Privacy Policy

We do not log your browsing history, the websites or apps you use, or the content of your traffic.

To run the VPN we process a random device identifier, your WireGuard public key and technical connection details. The free version is supported by ads, and analytics, advertising and attribution data are only collected if you agree on the consent screen.

We do not sell your personal information.

Tomator VPN is published on the App Store by VIIONR INFOTECH PRIVATE LIMITED, which is responsible for the app, the VPN service and this policy.

Device identifier: a random ID generated on first launch and kept in your device's Keychain. It is registered with our backend (hosted on Supabase) to provision VPN access and manage sessions. It is not linked to your name or email.

WireGuard key: a key pair is generated on your device. The public key is registered with the VPN server you connect to so an encrypted tunnel can be set up. The private key never leaves your device.

Server and connection metadata: the server location you select, the VPN IP address assigned to your device and connection timestamps. We keep these only as long as needed to run the service and prevent abuse.

If you decline data processing on the consent screen, the VPN cannot connect, because it must register your WireGuard public key with a server.

Location access is optional. If you allow it, Tomator VPN compares your location with the server list on your device to recommend the nearest server. Your location is not sent to us. You can turn it off at any time in iOS Settings.

Subscriptions are processed by Apple, and we never see your card details. We use RevenueCat to validate purchases and manage Premium access. RevenueCat receives an anonymous app user ID, your purchase and subscription status, and device and OS information.

If you agree, Tomator VPN uses Firebase (Google) to collect app usage events and crash diagnostics, with an app instance identifier, device model and iOS version, so we can improve stability.

Free users see ads served through Appodeal and its mediation partners, which can include Amazon, AppLovin, BidMachine, InMobi, Meta Audience Network and Unity Ads. These networks may receive device information, IP address and ad interactions to show and measure ads.

Premium subscribers do not see ads.

We use AppsFlyer and Appstack to measure which campaigns lead to installs and purchases, including Apple Ads attribution. They receive device information, IP address and app events such as install and purchase.

Your advertising identifier (IDFA) is only shared with advertising and attribution partners if you allow tracking in the App Tracking Transparency prompt. You can change this at any time in iOS Settings > Privacy & Security > Tracking.

Traffic between your device and the VPN server is encrypted with WireGuard. Identifiers and keys on your device are stored in the iOS Keychain. No method of transmission or storage is completely secure, but we work to protect the data we process.

Apple may share aggregated or anonymised crash and usage data with us through App Store Connect if you have chosen to share analytics with app developers in iOS Settings. That comes from Apple, not from code we added.

If you email us at Abhinay@approtic.in, we receive whatever you choose to send, such as your email address, your message and any screenshots. We use it only to answer you and keep it only as long as needed for support, legal and business records.

Depending on where you live, you may have the right to access, correct, delete or export personal information we hold about you, to object to or restrict certain processing, and to withdraw consent.

If you ask us to delete the device record linked to your installation, we will remove it; the app creates a new one the next time you open it.

To make a request, email Abhinay@approtic.in. We will respond within 30 days.

Tomator VPN is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information, contact us and we will delete it.

We are based in India. VPN servers are located in several countries, and our backend and third-party providers may process data in the United States, the European Union and elsewhere. We rely on the safeguards those providers offer for international transfers.

We may update this document when the app changes or when legal requirements change. The date at the top of the page shows the latest version.