Privacy Policy

• We do not log your browsing, your traffic, your DNS queries or the content of your connections.
• We keep your email address, a hashed password, the list of devices signed in, and your subscription and payment records.
• Payments are handled by Google Play or our payment provider. We never see your card number.
• You can see your devices and delete your account yourself, in the app or on the website.

Account details. Your email address and a hashed version of your password. When you sign up we email you a short code to confirm the address.

Devices. For each device signed in: the model and manufacturer, the Android version, the device type (phone or TV), the IP address at the time of sign-in and the time of the last sign-in. You can see this list under Devices and sign any device out.

Subscription and payment records. Which plan you have, when it started and ends, and its status. Google Play or our payment provider holds the payment itself; we receive confirmation that a payment was made, a transaction reference and, for website purchases, the last four digits of the card so you can recognise it.

Support conversations. What you write to us by email or in the chat, and the details you choose to include. The chat on this website answers from a fixed set of help articles and sends nothing anywhere until you ask for a person.

Website basics. The website keeps your sign-in session in your browser's local storage. The strip at the top of the site shows your current IP address and provider by asking a public lookup service from your browser; we do not store that result.

We do not record the websites you visit, the apps you use through the tunnel, the content of your traffic, your DNS queries, or which streaming service you watch. The Auto-Pilot feature reads which app is in the foreground on your device to switch routes; that reading stays on the device.

We do not use tracking cookies or advertising trackers on the website or in the apps.

• To create and sign in to your account, and to keep it secure.
• To provide the plan you paid for and to know when it renews or ends.
• To show you your devices and let you sign them out.
• To answer your support requests.
• To send you service emails: verification codes, password resets, receipts and important notices about the service.
• To detect abuse of the service and enforce the Terms.

The VPN tunnel runs on infrastructure provided by our network partner. To operate the service, the network keeps connection metadata to the minimum needed, such as the fact that an account connected and how much data moved, and does not log the content or destination of your traffic. Your VPN account on that network is identified by a generated username, not by your email address.

We share data only with the services that run JustCoffee VPN:

• Google Play, for purchases made in the apps.
• Our payment provider, for purchases made on the website.
• Our VPN network partner, to run the tunnel.
• Our email provider, to send you service emails.
• Our hosting providers, where the account database and the website live.

We do not sell your data. We disclose it only where the law requires us to, or to protect the service and its users from abuse.

The website does not set tracking cookies. It uses your browser's local storage to keep you signed in, and your browser's session storage to remember a chat while the tab is open.

Account and device records are kept while your account exists. Subscription and payment records are kept for as long as the law requires for accounting, typically several years. Support conversations are kept for as long as they are useful to help you, and then deleted.

You can delete your account at any time from Account in the app or on the website. This removes your account, its devices and its access permanently. Payment records that the law requires us to keep are retained for that period only. Deleting your account does not cancel a Google Play subscription; cancel that in Google Play first.

Passwords are stored hashed, never in plain text. Connections to our servers and to the website use TLS. Access to account data is limited to the people who need it to run the service. No system is perfectly secure, so tell us straight away if you think your account has been accessed by someone else.

JustCoffee VPN is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Depending on where you live, you may have the right to access the data we hold about you, correct it, delete it, or receive a copy. You can see and change most of it yourself in the app and on the website. For anything else, email us and we will respond within 30 days.

We may update this policy. The date at the top tells you when. For a material change we will let you know in the app, on the website or by email before it applies.

[Company], [Company address]. Email support@justcoffeevpn.com.