This policy applies to MaxVPN on Android and Android TV, iPhone and iPad, Windows and other platforms, to our website at max-vpn.net, and to our related account, purchase and support services. The same policy covers every platform.
Who we are
MaxVPN is operated by Chita Technology LTD ("we", "us"). This policy explains the limited information we process to sign you in, provide the VPN service, manage your subscription and devices, keep purchases secure, prevent abuse and fix problems with the service.
We do not sell personal information, we do not show ads, and we do not share personal information with anyone for advertising.
Information we process
Account and sign-in information
- Your username, an account identifier and your password, which we store in encrypted form.
- Your account status, the start and expiry dates of your subscription, the number of devices you may use and whether your access is active.
- The email address you gave us when you bought a plan, if you bought it directly from us.
- On iPhone and iPad, the app may keep your sign-in details in the system Keychain on your device so it can sign you in securely.
Subscription and usage information
- Your plan, its data allowance, the data you have used and have left, its validity period and its device limit.
- Session identifiers, the connection state and the times needed to provide the service and to count your usage.
Device and security information
- For each device signed in to your account: a device identifier and technical signals that help us recognise the same device, the platform, operating system, device model and app version, the IP address it last connected from and an approximate country derived from it, and the times it signed in and last checked in.
- A record of sign-in, sign-out, device removal and password change events on your account.
- Crash and diagnostic reports. Our apps use Firebase Crashlytics, a Google service, to report crashes, and can send us diagnostic reports to help fix connection problems. These reports contain technical details such as the device model, operating system and app version, and a random installation identifier. They don't contain your password or the content of your traffic.
- Notifications. If you allow notifications, the app registers a push token with Firebase Cloud Messaging, a Google service, and tells us whether a notification was delivered or opened. You can turn notifications off in your device settings at any time.
- Our purchase pages. Security and anti-abuse signals such as a browser fingerprint, a visitor identifier, your IP address, browser and language settings, failed payment attempts and matches with blocking rules.
- Our website (max-vpn.net). Standard server access logs — IP address, browser type, the page requested and the time — for security and troubleshooting. The website sets no cookies of its own and uses no advertising, analytics or tracking tools. Cloudflare, which delivers the website, may set strictly necessary security cookies.
We may derive an approximate country from your IP address to apply payment-access rules and to prevent abuse. When we review suspicious activity, we may look up an IP address with an IP-intelligence provider to learn its approximate location and type of network. Location based on an IP address is approximate and can be wrong, for example when you use a VPN or a mobile network.
Payment information
- Purchases in our apps are processed by Apple (App Store) or Google (Google Play). We receive confirmation of the purchase and of your subscription status, but never your card or other payment details.
- If you bought a plan directly from us rather than through an app store, we process the order details: the email address you gave, the plan, the amount, a payment-attempt reference, the payment status, the payment provider's reference and the result of fraud checks. Payment details are entered only on the payment provider's own page — never in the MaxVPN apps or on our websites — and we never receive your full card number.
Support information
When you contact support, we process the information you choose to share with us, together with the account and technical details needed to look into your request. Our support chat may use automated tools, including AI assistants run by third-party providers, to help answer your questions; a member of our team can take over when needed.
Messages sent through the forms on our website are stored with the details you enter.
How we use information
We use information only to:
- sign you in and show your account, data allowance, expiry date and devices;
- run the VPN tunnel, count your data use and apply the data, device and session limits of your plan;
- register, show, sign out and remove the devices and sessions on your account;
- process and deliver purchases and prevent fraudulent or abusive payments, including payment-access rules based on email address, device, platform, IP address or approximate location;
- answer your questions and requests;
- keep the service reliable, investigate errors and protect our systems and users;
- meet our legal, accounting, security and compliance obligations.
We do not use your information for advertising or to build advertising profiles. Our apps do not track you across apps or websites owned by other companies, and they do not collect advertising identifiers such as Apple's IDFA or Google's advertising ID, so they have no reason to ask for tracking permission (App Tracking Transparency).
Where laws such as the EU or UK GDPR apply, we rely on these legal bases: performance of our contract with you, to provide the service; our legitimate interests in keeping the service secure, preventing fraud and abuse, and fixing problems; your consent, for notifications, which you can withdraw at any time; and our legal obligations, for example to keep accounting records.
VPN traffic and connection data
We don't need the content of your communications to sign you in or to count your data use. We don't monitor, record or share the content of your traffic, and we don't log your browsing history, the websites and services you connect to or your DNS queries. We don't use your VPN traffic for advertising or to build profiles, and we don't redirect, change or inject anything into your traffic for advertising or other income.
What we record is limited to what the service needs: the times each device signs in and last checks in, the IP address it last connected from, and how much data your account uses, as reported by our VPN servers. We keep this information as described under “How long we keep information”.
On Android, you can choose which apps use the VPN. To show you the choices, the app reads the list of apps installed on your device; this list stays on your device.
How long we keep information
- Account and subscription information: while your account exists; afterwards only as long as needed for legal, accounting or security reasons.
- Device sessions: until you sign the device out, change your password or delete your account; a device that hasn't checked in for 30 days is removed automatically.
- Sign-in and device events: the 20 most recent events on each account.
- Data-usage records: up to 31 days.
- Crash and diagnostic reports: up to 90 days.
- Other technical and security records: only as long as needed to run, secure and troubleshoot the service.
- Website access logs: deleted automatically at least once a month.
- Messages sent through our website forms: deleted automatically after 180 days.
- Order, payment and anti-abuse records: as long as needed to reconcile transactions, investigate fraud and meet accounting and tax laws.
Security
We protect information with technical and organisational safeguards, including encrypted connections (HTTPS and the encrypted VPN tunnel), passwords stored in encrypted form, access controls and authentication, server-side enforcement of payment and device rules, and platform security features such as the Apple Keychain where available. No method of transmission or storage is completely secure. Please keep your password private — our team will never ask you for it.
Your choices and requests
Depending on where you live, you may have the right to access, correct or delete your personal information, to object to or restrict some processing, to receive a copy of your information and to withdraw your consent. To make a request, contact our support team (see “Contact” below). We may need to confirm that the account is yours — for example, by contacting the email address used for the purchase — and we may keep information that we must retain for legal, accounting, fraud-prevention or security reasons. We reply within 30 days. You can also complain to your local data protection authority.
Deleting your account. You can ask us to delete your account and the personal information linked to it at any time, on the “Delete account” page of our website or by contacting support. That page explains what we delete, what we keep and for how long. Deleting your account ends your access on all devices and can't be undone. It doesn't cancel a subscription bought through Google Play or the App Store; cancel that in your store account.
Signing a device out of your account or changing your password ends the affected sessions. You can turn notifications off in your device settings, and uninstalling the app removes the information it stores on your device.
Children
MaxVPN is not directed to children. You must be at least 13 years old to use it — 16 in the European Economic Area — or older if the law where you live requires it. We don't knowingly collect personal information from children under these ages; if we learn that we have, we delete it. If you believe a child has given us personal information, please contact us.
Changes to this policy
We may update this policy when our service, the law or the way we handle information changes. The current version always stays at this address with its “Last updated” date. If a change is significant, we will also tell you more prominently — for example, in the app.
Contact
MaxVPN is operated by Chita Technology LTD. For questions or requests about privacy, use the support page on our website, max-vpn.net.