Privacy Policy

• We do not log your browsing, your traffic, your DNS queries or the content of your connections.
• We keep your email address, a hashed password, the list of devices signed in, and your subscription and payment records.
• Payments are handled by Google Play, the Amazon Appstore or our payment provider. We never see your card number.
• The apps send crash reports and simple usage counts to us through Google Firebase. They carry nothing about what you do online and are not tied to your account.
• You can see your devices and delete your account yourself, in the app or on the website.

Account details. Your email address and a hashed version of your password. When you sign up we email you a short code to confirm the address.

Devices. For each device signed in: the model and manufacturer, the Android version, the device type (phone or TV), the IP address at the time of sign-in and the time of the last sign-in. You can see this list under Devices and sign any device out.

Crash reports and usage counts. If the app crashes, it sends us a report through Google's Firebase Crashlytics: the technical trace of the crash, what the app was doing at that moment, and details of the device such as the model, the Android version and the memory free, together with the app version and whether it is the phone or TV app from Google Play or the Amazon Appstore. The app also counts simple usage through Firebase Analytics: that it was opened, which screens were shown, that a purchase was made (the plan and its price, never your card), and the device model, system version, app version and language. Each install gets a random identifier for these counts. It is not linked to your email address or your account, and you reset it by clearing the app's data or reinstalling. Google works out a rough location, the country or city, from the connection's internet address, and discards the address after use. The apps do not read your advertising ID or any other device identifier for this.

Subscription and payment records. Which plan you have, when it started and ends, and its status. Google Play, the Amazon Appstore or our payment provider holds the payment itself; we receive confirmation that a payment was made, a transaction reference and, for card payments on this website, the last four digits of the card so you can recognise it.

Support conversations. What you write to us by email or in the chat, and the details you choose to include. The chat on this website answers from a fixed set of help articles and sends nothing anywhere until you ask for a person.

Website basics. The website keeps your sign-in session in your browser's local storage. The strip at the top of the site shows your current IP address and provider by asking a public lookup service from your browser; we do not store that result.

We do not record the websites you visit, the apps you use through the tunnel, the content of your traffic, your DNS queries, or which streaming service you watch. The Auto-Pilot feature reads which app is in the foreground on your device to switch routes; that reading stays on the device.

Crash reports and usage counts never include what you do through the tunnel or who you are.

We do not use tracking cookies or advertising trackers on the website or in the apps.

• To create and sign in to your account, and to keep it secure.
• To provide the plan you paid for and to know when it renews or ends.
• To show you your devices and let you sign them out.
• To answer your support requests.
• To find and fix crashes, and to see which parts of the app get used.
• To send you service emails: verification codes, password resets, receipts and important notices about the service.
• To detect abuse of the service and enforce the Terms.

The VPN tunnel runs on infrastructure provided by our network partner. To operate the service, the network keeps connection metadata to the minimum needed, such as the fact that an account connected and how much data moved, and does not log the content or destination of your traffic. Your VPN account on that network is identified by a generated username, not by your email address.

We share data only with the services that run JustCoffee VPN:

• Google Play or the Amazon Appstore, for purchases made in the apps.
• Our payment provider, for purchases made on the website.
• Our VPN network partner, to run the tunnel.
• Our email provider, to send you service emails.
• Our hosting providers, where the account database and the website live.
• Google Firebase, which receives the apps' crash reports and usage counts and holds them for us.

We do not sell your data. We disclose it only where the law requires us to, or to protect the service and its users from abuse.

The website does not set tracking cookies. It uses your browser's local storage to keep you signed in, and your browser's session storage to remember a chat while the tab is open.

Account and device records are kept while your account exists. Subscription and payment records are kept for as long as the law requires for accounting, typically several years. Support conversations are kept for as long as they are useful to help you, and then deleted. Crash reports are kept for 90 days and usage counts for 14 months; after that only totals remain.

You can delete your account at any time from Account in the app or on the website. This removes your account, its devices and its access permanently. Payment records that the law requires us to keep are retained for that period only. Deleting your account also cancels any subscription on it, so you are not charged again. Crash reports and usage counts are not tied to your account, so deleting it leaves nothing of yours in them.

Passwords are stored hashed, never in plain text. Connections to our servers and to the website use TLS. Access to account data is limited to the people who need it to run the service. No system is perfectly secure, so tell us straight away if you think your account has been accessed by someone else.

JustCoffee VPN is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, or receive a copy. You can see and change most of it yourself in the app and on the website. For anything else, email us and we will respond within 30 days.

We may update this policy. The date at the top tells you when. For a material change we will let you know in the app, on the website or by email before it applies.

JustCoffee Media FZ-LLC, Ras Al Khaimah Economic Zone (RAKEZ), Ras Al Khaimah, United Arab Emirates. Email support@justcoffeevpn.com.