cat privacy-policy.md
We run a no-logs VPN. We do not record the websites you visit, your DNS queries, or the contents of your traffic — not now, not ever. We keep only the minimum needed to run the service: who bought a pass, which country was selected, and how many bytes moved (for billing and abuse prevention). Every session ends with a privacy receipt confirming this.
01. Who we are
Tiger VPN ("Tiger", "we", "us") is operated by Inspired Technologies, based in Canada. This policy explains what we collect, why, and your rights. It applies to the Tiger Fast VPN iOS app and the tigervpn.io website.
Contact: privacy@tigervpn.io
02. What we collect
Account & identity
- Guest ID — a random device-bound identifier so you can use Tiger without an account.
- Email address — only if you choose to sign in (Apple, Google, email, or phone via Firebase Authentication).
Payment
- Passes are purchased through Apple and/or Stripe. We receive a confirmation that a payment succeeded and the pass type purchased.
- We never see or store your full card number — that is handled by the payment processor.
Minimal connection metadata
- Selected country / server for the session.
- Total bytes transferred in the session (aggregate only) — used for billing integrity and to detect abuse.
- Session timestamps — when a pass started and ended.
Diagnostics (optional)
- Crash and basic performance data to keep the app stable. This never includes your traffic.
Browsing history · websites or apps used · DNS queries · the contents of your traffic · a log tying your identity to your activity. The VPN tunnel is not inspected or recorded.
03. How we use what we collect
- To activate and run your VPN session and enforce its expiry.
- To process payments and prevent fraudulent or abusive use of passes.
- To provide support when you contact us.
- To keep the app secure, stable, and working.
We do not sell your personal data, and we do not use your traffic for advertising or profiling.
04. Who we share with
We share only with service providers who help us operate, under contract and only for that purpose:
- Apple / Stripe — payment processing.
- Cloud & server providers (e.g. Google Cloud, Vultr, Hetzner) — hosting the API and VPN servers.
- Firebase — authentication and push notifications, if you opt in.
We may disclose information if required by valid legal process — but we cannot produce activity logs we do not keep.
05. Retention
- Aggregate session metadata is kept only as long as needed for billing and abuse prevention, then deleted or anonymized.
- Account data is kept while your account is active; delete your account to remove it.
- Payment records may be retained as required by tax and accounting law.
06. Your rights
Depending on where you live (including under GDPR, UK GDPR, CCPA/CPRA, and Canada's PIPEDA) you may:
- Access, correct, or delete your personal data.
- Request a copy (portability) of your data.
- Object to or restrict certain processing.
- Withdraw consent at any time.
To exercise any right, email privacy@tigervpn.io. We do not discriminate against you for exercising your rights.
07. Security
- Traffic is encrypted with the WireGuard protocol.
- Your private key is generated on your device and stored in the iOS Keychain — it never leaves your phone.
- Internal services run on a private network and are access-controlled.
08. Children
Tiger VPN is rated 17+ and is not directed to children under 13 (or the minimum age in your region). We do not knowingly collect their data.
09. International transfers
To provide a global VPN, your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
10. Changes
We may update this policy. Material changes will be reflected by the "last updated" date above and, where appropriate, in-app notice.
11. Contact
Inspired Technologies — Tiger VPN
18 John St, Toronto, ON M5V 0E9, Canada
Privacy: privacy@tigervpn.io · Support: support@tigervpn.io
This document is provided as a clear, good-faith template that reflects how Tiger VPN is built. Have it reviewed by qualified counsel before relying on it for your specific legal obligations.