Who is responsible?

KP Bytes B.V. operates YoucanVPN and is responsible for the processing described here. Contact us about privacy or support at [email protected].

The app-specific sections of this notice describe the Apple applications; the website is described separately below. It does not claim that every statement about the updated iOS consent flow also applies to older releases or to other platforms.

Data used to provide a VPN connection

To request connection credentials and determine access, the application sends our API a randomly generated installation identifier, the selected country, the access type (for example, subscription or ad-supported access), the operating-system identifier and the app version. Our API and VPN endpoint necessarily receive the source IP address of the connection. Temporary credentials and session information are processed to establish and operate the VPN.

The VPN endpoint processes network traffic to route the connection. We do not persistently store user or connection data on our API or VPN servers, and temporary VPN-session data, including the source IP address, is deleted when the VPN session ends. We do not retain VPN browsing-history or traffic-content logs. See the retention section for the distinction between our servers, information kept on your device, and external providers.

Why this information is processed

We use the connection information to issue credentials, select the requested endpoint, establish the connection, and determine which access is available. The app also checks service settings and supported app versions and obtains the available-country list.

Providing the service you request is separate from optional advertising. Where consent is required for a particular activity, we request it through the relevant app or system controls; merely opening a policy or continuing to use a website is not advertising or tracking consent.

Information stored on your device

The application keeps information such as the installation identifier, selected server, preferences, consent choices and remaining trial or rewarded-access time in device storage. Connection credentials may be kept in Apple's Keychain so the system VPN service can access them. Subscription status is checked through Apple's purchase services.

Some of this information remains between connections and application launches. Disconnecting the VPN is not a command to erase local settings, Keychain items, or Apple's purchase history.

External services and recipients

• Google Firebase Remote Config: provides app settings and supported-version checks. It processes installation identifiers and technical information needed for that service. Firebase Analytics collection is deactivated in iOS version 2.6.0 (build 3). This is not a statement that Firebase Remote Config processes no data. See Firebase privacy information.
• FlagCDN (flagcdn.com): supplies country-flag images in the iOS app. Image requests disclose the requesting IP address, the requested country image and technical request information to that service.
• Google AdMob and User Messaging Platform: provide optional advertising and advertising-consent choices in the iOS app, as explained below.
• Apple: processes App Store purchases, subscription renewal and restoration under its own terms and privacy policy. The app does not receive your payment-card details.

The app does not supply VPN traffic contents or browsing history as custom input to these SDKs. This does not mean that the providers receive no technical or advertising data through their own requests. Provider processing is described in their applicable service terms and privacy notices.

Optional advertising and tracking on iPhone and iPad

In iOS version 2.6.0 (build 3), an advertising request starts only after you choose the ad-supported option, accept the separate advertising-data explanation, and complete any required Google consent choices and Apple App Tracking Transparency decision. Advertising is not initialized at app launch in that version.

Google's Mobile Ads SDK may process an IP address (including an approximate location inferred from it), device or app identifiers, diagnostic and performance information, advertisements seen, video views and interactions. These are used for ad delivery, measurement and related SDK purposes. See Google's SDK data disclosure and Google's Privacy Policy.

Cross-app tracking or access to the advertising identifier requires Apple's separate permission where applicable. If ATT permission is denied or restricted, the updated app requests non-personalized ads rather than using that permission as a condition of paid VPN access. Non-personalized ads can still involve technical data, contextual information, frequency limits and ad reporting; they are not a promise of zero data collection.

The reward is for completing an eligible advertisement, not for granting tracking permission. Ad availability and required consent choices can affect whether a rewarded ad is available. A subscription and restoration of purchases do not require advertising or tracking consent.

The native Mac application does not include AdMob advertising. Older iOS versions may have a different startup and consent sequence; the flow described above is specific to the identified updated build.

Purchases, support and notifications

Apple handles payment and renewal. The application receives purchase or entitlement information needed to determine subscription access and restore purchases. Disconnecting the VPN or deleting the app does not cancel a subscription; manage subscriptions through your Apple Account.

If you voluntarily contact support, we receive the content you send and the contact details supplied by your email or support service. Send only information necessary for your request; do not send passwords, private keys or unnecessary VPN traffic data. Support correspondence is separate from the temporary VPN session.

Connection or access-reminder notifications are controlled through the app and operating-system notification settings. Permission for notifications does not itself authorize advertising tracking.

Retention and deletion

Our API and VPN servers: we do not persistently store user or connection data. Temporary data needed for an active VPN session is deleted when that session ends, including when the connection is disconnected. We do not keep VPN activity or traffic-content logs after a session.

Your device: preferences, an installation identifier, access-time balances, consent records and credentials can remain locally between sessions. Their existence does not mean that a VPN browsing history is stored on our servers.

External providers: ending a VPN connection does not automatically erase information already processed by Google, Apple, FlagCDN, or your email provider. Their retention is governed by the applicable service terms, privacy notices and configurations. Where a provider processes information on our behalf, contact us to exercise your rights and we will handle the request as applicable.

Support communications: messages voluntarily sent to support are not VPN-session logs and are not automatically deleted at VPN disconnect. We retain them only as necessary to handle the request and any applicable legal obligations. Contact us for a deletion request.

Website resources, analytics and cookie choices

The website and its hosting and content-delivery services process the requesting IP address, requested page or resource, and browser or technical request information to deliver the site. The site also uses externally hosted resources, including fonts, JavaScript libraries and flag images. These resource providers can receive request information even if you decline optional Google Analytics. This notice does not claim that website or provider logs are erased by disconnecting the VPN.

Optional website analytics: the updated site loads Google Analytics only after you explicitly choose “Accept analytics”, or on a later visit while that choice remains saved. Analytics can process website page views, interactions, browser/device information and cookie identifiers to measure website usage. Google receives technical request information when the tag is loaded. Google advertising signals and ad-personalization signals are disabled in this website tag configuration. See Google's Privacy Policy.

You can choose “Decline analytics” without losing access to the website. Use “Cookie settings” in the footer or on a legal page to change your choice. Withdrawing consent disables this website's Analytics tag, clears accessible first-party Analytics cookies and reloads the page to unload the tag. It does not erase data previously processed by Google. Other open pages check updated choices when notified or brought back into view.

The first-party cookie youcan_analytics_v1 records only “accepted” or “denied” for up to 180 days. It is used to remember your choice, not as an analytics identifier. The old “continue using the site” notice is not treated as permission for the updated analytics flow. If your browser cannot save a changed choice, the updated page keeps analytics off and shows a warning; you may need to clear site cookies in browser settings to remove a previously saved acceptance. Analytics and provider retention depends on the applicable service settings and terms; no particular Google retention period is promised here.

Your choices and rights

In the updated iOS app, you can decline the initial service-data explanation; online service actions remain unavailable until you explicitly agree. Advertising is a separate choice. You can revisit advertising privacy settings from the privacy notice on the home screen or from the subscription screen, including after purchasing a subscription. Advertising choices govern subsequent advertising requests; withdrawing a choice does not reverse processing that already occurred.

You can review Apple's tracking and notification permissions in device settings. If you no longer want to use the VPN service, disconnect it and contact us about any data-rights request. Device settings and purchase records may require separate action in the app, operating system or Apple Account.

Depending on applicable law, you may request access, correction, erasure, restriction or portability of your personal data, object to processing, and withdraw consent where processing relies on consent. Withdrawal does not affect the lawfulness of processing before withdrawal. Contact [email protected]. You may also contact the competent data-protection authority. We may need sufficient information to identify and handle a request, without collecting unnecessary information.

Security and the limits of a VPN

The reviewed iOS and native Mac applications use Apple's system IKEv2 VPN facilities to encrypt the connection between your device and the VPN endpoint. This is not a claim that all app traffic uses TLS 1.2, that one fixed cipher is used in every situation, or that every part of the internet path is protected by the VPN.

A VPN does not guarantee complete anonymity, access to every website, or protection from all threats. Information you submit to a destination, and that destination's own tracking or account practices, remain relevant. No transmission or storage system can be guaranteed absolutely secure.

Age and changes to this notice

The service is intended for users over 16, as stated in our Terms of Use, and is not directed to children. If you believe a child has provided personal information, contact us so we can address the matter.

We will update the date when this notice changes and provide additional notice or seek new consent where required. A revised policy does not by itself grant permission for new advertising or tracking activities.

The service and access

YoucanVPN provides access to VPN endpoints and connection controls. Available countries, endpoints and features can change. The reviewed iOS and native Mac apps use Apple's system IKEv2 VPN facilities. Availability, connection quality and access to particular destinations are not guaranteed.

A user-registration form is not required in the reviewed Apple apps. The app uses a random installation identifier and access information to request credentials. Data handling, including deletion of temporary VPN-session data after disconnection, is explained in the Privacy Policy.

Subscriptions and Apple purchases

Apple-platform subscriptions are purchased through the App Store. The available duration, localized price, renewal terms and any introductory offer are displayed in the app and Apple's purchase-confirmation screen. Payment is charged to your Apple Account as described by Apple.

Subscriptions renew automatically unless cancelled through your Apple Account. Manage renewal and cancellation in your Apple subscription settings. Cancelling renewal normally does not end access already purchased for the current billing period. Disconnecting the VPN, removing a VPN configuration or deleting the app does not cancel a subscription.

Use the app's restore-purchases option with the relevant Apple Account. For Apple-billed refund requests, use Apple's refund-request service. Nothing in these Terms excludes mandatory consumer rights or Apple's applicable refund rules.

Ad-supported access and the Mac trial

Where offered in the iOS app, completing an eligible rewarded advertisement adds the access time shown in the app. The present offer is two hours per completed eligible advertisement. Ad supply is not guaranteed. A failed, unavailable or incompletely viewed ad does not automatically earn a reward. The reward is not conditional on granting permission for cross-app tracking.

Advertising-data choices and Apple's tracking permission are separate from agreeing to these Terms. Paid access and restoration of purchases do not require advertising or tracking consent. Some ad-supported access may be unavailable if an eligible ad cannot be provided under the applicable consent choices.

The native Mac app instead offers a one-time two-hour trial without AdMob advertising. In that app, trial time is consumed while the VPN is connected and the remaining balance is kept between app launches. It is not the same offer as the iOS rewarded-ad mechanism. After the Mac trial is used up, continuing access requires a subscription.

Prohibition of use

Use the service only for lawful purposes. You must not use it for:

• Spam, fraud, phishing, or other unlawful communications.
• Unauthorized access to systems or networks, malware distribution, denial-of-service attacks, or unauthorized interception of other people's traffic.
• Infringement of intellectual-property rights or distribution of material you have no right to distribute.
• Child sexual-abuse material, terrorism-related unlawful activity, or other prohibited content or conduct.
• Peer-to-peer file sharing, resale, assignment or sublicensing of access, contrary to these personal-use terms.
• Violations of applicable export controls or other laws.

Your responsibility

You are responsible for your use of the service and for complying with applicable law and the rights of others. VPN access is not permission to breach another service's terms, evade lawful restrictions, or engage in unlawful conduct.

Protect your device and connection credentials. Do not share credentials publicly or attempt to bypass the service's access controls.

Restrictions, suspension and service changes

We may restrict or suspend access where reasonably necessary to address misuse, security problems, legal requirements or breaches of these Terms. We may change or maintain endpoints and features. These provisions do not imply that we record users' browsing history or retain VPN activity logs.

Any suspension, cancellation or service change remains subject to mandatory law, Apple's purchase terms and applicable refund rights. We do not exclude a refund or remedy that you are legally entitled to receive.

Liability and your legal rights

We do not promise uninterrupted service, a particular speed, guaranteed access to a third-party website, or complete anonymity. Your device configuration, local network, endpoint availability and third-party services can affect your experience.

Nothing in these Terms excludes or limits liability, statutory guarantees or remedies where such exclusion or limitation is not permitted by applicable law. These Terms do not transfer responsibility to you for matters for which we remain legally responsible.

Privacy, consent and changes

The Privacy Policy explains connection data, information stored locally, third-party services, retention and privacy choices. Reading or accepting these Terms is not blanket consent to advertising, tracking, or all future changes in data use.

We may update these Terms and will revise the date above. Where required, we will provide notice and obtain any additional agreement or consent before applying a material change. Mandatory legal rights remain unaffected.

Contact

For questions about these Terms, access, purchases or privacy, contact KP Bytes B.V., trading as YoucanVPN, at [email protected]. Support is also available at youcanvpn.com/#support.