legal hold, active dispute, unresolved refund, fraud or security investigation, accounting or tax duty, or valid legal process may extend only the affected fields and record for as long as that exception requires.

• Active customer, installation, device, VPN configuration, connection, lifecycle, App Attest, and entitlement records are kept only while the related service, installation, device, connection, or subscription remains active or restorable.
• After revocation or a completed deletion request, minimized VPN lifecycle and App Attest security/replay evidence is kept for 12 months. Raw App Attest public keys and receipts are erased during verified deletion, and WireGuard public keys are replaced with keyed pseudonyms. The remaining record cannot authorize a connection or assertion. Active App Attest replay protection continues through the current key’s monotonic counter and does not depend on this historical record.
• One-time App Attest and authorization challenges expire after five minutes and are removed within 24 hours after expiry. Development-only token grants are removed after expiry plus 24 hours.
• Minimum normalized StoreKit transaction, subscription, ownership-link, entitlement-history, notification, refund, and signed-payload-hash evidence is kept while a subscription is active or restorable and then for three years after the latest related purchase, renewal, expiration, revocation, refund, dispute, or customer relationship. A specific unresolved refund, dispute, fraud or security investigation, legal hold, or legal obligation may require limited additional retention of the affected record. Raw transaction and renewal JWS values are not kept after verification. Separate company accounting or tax records are maintained without unnecessary VPN, installation, device, or security linkage wherever technically practical.
• Privacy-request cases, decision records, response summaries, and deletion tombstones are kept for three years after closure. Ordinary support communications are kept for 12 months after the support case closes.
• Jarski-controlled system warning, error, firewall, and security diagnostics are kept for no more than 14 days. Infrastructure providers may maintain their own limited security and delivery records under their notices and settings.
• Local integrity-checked database backups are kept for 30 days. Offsite database backups are disabled for the initial v1.0 launch, so no offsite database recovery objects are created or retained. Deployment-specific rollback copies may be kept only while a referenced release or unresolved recovery dependency remains.

Deletion from an active database does not rewrite an existing backup immediately. We maintain a restricted deletion tombstone so the deletion is reapplied before any restored database can become active. Records that no longer meet a retention purpose are deleted or de-identified.

10. Security

We use technical and organizational measures intended to protect information, including HTTPS, WireGuard encryption, iOS Keychain storage, device-only Keychain accessibility, App Attest verification, short-lived single-use challenges, replay counters, restrictive server permissions, firewall controls, database constraints, limited logging, integrity-checked backups, and separate development and production configurations. The app does not send its WireGuard private key or App Attest private key to us. No system is completely secure, and we cannot guarantee absolute security.

11. Your choices and privacy rights

You can stop VPN processing by disconnecting the tunnel and stop future app activity by deleting the app. Deleting the app does not delete server-side records or cancel an Apple subscription. You can manage or cancel a subscription through your Apple Account and use Restore Purchases in the app when available.

Where UMP reports that privacy options are required, the app provides a “Privacy and cookie settings” control to review or withdraw applicable consent choices. Refusing or withdrawing optional advertising consent does not block the legitimate Free VPN experience. Applicable U.S. state law may also provide a right to opt out of a sale, sharing, or targeted advertising, or to limit certain uses of sensitive information.

Depending on the law that applies to you, you may have rights to request access, correction, deletion, or an appeal. Contact support@vpnfastunlimited.com. We aim to respond within 30 days and always within the period required by applicable law.

Because the Service is accountless, an email address or possession of a customer, installation, device, or transaction identifier alone does not prove authority over service data. The preferred process is to submit an access request, Reset This Installation request, or Delete My Service Data request inside the installed app. The app uses a fresh, request-specific App Attest assertion to authenticate the intake and create a verified case; a trained operator then manually reviews, approves where appropriate, and fulfills the request. The request does not trigger immediate automatic deletion. If you cannot use the installed app, email us so we can explain whether another secure verification method is available. We will not delete another installation or attach a subscription based only on an email or copied identifier.

Reset This Installation revokes and minimizes records for that verified installation while preserving subscription ownership and other installations. Delete My Service Data revokes all VPN access associated with the verified accountless customer and minimizes direct cryptographic material. Neither action cancels Apple billing. Restricted, purpose-limited records may remain for the periods in Section 9 for subscription ownership, refunds and accounting, fraud and replay prevention, security, legal compliance, disputes, or legal claims. We will explain the actual deletion or minimization performed, the result, any retained categories, and any limitation when responding.

12. Processing locations

The initial v1.0 Service is offered in the United States and Jarski LLC operates in the United States. Apple, DigitalOcean, Cloudflare, Google, and participating advertising technology providers may process information in the United States and in other countries where they operate. Their processing is also governed by their own privacy notices and contractual terms. International expansion of the Service will require a separate review and an update to this policy where appropriate.

13. Children’s privacy

The Service is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. Different or higher age and parental-consent requirements may apply in some locations. If you believe a child has provided personal information, contact us so we can review the circumstances and take appropriate action. Before advertising is activated, the App Store age rating, audience settings, and Google child-directed and under-age treatment settings must match the audience actually selected for distribution.

14. Changes to this policy

We may update this policy as the Service, providers, data practices, or legal requirements change. We will post the revised policy, update its effective date, and provide any additional notice or obtain consent when required. We will update the policy before enabling a materially different data practice.

15. Contact

For privacy questions or requests, contact:

Jarski LLC
Email: support@vpnfastunlimited.com

Do not send passwords, private keys, access tokens, complete Apple signed transactions, or other sensitive credentials.