Privacy policy

The app is published by its developer, shown as the seller on the App Store, who is the data controller for the information described here. Contact: [email protected].

• Your email address and password, to create your account and sign in. The password is sent to our server over an encrypted connection, stored only as a salted hash, and never kept on the iPhone. We email you once to verify the address, and when you ask to reset the password.
• Profiles you create in the app: their name, start page and proxy settings.
• The password you enter to confirm deleting your account.

• Sign-in tokens issued by our server, kept in the iOS Keychain on your iPhone.
• A random identifier the app creates for this iPhone, and the iPhone’s name, so the device can be listed in your account and a profile is open on one device at a time.
• Session data of your profiles: the cookies and site storage of websites you use in a profile. They are stored in your account so the profile stays signed in on your other devices, and encrypted on our server. You can turn saving off in the app’s settings.

The app does not collect your browsing history, page contents, location, contacts, photos or advertising identifiers. It contains no analytics, crash reporting or advertising software, and it does not track you across other companies’ apps or websites.

Pages you open are loaded by Apple WebKit and are covered by those websites’ own privacy policies. When a profile uses a proxy, that profile’s traffic goes through the proxy server you or your account chose; its operator can see that traffic and has its own terms.

• To provide the app and your account: necessary for our agreement with you (GDPR Article 6(1)(b)).
• To keep the service secure and prevent abuse, for example rate limits on sign-in: our legitimate interest (Article 6(1)(f)).
• To meet legal obligations, for example accounting records: Article 6(1)(c).

We do not sell or share your data for advertising. It is processed only by providers that run the service for us:

• Hetzner Online GmbH: hosting of our servers and database.
• Cloudflare, Inc.: network delivery and protection of our website and API, and sending account emails (verification and password reset).

Some of these providers may process data outside the European Economic Area and the United Kingdom, including in the United States; such transfers rely on the European Commission’s Standard Contractual Clauses. We may also disclose information when the law requires it.

• Account data, profiles and session data: until you delete them or your account.
• Sign-in tokens: up to 45 days, or until you sign out.
• Data on the iPhone: until you sign out, delete your account or remove the app. Signing out removes the profiles’ cookies and site data from the iPhone.
• Support emails: up to 2 years.

In the app open Settings and tap Delete account. Your account, profiles, proxies, session data and devices are deleted right away. Records of completed payments are kept only as long as accounting law requires, without your email. You can also ask us by email.

Depending on where you live, including under the GDPR and UK GDPR, you can ask to access, correct, delete or receive a copy of your data, to restrict or object to its processing, and you can complain to your data protection authority. Write to [email protected] and we will reply within 30 days.

All connections use TLS. Passwords are hashed, session data is encrypted at rest with AES-256-GCM, and sign-in tokens on the iPhone are kept in the Keychain. No system is perfectly secure, but we work to protect your data and will inform you of a breach as the law requires.

The app is not directed to children under 16, and we do not knowingly collect their data. If you believe a child has given us information, contact us and we will delete it.

If this policy changes, we will post the new version here with a new date above.

[email protected] · See also the terms of use.