Privacy Policy
Falcon X VPN ("we," "our," or "us"), operated by Falcon X VPN (the "Developer," as listed in the Google Play Store), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Falcon X VPN mobile application (the "App"), available on Google Play. Please read this policy carefully. By using the App, you agree to the practices described herein.
1. Information We Collect
1.1 Information Collected Automatically
When you use Falcon X VPN, we automatically collect the following information:
- Device Identifiers: Android ID and a backend-generated anonymous user ID, used to identify your device for service delivery without requiring registration.
- Advertising ID: Google Advertising ID (GAID) may be collected by AppsFlyer when the App starts for install attribution, marketing analytics, and fraud prevention. Google AdMob may use the Advertising ID for personalized advertising only where the required consent has been obtained through Google's User Messaging Platform (UMP).
- Advertising Measurement Data: After UMP permits advertising requests, Falcon X may send our backend an impression-level advertising measurement event containing the backend-generated anonymous user ID, ad aggregation platform, placement, format, ad source or network, estimated impression revenue in USD, revenue precision, and the country code from the device's system locale. The event includes the GAID only when it is available and non-restricted; if the GAID is unavailable or Limit Ad Tracking (LAT) is enabled, the event is sent without it. The locale country code is not the VPN server node country, and this event does not contain VPN traffic or browsing content.
- Device Information: Device model, manufacturer, operating system version, language setting, network type (Wi-Fi/mobile), mobile carrier, and install source.
- Risk Assessment Flags: Indicators such as developer mode, emulator detection, VPN status, ADB status, and root detection, used solely for abuse prevention.
1.2 VPN Connection Data
- Connection Events: Connection and disconnection timestamps.
- Server Selection: The VPN server node you connect to.
- Traffic Statistics: Total data volume uploaded and downloaded through the VPN, used to enforce free data allowances and for aggregate service analytics.
- Diagnostics: Connection errors, crash reports, and performance data for troubleshooting and service reliability.
1.3 Subscription Data
- Subscription Status: Whether you have an active Premium subscription, your subscription tier (weekly/monthly/yearly), and entitlement status, as managed through Google Play Billing and RevenueCat.
1.4 Per-App Split Tunneling
When you configure which apps use the VPN, the list of selected applications is processed and stored locally on your device. We do not upload your complete installed application list to our servers.
1.5 What We Do NOT Collect
- Browsing Content: We do not inspect, log, store, or sell the content of your browsing activity, including websites visited, search queries, or communications.
- DNS Queries: We do not log your DNS resolution history.
- Personal Identity Information: We do not require or collect your name, email address, phone number, or physical address for core service functionality.
2. How We Use Your Information
We use the collected information for the following purposes:
- Service Delivery: To initialize anonymous device identity, establish and maintain VPN connections, and route your network traffic.
- Quota Management: To track and enforce the free data allowance (2 GB per 24-hour rolling cycle) and display remaining data to you.
- Subscription Management: To verify Premium entitlements, process Google Play purchases through RevenueCat, and synchronize subscription status.
- Advertising: To display advertisements to free users, including personalized ads where consent has been obtained (via Google AdMob and UMP), and measure impression-level advertising revenue. Premium users receive no advertisements.
- Attribution and Marketing Analytics: To measure app installs and launches, attribute acquisition campaigns, evaluate advertising, marketing, and monetization performance, and prevent attribution fraud through AppsFlyer, Firebase / Google Analytics, and our backend.
- Analytics and Diagnostics: To monitor service performance, diagnose connection failures, analyze crash reports, measure aggregate product and advertising performance, and improve the App.
- Abuse Prevention: To detect and prevent fraudulent activity, unauthorized access, terms-of-service violations, and quota circumvention.
- Legal Compliance: To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
3. Third-Party Services
We share information with the following third-party service providers, who process data on our behalf:
- Google Play Billing: Processes subscription payments. Google's privacy policy applies to payment data.
- RevenueCat: Manages subscription entitlements and purchase verification. RevenueCat processes your Google Play purchase token and App User ID.
- Google AdMob: Serves advertisements to free users. AdMob may use the Advertising ID when consent is provided. Test ad IDs are used during development.
- Google User Messaging Platform (UMP): Manages consent choices for personalized advertising in applicable regions.
- AppsFlyer: Provides mobile install attribution, app-launch measurement, marketing analytics, fraud prevention, and dedicated impression-level advertising revenue reporting. In addition to attribution data, AppsFlyer may process each reported ad impression's revenue value, currency, ad source or network, ad unit, format, and placement. AppsFlyer may also process the Advertising ID, an AppsFlyer-generated identifier, IP-derived approximate location, device information, install source, and app-launch data. See AppsFlyer's Privacy Policy.
- Firebase / Google Analytics: In the production build, Firebase / Google Analytics may receive app usage data and impression-level advertising revenue events, including platform, source, ad format, ad unit, placement, value, currency, and precision fields.
- Crash Reporting: In the production build, crash reporting services may receive device information, app version, crash diagnostics, and performance data.
All third-party providers are contractually obligated to process data only as instructed by us and in compliance with applicable data protection laws.
4. VPN Data Handling
Falcon X VPN uses Android's VpnService to create an encrypted tunnel between your device and our remote servers. When the VPN is active, your device's network traffic is routed through this encrypted connection. Our VPN service:
- Does not inspect, monitor, or log the content of your browsing activity.
- Does not sell your browsing data to third parties.
- Does not use VPN traffic data for advertising targeting or attribution manipulation.
- Processes connection metadata (timestamps, server selection, data volume) solely for operational purposes described in this policy.
5. Data Retention and Security
5.1 Retention
We retain your information only as long as necessary to fulfill the purposes outlined in this policy:
- Anonymous user and device identifiers are retained for the duration of your use of the App.
- Connection logs and traffic statistics are retained for a limited period necessary for service operation and abuse prevention.
- Subscription records are retained in accordance with Google Play policies and applicable legal requirements.
- Crash and diagnostic data is retained for a reasonable period for analysis and improvement.
5.2 Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit using industry-standard protocols.
- Access controls restricting data access to authorized personnel.
- Regular security assessments and monitoring.
6. Your Rights and Choices
6.1 Access, Correction, and Deletion
You have the right to:
- Access: Request a copy of the data we hold associated with your device.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data. Upon receiving a verified deletion request, we will process it within the timeframe committed in this policy. All data associated with your anonymous device identity will be permanently removed from our systems — not merely frozen or deactivated.
Since Falcon X VPN does not require account registration, data access, correction, and deletion requests are verified using your backend anonymous user ID and a one-time verification credential generated within the App. You must explicitly confirm your request before any identifying information is attached to the privacy request communication. Upon completion of a deletion request, we will provide a reference number for your records.
Important: Subscription purchase records are managed by Google Play and are subject to Google's data retention policies. Falcon X VPN cannot delete your Google Play purchase history. We will explain this boundary when handling your request.
6.2 Advertising Choices
You can manage your advertising preferences, including opting out of personalized ads, through the Google User Messaging Platform (UMP) consent dialog presented within the App. You may also reset your Advertising ID or opt out of ad personalization in your device's Google Settings.
6.3 US State Privacy Rights
If you are a resident of a US state with applicable privacy laws (such as California, Virginia, Colorado, Connecticut, or Utah), you may have additional rights, including the right to know what personal data is collected, the right to delete personal data, the right to opt out of the sale of personal data, and the right to non-discrimination for exercising these rights. To exercise any of these rights, please contact us using the information in Section 9.
7. Children's Privacy
Falcon X VPN is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. Our advertising and store listing age settings are configured consistently with this policy.
8. International Data Transfers
Your information may be transferred to, stored, and processed in countries other than your country of residence, including the United States, where our servers are located. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the App and update the "Effective Date" at the top of this policy. In the event of significant changes to our data practices, we may require you to re-confirm your consent through the App's authorization flow. We encourage you to review this policy periodically.
10. Contact Us
If you have questions, concerns, or wish to exercise your data rights, please contact us:
- Email: udwohitet@gmail.com
- In-App: Navigate to Settings within the Falcon X VPN App and use the privacy request or contact option.
11. Google Play Data Safety
Our Google Play Data Safety section reflects the data collection and handling practices described in this Privacy Policy. We are committed to maintaining accurate and up-to-date Data Safety disclosures that match the actual behavior of the App, its SDKs, and its backend services.
12. Server Infrastructure & Privacy Audit
12.1 Server Jurisdictions
Falcon X VPN operates VPN servers in multiple jurisdictions. A machine-readable server index listing the jurisdiction and operating entity for each server node is maintained and updated as our infrastructure evolves. This index is available upon request and is reflected in the server selection interface within the App. All servers are operated by or on behalf of Falcon X VPN, utilizing infrastructure from reputable cloud service providers.
12.2 Independent Privacy Audit
We are committed to transparency and accountability. Falcon X VPN will undergo an annual independent privacy audit conducted by a qualified third-party auditor. The audit will verify:
- Our no-log policy — confirming that we do not collect, store, or log browsing activity, DNS queries, or traffic content.
- Data handling procedures — confirming that collected data is limited to what is disclosed in this policy.
- Data retention and deletion practices.
- Encryption key management and server security configurations.
A summary of the most recent audit findings will be published on our website and linked from this Privacy Policy. Any material issues identified during an audit will be remediated promptly, and affected users will be notified.
12.3 Marketing Claims Verification
Our marketing claims — including "no logs," "anonymous browsing," and related privacy representations — are substantiated by our technical architecture, internal policies, and independent audit results. We do not make privacy claims that cannot be verified through our published audit reports or, if challenged, through court-ordered disclosure proceedings.