Last updated: 26 October 2026 · Operated by CARWAN AI SOLUTIONS ULUSLARARASI TICARET LIMITED SIRKETI
Persian VPN is a virtual private network for iPhone, iPad, Mac and Android. This policy describes exactly what the service stores, what it deliberately does not store, and how long anything is kept. Sign in with Apple is optional, exists only in the Apple apps, and applies only when the feature is available and you choose to sign in with Apple or link it to an existing account.
We do not log the websites you visit, the DNS queries you make, or the contents of your traffic. We do not sell VPN-service data, use it for any purpose other than providing the service, or disclose it to third parties for any purpose.
Optional Sign in with Apple uses Apple to verify your identity. Authentication information is exchanged for that feature, as described below. We do not send VPN usage totals, browsing activity, or connection reports to Apple as part of that authentication.
| Data | Why | Kept for |
|---|---|---|
| Random account identifier and the time the account was created | Identifies your account without a name, email address, or phone number. The creation time is used for new-account data limits. | Until you delete the account. |
| Recovery code hash (SHA-256) | Lets you recover a private-start account. The recovery code is generated on your device and stored in the app-only Keychain (Apple) or in Android Keystore-encrypted app storage (Android). It is transmitted over HTTPS only when creating, recovering, or deleting an account, or proving ownership to link Apple. The raw code is never persisted on our servers — only its hash. Accounts created with Sign in with Apple have no recovery code. For them this field holds a random value that is not derived from any code or identifier and cannot be used to access the account. | Until you delete the account. |
| Apple user identifier and account link, only if you use Sign in with Apple | Lets Apple verify access to your Persian VPN account, whether the account was created with Apple or Apple was linked to an existing account. We do not request your name or email address. If an earlier Apple authorization causes an email field to appear in a response, it is ignored and not stored. | Until you delete the account. A keyed hash of the Apple identifier may remain in the limited revocation record described below for no more than 72 hours after deletion. |
| Encrypted Apple refresh token | Supports Apple identity validation and revoking Apple authorization when the account is deleted. Identity tokens, access tokens, and single-use authorization codes are processed in memory and are not persisted. | While the Apple account link exists; after account deletion, a minimal revocation record may remain for no more than 72 hours. |
| Username, email address, password hash (Argon2) | Only for accounts created with sign-in credentials. Your raw password is never stored. | Until you delete the account. |
| Device record: random device ID, a generic device label, platform and app version, your VPN public key, the internal tunnel address assigned to you, which node you were assigned, and when these records were created. | Required to establish the encrypted tunnel and to enforce the per-account device limit. | Until you delete the account. Removing a device revokes its access; the device and tunnel records remain until account deletion. |
| Monthly byte totals (sent and received) | Enforces the free plan's monthly data allowance. This is an aggregate count only; it carries no information about destinations or content. | Until you delete the account. |
| Sign-in session records: your account identifier, a hash of the session renewal token, a link to the previous session record, and the times each record was created, used, and set to expire. | Keeps the app signed in securely and detects a stolen or reused renewal token. The app's access permission lasts 15 minutes. Each time the app starts, and whenever it contacts our service after those 15 minutes have passed, it renews its session and a new record is created; the previous record is kept and marked as used. As a result, these records show approximately when the app was used. They contain no IP address, location, or information about your traffic. | Until you delete the account. Used and expired session records are currently not deleted automatically before then. |
| Automatic connection-problem reports, not linked to your account | When a VPN connection is established but no data passes through it, the app reports which of our servers was affected, so that we can find and fix faulty servers. Details are under “Diagnostics” below. | 30 days in our application database, then deleted automatically. See “Diagnostics” for the server log. |
Your source IP address is processed transiently, in memory, for two purposes: delivering your network traffic, and rate-limiting abuse. It is not written to our application database and not written to persistent access logs. Our web servers have access logging disabled, and the client IP address is deliberately not forwarded to the application.
Automatic connection-problem report. After the VPN connects, the app checks that data actually passes through the tunnel. If the connection is established but no data passes, the app automatically sends our service a short report and then reconnects. The report contains only the identifier of our server that was used, the connection method (for example, WireGuard), and the result “no data”. It does not contain your IP address, your device identifier, your VPN key, the websites you visit, or any of your traffic.
The report is sent over HTTPS with the app's ordinary sign-in token, because our service accepts requests only from signed-in apps. The token is also used briefly, in memory, to limit how many reports one account can send. We do not store your account identifier, device identifier, or IP address with the report, and we do not try to link reports to accounts.
What we keep: our application database stores the server identifier, the time of the report, and the fact that the connection did not work. This record is deleted automatically after 30 days. Our server's operational log also notes the result and the connection method with a timestamp, without any account identifier, device identifier, or IP address; that log is currently limited by size, not by a fixed number of days.
We use these reports only to find and fix servers that accept connections but do not carry traffic. They are not used for advertising or tracking and are not shared with third parties. The report is part of the app's connection check and currently cannot be turned off in the app.
Connection history on your device. The app also keeps a history of recent connection attempts on your device (server identifier, connection method, result, retry count, and handshake time), which you can see under Connection Diagnostics. This history stays on your device unless you explicitly choose to share a diagnostic report.
You can sign in with Apple to create a new private account, or add Apple as another way to access an existing private-start account. If your Apple Account has not been used with Persian VPN before, signing in with Apple creates a new account with the same data allowance as any new account. Signing in with Apple does not open an existing account to which Apple was never linked; use that account's recovery code instead. Linking Apple to an existing account does not create a replacement account or change its data allowance. The app explains the additional data processing before you choose to continue with Apple. This choice is separate from the VPN service's initial data disclosure.
Apple authorization information is sent over HTTPS for verification with Apple and our service. We retain the Apple-provided user identifier and the encrypted refresh token described above. Your recovery code stays an independent access method: signing in with Apple does not retrieve or replace the original code. Keep a private copy in case Apple sign-in is unavailable. An account created with Apple has no recovery code: Apple is its only way to sign in and to confirm deletion. Apple's own processing is described in Sign in with Apple & Privacy.
You can delete your account from the app at Account → Delete Account. For a private-start account, confirm with your recovery code or, when your account has a verified Apple link and Apple verification is available, with fresh Apple authentication. An account created with Apple confirms deletion with fresh Apple authentication; while Apple verification is temporarily unavailable, such an account can neither be signed in to nor deleted, and both become possible again once Apple verification is restored. Credential-based accounts confirm with their password.
Successful deletion removes your active account, device, usage, session, and Apple account-link records from the live application database. Removal of the corresponding tunnel peer on the VPN node completes separately, shortly afterwards. Automatic connection-problem reports are not linked to any account, so deletion cannot single them out; they expire on the schedule described under “Diagnostics”. Deleting an account or the app does not cancel an App Store subscription; manage its renewal separately in Apple's subscription settings.
If Apple authorization revocation is pending, your Persian VPN account is still deleted. A separate, minimal revocation record retains the encrypted Apple token, its encryption-key version, the Apple client identifier, a keyed hash of the Apple user identifier, and job/retry metadata for no more than 72 hours after deletion. The keyed hash prevents a new link from racing with a pending revocation; this record does not retain your account profile or the original Apple user identifier. It is removed as soon as revocation succeeds (including an already-invalid token), or when the 72-hour limit is reached, even if Apple remains unavailable. This is our retention limit, not a retention period required by Apple.
You can also remove the app's Apple authorization yourself in your Apple Account settings under Sign in with Apple. Select Persian VPN or its developer and follow the steps to stop using Sign in with Apple. See Apple's instructions for managing Sign in with Apple. Removing Apple authorization is separate from deleting your Persian VPN account.
Backups. Once a day we back up the application database so that accounts, data allowances, and subscription links can be recovered after a server or hosting failure. Each backup is encrypted on our server before it leaves it, with a key that is not stored on any of our servers, and is kept with a storage provider separate from our hosting providers (Cloudflare R2, in the European Union). Each backup is deleted automatically within 14 days of being made. Records deleted from the live database, including a deleted account, may therefore remain in these encrypted backups for up to 14 days. We use backups only to restore the service after a failure and to test that restoring works; a test restore is deleted as soon as the test is complete.
During maintenance, we may also create access-restricted temporary recovery copies of the application database and node usage state. We remove these maintenance copies after deployment validation is complete. Records deleted from the live database during maintenance may remain in those temporary copies until that cleanup.
The Android app uses Android’s VpnService only to provide the VPN: when you tap Connect, your device’s internet traffic is routed through an encrypted WireGuard tunnel to our VPN servers. Android asks for your permission before the first connection and shows a key icon while the VPN is on. We do not inspect, sell or share the traffic that passes through the tunnel, and we do not use the VPN for advertising or to redirect other apps’ traffic.
The Android app sends the same data described above. Its device label is always the generic word “Android”, never your device’s name. Your sign-in refresh token, your VPN private key and your recovery code are stored only on the device, encrypted with a key held in the Android Keystore. Android cloud backup and device-to-device transfer of the app’s data are turned off, so uninstalling the app also deletes them from the device — keep your own copy of the recovery code. The Android app does not offer Sign in with Apple and this version has no in-app purchases, advertising or analytics SDKs.
Because the service is designed to work without them, we do not ask for and do not hold: your real name, your phone number, your postal address, or your payment details. The private-start flow requires no email address at all.
This is pseudonymous, not anonymous: a random account identifier, a recovery code hash (or, for an account created with Apple, the random value described above), the device and tunnel records, and the sign-in session records listed above do exist while your account exists. If you use Sign in with Apple, the Apple identifier and encrypted token also exist; the limited post-deletion revocation exception is described above.
Questions about this policy: privacy@prsapp.ai
CARWAN AI SOLUTIONS ULUSLARARASI TICARET LIMITED SIRKETI, Istanbul, Türkiye