Privacy Policy

Last updated: June 4, 2026.

MadFrog VPN is a privacy-focused VPN service for iPhone. This policy describes the limited data we collect, how it's used, and your rights.

1. Operator

The service is operated by IP Tkachuk Maksim Nikolaevich. Contact: [email protected].

2. We never log your VPN traffic

For the VPN connection itself, we do not collect or store:

Traffic content or the destinations you connect to
Visited domain names or DNS queries
The IP addresses of the sites or services you reach through the VPN
Per-site session timestamps or browsing history of any kind

This is our core no-logs promise. Section 3 lists the limited account and service data we do keep to run the app — it is separate from, and never linked to, the content or destinations of your VPN traffic.

3. Data we do collect

Only the minimum required for the service to work:

Account identifier — an internal user ID created when you sign in. Linked to you for authentication only.
Email address — if you sign in with email or via Apple/Google sign-in, we receive an email address (or hashed identifier in the case of Sign in with Apple's "Hide My Email"). Used solely for authentication and account recovery.
Name — if your Apple/Google sign-in shares it. Used to greet you in the app. You can leave this blank.
Device identifier — anonymous device ID assigned at install, used to prevent fraud and bind your subscription to a specific device.
Subscription state — the App Store transaction ID and current entitlement (active or expired). Required to validate your subscription.
Aggregate connection statistics — total bytes sent / received per session, server availability, and connection success / failure counts. Used for capacity planning and diagnostics. Not linked to traffic content or destinations.
Connection & device context — when your app connects to our API we record the source IP address and an approximate country derived from it, plus your device model, OS and app version, language, time zone, and App Store region. Used for security, fraud prevention, and diagnostics. This is your app's connection to our servers — never the content or destinations of your VPN traffic.
Support messages — if you contact us through the in-app chat, we store your messages, any files you attach, and (only if you use the diagnostics button) a snapshot of your app / device state and a connection log. Used solely to help you resolve your issue.
Push token — if you allow notifications, an Apple push token so we can notify you of support replies and important service updates. You can disable notifications at any time in iOS Settings.
Basic in-app events — first-party events such as app launch and connection attempts, to keep the service reliable. This is not third-party analytics or cross-app tracking.

4. Payments

All in-app purchases are processed by Apple through the App Store. We never see your payment card or banking details. Apple sends us only a transaction identifier and a signed receipt, which we verify against Apple's servers.

5. Sign in with Apple

If you sign in with Apple, you receive a hashed identifier ("sub" claim from Apple's identity token). We store only this hashed identifier. Your real Apple ID email is shared with us only if you explicitly choose to share it.

6. Third-party services

We use the following service providers strictly for technical operation:

Apple App Store — distribution, in-app purchases, and Sign in with Apple.
Google — Sign in with Google (only if you choose this method).
Hosting providers — for backend and VPN servers. They process network connections only; no personal data is shared.

We do not share data with advertising networks, analytics brokers, or social networks.

7. Tracking

We do not use any third-party tracking, advertising, or analytics SDKs. The app does not request the App Tracking Transparency permission because we don't track you across apps or websites.

8. Your rights

Access — request a copy of the data we hold about you.
Deletion — delete your account at any time via Settings → Account → Delete Account in the app, or by emailing us. Deletion is immediate and permanent.
Correction — update your account information.
Withdrawal of consent — discontinue using the service at any time.

9. Data retention

Account data is retained for as long as your account is active. Support chat messages and any attached files are kept for up to 90 days after a conversation, then permanently deleted. After account deletion, all personal identifiers — including your support history — are removed within 30 days. Aggregate statistics (with no personal identifiers) may be retained longer for capacity planning.

10. Children

MadFrog VPN is not directed at children under 17. We do not knowingly collect data from children.

11. Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top reflects the most recent revision. Continued use after a change means you accept the updated policy.

12. Contact

Questions about privacy: [email protected]