1. Introduction
CalmLink VPN (referred to as "we") respects and protects your privacy. This Privacy Policy explains what information we collect, how we use it, and — importantly — what we never collect. The Service is designed around the principle of minimal collection: we only collect what is necessary to provide the connection service. We do not collect, log, or sell your online activity.
Service availability notice: This Service is available to users in all regions. The Service is designed around the principle of minimal collection, and we do not store, log, or share your IP address or geolocation.
2. Information We Collect
2.1 Public Server Catalog Metadata
When the app connects, it fetches public server metadata from the server catalog service, including: server identifier, country, city, region code, plan tier (free / pro), and speed-test endpoints used for latency measurement. This information is all public, static information and contains no personally identifiable information and no server credentials.
2.2 Connection Latency Measurements
To help you automatically select the best available server, the app measures connection latency against servers in the catalog. Measurement results are used only for the current server selection and are not uploaded, retained, or linked to your identity.
2.3 App Filtering Configuration (Stored Locally)
The "App Filter" feature in the app lets you choose which apps route through the VPN. This configuration is stored only on your device and is never uploaded to our servers.
2.4 Subscription Information (Processed by Third Parties)
Paid subscriptions are managed by RevenueCat. Your subscription status, purchases, and purchase restoration records are processed by RevenueCat; payment transactions themselves are completed by the app store (Google Play / App Store). We never directly collect or store your card or payment account information.
2.5 Feedback You Voluntarily Submit
If you choose to submit feedback through the in-app Help & Feedback form, we collect the information you voluntarily provide, including the feedback category (issue), your message content, your app version, and your system language. This information is stored in a Cloudflare Workers KV database (the "FEEDBACK_KV" namespace) and is used solely to respond to your feedback and to improve the Service. Feedback records are accessible only through a token-protected admin endpoint and are retained until we manually delete them; we do not use them for any other purpose, and we do not automatically collect your device identifier, IP address, or other personal information as part of the feedback form.
3. Information We Never Collect
This is the core commitment of the Service:
- We do not collect your browsing history, websites visited, or domains accessed;
- We do not monitor or log the content, senders, or recipients of your traffic;
- We do not log the content of your DNS queries;
- We do not log your source IP address, connection timestamps, or session duration;
- We do not sell, rent, or share your personal data with any third party for advertising targeting.
In short: we do not track what you do online. Your traffic content travels through an encrypted tunnel; we cannot read it and do not attempt to.
4. Advertising (Google AdMob)
The Service may display ads through Google AdMob. Advertising is provided by Google, which may process information related to ad delivery, such as device advertising identifiers and ad interaction records. Please refer to Google's Privacy Policy (https://policies.google.com/privacy) for details. You can reset or restrict your advertising identifier in your device's system settings. We do not provide your online activity data to advertising providers. Where required by law (for example, in the EU/EEA and the UK), ads are only served after you have been presented with a consent choice through Google's User Messaging Platform; if you do not consent to personalized advertising, only non-personalized ads will be shown.
5. Third-Party Services
- Google AdMob: ad delivery; may process device advertising identifiers and ad interaction records per Google's Privacy Policy. In the EU/EEA and the UK, personalized advertising requires your consent (see section 4);
- RevenueCat: subscription management and purchase verification; processes an anonymous device identifier and your purchase / subscription records to verify subscription entitlements (see section 2.4);
- Cloudflare: hosting platform for this page and the server catalog service, and storage of feedback you voluntarily submit (see section 2.5).
These third parties each have their own privacy policies. We are not directly responsible for their practices, and we recommend you review their policies when necessary.
6. Data Storage and Security
- Your local configuration (such as the app filter list and terms consent status) is stored only on your device and can be cleared at any time from within the app;
- Communication between the app and our servers uses encrypted transport (TLS / VPN encrypted tunnel);
- Apart from feedback you voluntarily submit through the in-app form (see section 2.5), we never upload any user personal data to cloud storage.
7. Children's Privacy
The Service is intended for adults and is not directed at children under 13 (or the higher minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have inadvertently collected a child's information, please contact us immediately and we will delete it promptly.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Updated policies will be posted on this page with an updated effective date. We will notify you of material changes through in-app notices or similar means. Your continued use of the Service after the policy is updated constitutes acceptance of the updated policy.
9. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at: support@cctik.com.