VPN SuperLegal
VPN Super Privacy Policy
This policy explains what information VPN Super handles, why, who receives it, how long it is kept and the choices you have. It describes what the app actually does in its code. Where we cannot verify something (for example what a hosting provider logs), we say so instead of making a promise.
In short
- There are no accounts, no sign-up and no payments. The app does not ask for your name, email, phone number, contacts, photos, location or microphone.
- When the VPN is on, your internet traffic goes through the VPN server you chose. That server necessarily handles your device's IP address and the traffic you send in order to forward it.
- The app does not record which websites you visit and has no analytics or crash-reporting service. We do not claim a "no-logs" policy for the servers; see section 3.
- The app is free and shows non-personalized ads from HUAWEI Ads (Petal Ads). The HUAWEI Ads SDK collects device and network data, including an advertising identifier and IP address; see section 5.
1. Information stored only on your phone
VPN Super keeps the following in the app's private storage on your phone. It is not sent to us:
- The server list downloaded from our server-list service (section 4). It contains the server addresses and the connection settings the app needs. It is stored encrypted with a key held in the Android Keystore.
- Your settings: the location you selected, whether to connect when the app opens, whether IPv6 is routed, whether you have seen the VPN permission explanation, and the list of apps you chose to exclude from the VPN (split tunnelling).
- Connection state needed while the VPN runs (for example which server is connected and since when), and the most recent delay measurements shown in the Locations list.
To let you choose apps for split tunnelling, the app reads the names of apps that have a launcher icon on your phone. This list is shown to you on the device and is never uploaded. The app's data is removed when you uninstall it or clear its data in Android settings. The app disables Android cloud backup of its data, so the server list and settings are not copied to a backup service.
2. How the VPN handles your traffic
When you connect, the app creates a VPN interface using Android's VPN service. Unless you exclude an app with split tunnelling, your device's internet traffic is sent through the VPN engine (the open-source Xray core) to the VPN server you selected, or the one the app selected with Fastest available. The server forwards your traffic to its destination, so the websites and apps you use see the server's IP address instead of yours.
- DNS: while connected, domain-name lookups are sent through the tunnel to public DNS resolvers, Cloudflare (1.1.1.1) and Google Public DNS (8.8.8.8). Those resolvers see the domain names looked up and the VPN server's address, not your device's address. Their own privacy policies apply.
- IPv6 is blocked inside the tunnel unless you turn on Route IPv6, so IPv6 traffic does not bypass the VPN.
- Excluded apps (split tunnelling) connect directly, without the VPN, and are seen with your real IP address.
- Protection between your phone and the server depends on the protocol of the server you use (Shadowsocks, VLESS or Trojan, sometimes carried over WebSocket or TLS). We do not promise that every server encrypts traffic in the same way, and a VPN does not make you anonymous.
- The app itself does not inspect, record or upload the content of your traffic or the list of sites you visit.
3. The VPN servers
The servers in the app are provided through a server list that we operate, and run on rented infrastructure from hosting providers, currently mainly in Germany, the Netherlands and the United Kingdom. Any VPN server must process the following to work:
- the IP address your device connects from, and the time and duration of the connection;
- the traffic you send through it (destinations and data), which it forwards to the internet.
We do not use the servers to build a history of the websites you visit, and we do not sell traffic data. However, the server software and the hosting providers can keep standard technical logs (such as connection times, IP addresses and error messages) for operation, security and abuse prevention. We do not claim a "zero-logs" or "no-logs" policy. Where such logs exist, they are used only to run and protect the service and are not used for advertising.
Because the servers forward your traffic, the websites you visit, your DNS resolver (section 2) and network operators along the way can see traffic coming from the server's address, as with any VPN.
4. Other connections the app makes
| Connection | Why | What the other side receives |
|---|---|---|
| Our server-list service (HTTPS) | Downloads the current list of VPN servers when the app starts or you refresh it | Your IP address, the request time and a generic app identifier in the request header. No device ID or account. |
| Each VPN server (delay test) | Measures delay to show it in Locations and to pick the fastest server | Your IP address and a short test connection |
www.gstatic.com / www.google.com (through the tunnel) | Checks that traffic really flows before showing “Protected”, and while connected | An empty test request from the VPN server's address |
api.ip.sb (through the tunnel) | Shows you the public IP address and country that websites now see | A lookup request from the VPN server's address |
| HUAWEI Ads (Petal Ads) | Loads and measures ads | See section 5 |
The app contains no analytics, crash-reporting or tracking SDK other than the HUAWEI Ads SDK. The app never uploads its own diagnostic messages, and never writes server credentials or your traffic to them.
5. Advertising (HUAWEI Ads / Petal Ads)
VPN Super is free and shows ads from HUAWEI Ads (Petal Ads) using the HUAWEI Ads Kit SDK: a banner at the bottom of the screen and, at most every few minutes, a full-screen ad after you disconnect. Ads are never shown on the VPN permission screen or while the app is connecting.
The app only requests non-personalized ads: ads are chosen from context (such as the app and the ad slot), not from a profile of your interests. To request, show, measure and protect ads, the HUAWEI Ads SDK processes the following and sends it to Huawei, according to Huawei's Data Protection Information About Ads Kit:
- your device's advertising identifier (on Huawei devices, the OAID);
- IP address;
- device information (such as brand and model), operating system information, network type and carrier;
- app information (such as the app name and version) and contextual information about the ad request;
- ad and campaign identifiers and your interactions with ads (views, clicks).
Ad requests made while the VPN is connected travel through the VPN like other traffic. We have removed the “query all installed apps” and “install other apps” permissions that the HUAWEI Ads SDK would otherwise add, and the app does not request location permission. We do not receive this data in a form that identifies you; we only see aggregated reports, such as the number of ads shown.
For this processing outside mainland China, Aspiegel SE (a Huawei company in Ireland) is the data controller for Petal Ads. Huawei's processing and retention are described in the Statement About Petal Ads and Privacy. On devices without HUAWEI Mobile Services, ads usually do not load at all.
6. Permissions
- VPN service (Android asks you to allow the connection the first time): to create the tunnel.
- Internet and network state: to connect, test servers and notice network changes.
- Notifications (Android 13 and newer asks you): to show the VPN status and a Disconnect button while connected. You can refuse; the VPN still works.
- Foreground service: to keep the VPN running while you use other apps.
The app does not request location, contacts, camera, microphone, storage, phone or SMS permissions.
7. Sharing and selling
We do not sell your personal information. Data leaves your phone only as described above: to the VPN server and our server-list service so the VPN can work, to the hosting providers that run those servers, to the DNS resolvers and test endpoints listed in sections 2 and 4, and to Huawei / Aspiegel SE through the ads SDK (and, through Petal Ads, to the advertisers and ad technology partners Huawei works with, as described in Huawei's statement). We may disclose information if required by law.
8. Retention
- On your phone: until you uninstall the app or clear its data.
- Server and server-list technical logs, where kept: only as long as needed for operation, security and abuse prevention, and then deleted or overwritten.
- Advertising data: retained by Huawei according to the Statement About Petal Ads and Privacy. We do not hold copies.
- Emails you send us: only as long as needed to answer them.
9. Children
VPN Super is a general-audience utility and is not directed to children under 13 (or the minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has used the app and data was collected through ads, contact us and we will help, including by explaining how to reset the advertising identifier or delete the app's data.
10. Your rights and choices
Depending on where you live (for example under the EU/UK GDPR or US state laws such as the California Consumer Privacy Act), you may have the right to access, correct, delete or port your personal information, to object to or restrict processing, and to opt out of targeted advertising or the "sale"/"sharing" of personal information, without discrimination.
- Stop all collection by the app: disconnect and uninstall VPN Super.
- Delete data on your phone: clear the app's data in Android settings, or uninstall.
- Advertising identifier: on Huawei devices, reset the OAID or turn off personalized ads in Settings ▸ Privacy ▸ Ads and privacy; on other Android devices, in your device's ads settings.
- Data held by Huawei: use the contact options in the Statement About Petal Ads and Privacy.
- Anything else: email maani1pk@gmail.com. Because there are no accounts, we may need details such as the approximate time and your IP address to find any server-side log entries.
Where GDPR applies, we rely on our legitimate interest in providing and securing the VPN service you asked for and in funding a free app with non-personalized ads, and on performance of the service you requested when you connect. If you are in the EEA, UK or Switzerland, you can complain to your local data protection authority.
11. International transfers
We are based in Pakistan. The VPN servers run in the countries shown in the app (currently mainly Germany, the Netherlands and the United Kingdom), and the DNS resolvers, test endpoints and Huawei's ad service may process data in other countries, including the United States and the EU. Huawei states that Petal Ads data for users outside mainland China is handled by Aspiegel SE in Ireland.
12. Security
The server list is downloaded over HTTPS and stored encrypted on your phone; the app trusts only system certificate authorities and does not allow unencrypted connections for its own requests. The VPN status between the app and its tunnel process is protected so that other apps cannot read it. No method of transmission or storage is completely secure, and we cannot guarantee the security of traffic between a VPN server and the websites you visit.
13. Changes to this policy
If we change how the app handles data, we will update this page and the effective date above before the change reaches the app.
14. Contact
Abdur Rehman Arshad, trading as Abdur Studio, Lahore, Pakistan
Email: maani1pk@gmail.com
This website itself sets no cookies and uses no analytics or third-party scripts.