Privacy Policy
BXR VPN (“BXR”, “we”) is operated by [Owner name]. This policy explains what the BXR app and service collect, why, and how long we keep it. In short: we don’t log what you do online.
What we never collect
- The websites, apps and services you use through the VPN, and the content of your traffic.
- Your DNS queries.
- The IP address you connect from. Our servers don’t keep access logs.
- Your name, email address or payment details.
What we keep, and why
- Apple account identifier. When you sign in with Apple, Apple gives us a random identifier that is unique to our app. We use it to recognise your account. If Apple also shares your name or email address, we don’t store them.
- Subscription status. Apple’s transaction identifiers for your subscription, the plan, and when it renews or ends, so we know whether it is active. Apple handles payments; we never see your card.
- Your devices. For each device: its VPN public key (created on your device; the private key never leaves it), the device name shown in the app, when it was added, when it last asked for a connection, and which server and internal tunnel address it uses. We need this to connect your devices and apply the device limit.
- Sign-in sessions. A random session token, stored only in hashed form.
On our VPN servers
Our VPN servers use AmneziaWG, which is based on WireGuard. Like any WireGuard server, they keep in memory, for each active device key, the time of the last handshake and the number of bytes sent and received, because the protocol needs it to work. We don’t save or log this information. Many users share each server’s IP address.
While you are connected, your DNS queries are sent from our server to Cloudflare’s public resolver (1.1.1.1). Cloudflare sees our server’s address, not yours. See Cloudflare’s resolver privacy policy.
Service providers
- Apple: Sign in with Apple and App Store payments.
- DigitalOcean: hosts our servers in the United States, Canada, the United Kingdom, the Netherlands, Germany, Singapore and Australia. Account data is stored in Germany.
- Cloudflare: resolves domain names for traffic through the VPN.
We don’t sell your data or share it for advertising. The app has no ads, analytics or tracking.
How long we keep it
Until you delete your account. In the app, open Settings → Delete account. This immediately deletes your account, devices, sessions and subscription records, and removes your device keys from our VPN servers within minutes. Copies can remain in our automatic database backups for a short time until those backups are replaced. Unused sign-in sessions expire after 180 days.
Deleting your account doesn’t cancel your Apple subscription. Cancel it in your Apple ID subscriptions.
Your rights
You can ask for a copy of your data, or ask us to correct or delete it, by writing to support@bxrvpn.dev. Depending on where you live, for example under the GDPR, you may have further rights, including the right to complain to your data protection authority.
Children
BXR isn’t directed at children under 13, and we don’t knowingly collect their data.
Changes
We will post any changes on this page and update the date above.
Contact
[Owner name], [Country]. Email: support@bxrvpn.dev