Flux VPN Privacy Policy

1. What data we collect

We collect only the minimum amount of data necessary to provide and support the Service.

• A persistent pseudonymous installation identifier, plus the platform, operating-system version, app version, app build, and distribution channel, used to authenticate the device and provide service access
• Connection diagnostics: selected VPN transport and node, connection lifecycle events, elapsed time, aggregate sent and received byte counts, generic error codes, and app version
• A signed Apple AppTransaction and device-verification identifier, processed to verify a genuine App Store installation and not retained after verification
• The message and related technical details that a user voluntarily submits to support
• If you sign in on fluxvpn.pro or in the app: your email address, the devices and Flux Pro keys you link to the account, and a browser sign-in record kept for up to 30 days
• If you sign in with Apple in the app: the Apple sign-in identifier of your account (Flux does not request your name or email from Apple)
• The amount of traffic through Flux servers per day, counted on the device and reported for the daily allowance, without site addresses or traffic contents
• The device's push-notification token, used to deliver notifications such as support replies, and records of consent to news and special offers: whether it is on for push notifications and for email, when and where in the app it was given or withdrawn, and the version of the consent text (the consent log keeps a hash of the email address, not the address)

• Browsing history
• Internet traffic contents
• A copy of DNS requests in Flux databases
• Browsing or application-activity logs
• Advertising identifiers or behavioural profiles
• Location data
• Detailed browsing analytics, ad tracking, or behavioral profiles

Flux VPN does not inspect, analyze, record, or store the contents of user internet traffic, browsing history, or destination history.

2. How we use data

Collected information is used only for the following purposes:

• User authentication
• Provisioning and maintaining the VPN connection
• Detecting connection failures, maintaining route reliability, and protecting the service from abuse
• Responding to support requests that the user chooses to send
• Sending news about the service and special offers by push notification or email, only to users who turned this on in the app

We do not sell data and do not use it for third-party advertising or cross-app tracking. Consent to news and special offers is separate for push notifications and for email, off by default, and never a condition of using the service. It can be withdrawn at any time in the app (Settings > News and offers), by replying to one of these emails with a request to unsubscribe, or by writing to us; after that we send no more such messages. We use the processors described below only to operate the service.

3. VPN service and encryption

Flux VPN provides encrypted VPN connections using modern protocols and industry-standard cryptographic practices.

All traffic transmitted through the VPN tunnel is encrypted. Flux VPN does not retain traffic contents or browsing history. DNS resolution is provided through encrypted resolvers as described below.

4. Third-party services

Flux stores the installation identifier, device metadata, access tokens, and connection diagnostics in its service infrastructure to authenticate the device, deliver a VPN configuration, and operate the service. DNS queries are resolved over encrypted connections by Cloudflare (1.1.1.1) or Google (8.8.8.8); those providers process the DNS request and connection metadata under their own policies. The app also makes a limited Cloudflare request when checking that a newly started tunnel can carry traffic.

Apple provides the signed AppTransaction used to verify App Store installation. If a user sends feedback, Flux forwards the submitted message and related technical details to its support notification channel through the Telegram Bot API. This is voluntary; users should not include passwords, payment-card data, or other confidential information. We do not use advertising SDKs or third-party profiling SDKs.

Apple provides Sign in with Apple and delivers push notifications on iPhone and Mac; Google Firebase Cloud Messaging delivers push notifications on Android. Sign-in codes and emails about news and offers are sent from support@fluxvpn.pro through Flux's email provider.

5. Children’s privacy

Flux VPN is not intended for children under 13. We do not knowingly collect children’s personal data.

6. Data retention

Connection diagnostics are deleted by a daily retention job after 30 days. Voluntary support reports are deleted from Flux systems within 7 days. Device and access records are retained only while needed to provide the service or comply with legal obligations. Traffic contents, browsing history, and destination history are not stored by Flux.

Daily traffic counts are deleted after 31 days. Consent to news and special offers lasts until it is withdrawn; deleting the account deletes the email consent given in the app. The consent log is kept as long as needed to show that consent was given.

7. Data deletion

Users can request deletion of their data at any time.

After identity verification, all related device identifiers, auth tokens and associated server data will be permanently deleted within 30 days.

8. Security

We apply reasonable technical and organizational measures to protect user data from unauthorized access, alteration or disclosure.

9. Policy changes

This Privacy Policy may be updated from time to time. The latest version is always published on this page.

10. Contact information

For general questions related to the service, you can visit: fluxvpn.pro