Your privacy at Zypher

Last updated: 20/10/2026

This policy explains what personal data Zypher VPN collects, why, and the choices you have. It applies to the Zypher VPN apps, the VPN service and this website. The service is provided by LAUNCHX AI TECHNOLOGIES (PVT) LIMITED ("we", "us"), which is responsible for your personal data.

The short version

• We do not record your online activity. We do not log the websites you visit, the apps you use, your DNS queries or the content of your traffic.
• We keep only what the service needs to work: your account, your devices, your preferences, your subscription status, and basic connection details such as when a connection started and how much data it used.
• We never see your card details. Payments are handled by Apple or Google.
• We do not sell your data, and we do not use it for advertising.

What we collect

Your account

Your email address, an optional display name, and your password, which we store only in hashed form so that we cannot read it. We also record when you last signed in, and failed sign-in attempts so that we can protect your account against password guessing.

Your devices

For each device signed in to your account: the name you or your device gives it, its platform (such as Android or iOS), its operating system and app versions, an installation identifier, the public key it uses for the VPN tunnel, and when it was last seen. This is how we enforce the 10-device limit and let you see and remove devices.

Your preferences

Your favourite locations and the default location Smart Connect uses, so that they apply on all your devices. Settings that only concern one device, such as your preferred protocol and theme, stay on that device.

Your subscription

Your plan, its status and renewal date, and the identifiers Apple or Google give the purchase, so that we can confirm with them that it is paid for. We receive these from Apple or Google, not from you, and we never receive your payment card details.

Connection details

For each VPN connection: when it started and ended and why it ended, the server and protocol used, the private address assigned to your device inside the tunnel, the amount of data sent and received, connection quality measurements (latency, packet loss and jitter), and the country your connection came from. We use these to run the service, keep servers healthy, apply fair use and diagnose problems.

Diagnostic reports

If you choose to share a diagnostic report from Zypher Signal, it contains measurements, the diagnosis and recent connection events. It contains no IP addresses, keys, account details or browsing activity, and it is only sent if you choose to share it, to whoever you choose to share it with.

Sign-in sessions

When you sign in, we record the IP address you signed in from together with that sign-in session, so that we can spot sign-ins that may not be yours and protect your account. It is not linked to your VPN connections or to anything you do online.

Support

If you email us, we keep the correspondence so that we can help you.

What we never record

• The websites you visit or the apps you use while connected
• The content of your traffic
• Your DNS queries

Our servers handle your traffic to route it, but they do not store it. Like any internet service, our systems use IP addresses while they work, for example to carry your connection and to limit repeated requests that could be an attack. Apart from the sign-in record described above, we do not keep them: our VPN servers hold your device's address in memory only while you are connected, and we do not keep web server access logs of IP addresses.

How we use your data

• To provide the VPN service, your account and your subscription
• To keep the service secure and protect against fraud and abuse
• To enforce the device limit and fair use
• To measure and improve connection quality and server capacity
• To answer support requests and send messages about your account or subscription
• To meet our legal obligations

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interests in running a secure and reliable service, and our legal obligations.

Who we share it with

• Hosting providers: our servers and database are hosted on Microsoft Azure, including the VPN servers themselves, who process data on our behalf and under our instructions.
• Apple and Google: to process and verify subscription payments made through their stores.
• Authorities: when the law requires it. Because we do not record your online activity, we cannot provide it.
• A buyer of our business: if our business is sold or merged, under the same protections as this policy.

We do not sell personal data or share it for advertising.

International transfers

Our VPN servers are located in several countries, and our account systems are hosted in the European Union (Microsoft Azure West Europe, in the Netherlands). Where your data is transferred outside your country, we use appropriate safeguards where the law requires them.

How long we keep it

• Account, devices and preferences: while your account is open, then deleted within 30 days of you closing it, except where we must keep something by law.
• Connection details: 90 days, then deleted or reduced to statistics that cannot identify you.
• Sign-in IP addresses: deleted within 60 days of the sign-in session they belong to.
• Subscription records: for as long as tax and accounting law requires.
• Support emails: 2 years after the conversation ends.

Security

Your traffic is encrypted between your device and our servers. Passwords are stored hashed, sign-in tokens are kept in your device's secure storage, and the keys and credentials our systems use are kept in a managed key vault. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach where the law requires.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict how we use it. You can remove devices yourself in the app's Settings. To make any other request, email zyphervpn@launchx.ai; we may need to confirm your identity first. You can also complain to your local data protection authority.

Children

Zypher is not intended for children under 13, and we do not knowingly collect their data. Accounts may only be created by people aged 18 or over, or by a parent or guardian on a younger person's behalf, as our Terms of Use explain. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

We may update this policy as the service changes. We will post the new version here with a new date and, for significant changes, tell you in the app or by email before they take effect.

Contact us

LAUNCHX AI TECHNOLOGIES (PVT) LIMITED
Email: zyphervpn@launchx.ai
Website: zyphervpn.launchx.ai