Privacy Policy

We are ONION TECH LIMITED, registered at 13 Freeland Park Lytchett House, Wareham Road, Poole, England, BH16 6FA. For the purposes of the EU/UK General Data Protection Regulation (GDPR), we are the data controllerof personal data processed through the Service, except where we act as a processor on behalf of a third party (in which case the third party's policy governs).

This Policy applies to information processed in connection with:

• the ZeeVPN Android application (com.zeevpn.secure.proxy);
• the ZeeVPN website at zeevpn.com and any subdomains we operate;
• support communications you send to us.

It does not cover websites, apps, or services that you access through the VPN, nor third-party services we integrate (we link to their policies in Section 08).

We use the information described above to:

• Provide the Service — establish VPN tunnels, deliver server configurations, enforce the free-tier daily allowance and ad caps, deliver in-app updates.
• Measure and improve the App — understand which features are used, diagnose crashes, prioritize improvements.
• Serve and measure ads (only when ads are enabled and you have consented where required).
• Communicate with you — respond to support requests and notify you of important changes.
• Prevent abuse and ensure security — detect fraudulent activity, abuse of the free tier, unauthorized access.
• Comply with law — fulfill our legal obligations and enforce our Terms.

For users in the EU, EEA, UK, and Switzerland, we rely on the following lawful bases under GDPR Article 6:

You can withdraw your consent at any time via the in-app Settings → Privacy Options entry (where available) or by adjusting your device-level ad settings.

We share information only in the limited circumstances below:

• Service providers (processors acting on our behalf): cloud hosting, error monitoring, content delivery, customer support tooling.
• Google LLC (Firebase Analytics, Firebase Remote Config, AdMob, Google Play Services, Google Play Billing, Play In-App Updates) — see Section 08.
• Legal authorities, when legally compelled (e.g. court order, subpoena) or to prevent fraud, security, or technical issues. We review each request and challenge those that are overbroad or unlawful.
• Successors in interest, in the event of a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

We do notsell personal information for monetary consideration. Depending on your jurisdiction (e.g. California's CCPA/CPRA), some advertising activity may constitute “sharing” for cross-context behavioral advertising — when so, you can opt out via the in-app privacy options.

Where we have no continuing lawful basis to keep your data, we delete or anonymize it.

The App integrates the following third-party services. Each operates under its own privacy policy:

• Google Play Services & Google Play Billing — distribution, in-app purchases. policies.google.com/privacy
• Google AdMob — advertising. policies.google.com/technologies/ads
• Google User Messaging Platform (UMP) — consent capture. policies.google.com/privacy
• Firebase (Google LLC) — Analytics and Remote Config. firebase.google.com/support/privacy
• Google Play Core / In-App Updates — over-the-air updates.

These services may process your data in jurisdictions outside your own, including the United States. They are responsible for their own compliance with applicable data-protection law.

We are based in the United Kingdom. The third-party services listed in Section 08 process data in the United States and other countries. When personal data of EU/UK/EEA/Swiss users is transferred outside that region, we and our providers rely on appropriate safeguards such as the EU Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum, and adequacy decisions where available.

Depending on where you live, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your data.
• Restriction — ask us to restrict processing in certain cases.
• Portability — receive your data in a portable format.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — where processing is based on consent.
• Opt out of sale/sharing for advertising (California, Colorado, Connecticut, Virginia and other US-state residents).
• Lodge a complaint with your local data-protection authority.

To exercise these rights, email us at hi@zeevpn.com. We will respond within the timeframes required by applicable law (typically 30 days under GDPR, 45 days under CCPA).

ZeeVPN is intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a person under 18 has provided us with personal data, contact us at hi@zeevpn.com and we will delete it.

We use industry-standard technical and organizational measures to protect personal data, including encryption in transit (TLS), encrypted VPN tunnels, access controls, and audit logging. No internet service is 100% secure; we cannot guarantee absolute security and you use the Service at your own risk.

If we become aware of a personal-data breach that poses a risk to your rights, we will notify the relevant supervisory authority within the timeframe required by law (72 hours under GDPR) and, where required, notify you directly.

Our App does not use HTTP cookies. The App uses local storage (Android SharedPreferences) and local databases to remember your preferences and authentication state.

Our website at zeevpn.com may use cookies and similar technologies for essential site functionality and aggregate analytics. Where required, we present a cookie banner and process non-essential cookies only after you consent.

We may update this Policy from time to time. When we make material changes we will update the “Last updated” date above and, where appropriate, provide additional notice (e.g., in-app notification or email to subscribers). Your continued use of the Service after the changes take effect constitutes acceptance of the revised Policy.

If you are in the EU/UK and feel we have not adequately addressed your concerns, you have the right to contact your national supervisory authority. A list of EU supervisory authorities is available at edpb.europa.eu/about-edpb/about-edpb/members_en.