Last updated: 8 October 2026 · Operated by CARWAN AI SOLUTIONS ULUSLARARASI TICARET LIMITED SIRKETI
Persian VPN is a virtual private network. This policy describes exactly what the service stores, what it deliberately does not store, and how long anything is kept. Sign in with Apple is optional and applies only when the feature is available and you choose to link or use it.
We do not log the websites you visit, the DNS queries you make, or the contents of your traffic. We do not sell VPN-service data, use it for any purpose other than providing the service, or disclose it to third parties for any purpose.
Optional Sign in with Apple uses Apple to verify your identity. Authentication information is exchanged for that feature, as described below. We do not send VPN usage totals, browsing activity, or connection reports to Apple as part of that authentication.
| Data | Why | Kept for |
|---|---|---|
| Random account identifier and the time the account was created | Identifies your account without a name, email address, or phone number. The creation time is used for new-account data limits. | Until you delete the account. |
| Recovery code hash (SHA-256) | Lets you recover a private-start account. The recovery code is generated on your device and stored in the app-only Keychain. It is transmitted over HTTPS only when creating, recovering, or deleting an account, or proving ownership to link Apple. The raw code is never persisted on our servers — only its hash. | Until you delete the account. |
| Apple user identifier and account link, only if you choose to link Sign in with Apple | Lets Apple verify access to the same existing Persian VPN account. We do not request your name or email address. If an earlier Apple authorization causes an email field to appear in a response, it is ignored and not stored. | Until you delete the account. A keyed hash of the Apple identifier may remain in the limited revocation record described below for no more than 72 hours after deletion. |
| Encrypted Apple refresh token | Supports Apple identity validation and revoking Apple authorization when the account is deleted. Identity tokens, access tokens, and single-use authorization codes are processed in memory and are not persisted. | While the Apple account link exists; after account deletion, a minimal revocation record may remain for no more than 72 hours. |
| Username, email address, password hash (Argon2) | Only for accounts created with sign-in credentials. Your raw password is never stored. | Until you delete the account. |
| Device record: random device ID, a generic device label, platform and app version, your VPN public key, the internal tunnel address assigned to you, which node you were assigned, and when these records were created. | Required to establish the encrypted tunnel and to enforce the per-account device limit. | Until you delete the account. Removing a device revokes its access; the device and tunnel records remain until account deletion. |
| Monthly byte totals (sent and received) | Enforces the free plan's monthly data allowance. This is an aggregate count only; it carries no information about destinations or content. | Until you delete the account. |
| Sign-in session records: your account identifier, a hash of the session renewal token, a link to the previous session record, and the times each record was created, used, and set to expire. | Keeps the app signed in securely and detects a stolen or reused renewal token. The app's access permission lasts 15 minutes. Each time the app starts, and whenever it contacts our service after those 15 minutes have passed, it renews its session and a new record is created; the previous record is kept and marked as used. As a result, these records show approximately when the app was used. They contain no IP address, location, or information about your traffic. | Until you delete the account. Used and expired session records are currently not deleted automatically before then. |
| Automatic connection-problem reports, not linked to your account | When a VPN connection is established but no data passes through it, the app reports which of our servers was affected, so that we can find and fix faulty servers. Details are under “Diagnostics” below. | 30 days in our application database, then deleted automatically. See “Diagnostics” for the server log. |
Your source IP address is processed transiently, in memory, for two purposes: delivering your network traffic, and rate-limiting abuse. It is not written to our application database and not written to persistent access logs. Our web servers have access logging disabled, and the client IP address is deliberately not forwarded to the application.
Automatic connection-problem report. After the VPN connects, the app checks that data actually passes through the tunnel. If the connection is established but no data passes, the app automatically sends our service a short report and then reconnects. The report contains only the identifier of our server that was used, the connection method (for example, WireGuard), and the result “no data”. It does not contain your IP address, your device identifier, your VPN key, the websites you visit, or any of your traffic.
The report is sent over HTTPS with the app's ordinary sign-in token, because our service accepts requests only from signed-in apps. The token is also used briefly, in memory, to limit how many reports one account can send. We do not store your account identifier, device identifier, or IP address with the report, and we do not try to link reports to accounts.
What we keep: our application database stores the server identifier, the time of the report, and the fact that the connection did not work. This record is deleted automatically after 30 days. Our server's operational log also notes the result and the connection method with a timestamp, without any account identifier, device identifier, or IP address; that log is currently limited by size, not by a fixed number of days.
We use these reports only to find and fix servers that accept connections but do not carry traffic. They are not used for advertising or tracking and are not shared with third parties. The report is part of the app's connection check and currently cannot be turned off in the app.
Connection history on your device. The app also keeps a history of recent connection attempts on your device (server identifier, connection method, result, retry count, and handshake time), which you can see under Connection Diagnostics. This history stays on your device unless you explicitly choose to share a diagnostic report.
You can add Apple as another way to access an existing private-start account. Linking does not create a replacement account or change your data allowance. The app explains the additional data processing before you choose to continue with Apple. This choice is separate from the VPN service's initial data disclosure.
Apple authorization information is sent over HTTPS for verification with Apple and our service. We retain the Apple-provided user identifier and the encrypted refresh token described above. Your recovery code stays an independent access method: signing in with Apple does not retrieve or replace the original code. Keep a private copy in case Apple sign-in is unavailable. Apple's own processing is described in Sign in with Apple & Privacy.
You can delete your account from the app at Account → Delete Account. For a private-start account, confirm with your recovery code or, when your account has a verified Apple link and Apple verification is available, with fresh Apple authentication. Credential-based accounts confirm with their password.
Successful deletion removes your active account, device, usage, session, and Apple account-link records from the live application database. Removal of the corresponding tunnel peer on the VPN node completes separately, shortly afterwards. Automatic connection-problem reports are not linked to any account, so deletion cannot single them out; they expire on the schedule described under “Diagnostics”. Deleting an account or the app does not cancel an App Store subscription; manage its renewal separately in Apple's subscription settings.
If Apple authorization revocation is pending, your Persian VPN account is still deleted. A separate, minimal revocation record retains the encrypted Apple token, its encryption-key version, the Apple client identifier, a keyed hash of the Apple user identifier, and job/retry metadata for no more than 72 hours after deletion. The keyed hash prevents a new link from racing with a pending revocation; this record does not retain your account profile or the original Apple user identifier. It is removed as soon as revocation succeeds (including an already-invalid token), or when the 72-hour limit is reached, even if Apple remains unavailable. This is our retention limit, not a retention period required by Apple.
You can also remove the app's Apple authorization yourself in your Apple Account settings under Sign in with Apple. Select Persian VPN or its developer and follow the steps to stop using Sign in with Apple. See Apple's instructions for managing Sign in with Apple. Removing Apple authorization is separate from deleting your Persian VPN account.
During maintenance, we may create access-restricted temporary recovery copies of the application database and node usage state. We remove these maintenance copies after deployment validation is complete. Records deleted from the live database during maintenance may remain in those temporary copies until that cleanup. If we introduce routine application backups, we will document their retention period here.
Because the service is designed to work without them, we do not ask for and do not hold: your real name, your phone number, your postal address, or your payment details. The private-start flow requires no email address at all.
This is pseudonymous, not anonymous: a random account identifier, a recovery code hash, the device and tunnel records, and the sign-in session records listed above do exist while your account exists. If you choose to link Apple, the Apple identifier and encrypted token also exist; the limited post-deletion revocation exception is described above.
Questions about this policy: privacy@prsapp.ai
CARWAN AI SOLUTIONS ULUSLARARASI TICARET LIMITED SIRKETI, Istanbul, Türkiye