Summary
Vezarus is a free VPN service for iPhone, provided by AS Palmako. We don’t ask who you are, we don’t log what you do online, and the app contains no advertising, analytics or crash-reporting SDKs. So that your iPhone can connect, the app receives a random access key that isn’t linked to your identity. We do not sell, use or disclose any user data to third parties.
Who we are
Vezarus is developed and operated by AS Palmako (“we”, “us”), a company registered in Estonia. We are the controller of the data described in this policy. It covers the Vezarus app for iPhone (the “App”), the VPN servers and the key service we operate (together, the “Service”), and this website.
Company details: AS Palmako, registry code 10301984, Näituse tn 25, 50409 Tartu, Estonia.
You can reach us at support@vezarus.com.
Data at a glance
These are the only kinds of data the Service handles.
| Data | Why | Stored |
|---|---|---|
| Anonymous access key and its tunnel settings | So a Vezarus server can accept your connection | On our servers and on your iPhone, for up to 30 days (see retention) |
| Your device’s current IP address | To send VPN traffic and key-service responses back to you | In server memory only while a connection or request is active. Not logged |
| Messages you send to support | To answer you | Until your request is resolved (see retention) |
What we never collect
- Your name, email address or phone number. There is no account to create.
- The websites you visit, your DNS queries or the content of your traffic.
- Connection timestamps, session duration or how much data you use.
- Logs of your IP address, or of the server IP address you were assigned.
- Advertising identifiers, device fingerprints, contacts, photos or location.
- Usage analytics of any kind.
Permissions the app asks for
- VPN configuration. iOS asks you once to allow the App to add a VPN configuration. This is required: without it, the App can’t create the tunnel. You can remove it at any time in iOS Settings under General › VPN & Device Management.
- Nothing else. The App doesn’t ask for permission to send notifications. Service news is shown inside the App (see Server list and service news).
The App doesn’t ask for access to your location, contacts, photos, camera, microphone, notifications or tracking.
Your anonymous access key
A VPN server has to know which devices may connect to it. When you first use the App, it requests an access key from our key service. Your installation is then given a cryptographic key and the tunnel settings it needs to connect.
The key is random. It isn’t derived from, or linked to, your name, email, phone number, or any device or advertising identifier, and we don’t combine it with any other information about you. Its only purpose is to let our servers accept your connection. Each installation gets its own key; if you reinstall the App, it always receives a new one.
Keys are valid for a fixed period of 30 days from when they were issued. Before a key expires, the App automatically obtains a new one and the old key is deleted from our servers. This way, keys that are no longer used disappear on their own, and we don’t need to record when or how often you connect: the only date we keep for a key is the date it was issued.
When the App contacts our key service, your IP address is used to deliver the response and is not recorded.
Server list and service news
The App downloads the current list of Vezarus servers and news about the Service, such as new locations or planned maintenance, from our key service. The news feed contains only messages from us about Vezarus — no advertising and no third-party content. These requests carry no account details and nothing that identifies you. Your IP address is used only to deliver the response and is not recorded.
Our VPN servers
When you connect, your traffic travels encrypted from your iPhone to the Vezarus server you selected, using the AmneziaWG protocol, and from there to the internet. Websites and services you use see the server’s IP address instead of yours.
Our servers are configured not to log the websites you visit, your DNS queries, the content of your traffic, connection timestamps, session duration or bandwidth use. Like any VPN server, a server needs your device’s current IP address to send traffic back to you. It holds that address in memory only while your connection is active and does not write it to logs.
The countries where our servers are located are shown in the App and may change over time.
The IP address shown in the app
The App can display the IP address your connection currently appears from. To find it, the App asks a Vezarus server, which sends back the address the request came from. When the VPN is on, this is the address of the Vezarus server; when it’s off, it’s your own public IP address. No third-party service is involved. The server only returns the address; it doesn’t log or store it.
Inside the app
The App contains no third-party analytics, advertising, attribution, tracking or crash-reporting libraries, and it never asks for permission to track you because it doesn’t track you. It connects only to our key service and our VPN servers. Your access key and connection settings are stored on your iPhone, and iOS keeps the active tunnel as a VPN configuration on your device.
How the VPN tunnel works
The App uses the iOS Network Extension framework solely to establish and maintain the VPN tunnel. We do not inspect, record, filter, redirect or monetise your network traffic, and we do not use network information for any other purpose, including advertising or profiling.
Our commitment
We do not sell, use, or disclose to third parties any user data for any purpose.
If this ever had to change, we would update this policy before the change took effect and ask for your consent in the App where required.
Service providers
Our servers run in data centres operated by hosting companies that provide hardware and network connectivity. Your encrypted VPN traffic passes through their networks so that it can be delivered, as with any internet service. We don’t give them your access key or any other data about you, and because our servers keep no activity logs, there are no such logs for a provider to see.
We may use an email provider to receive and answer support messages. It processes those messages only on our behalf.
We choose providers that are bound by written agreements to process data only on our instructions and to protect it at least to the standard described in this policy. If we ever have to give a provider access to personal data, the same obligations apply.
Support requests
You can contact us by email, including from the Support section in the App. Contacting us is always your choice and isn’t needed to use the Service. When you write to us, we receive your email address and whatever you include in your message. Choosing the Support option in the App only opens your mail app; the App sends nothing by itself.
We use what you send only to respond to you, and we delete it once your request is resolved. You don’t need to give us your name. Please don’t send more personal information than your question needs.
This website
This website uses no cookies, no analytics and no tracking, and loads no third-party resources. Our hosting provider may process technical request data, such as IP addresses, only as needed to deliver pages and protect against abuse.
Legal bases
Where data protection laws such as the EU or UK GDPR apply, we rely on these legal bases:
- Providing the Service you asked for — issuing and storing your access key, delivering the server list and carrying your VPN traffic.
- Legitimate interests — answering support requests and keeping the Service and this website secure and working.
- Consent — only if we ever ask for it in the App. You can withdraw consent at any time.
How long we keep data
| Data | Retention |
|---|---|
| Access key and tunnel settings | Up to 30 days from issue. While the App is installed, the key is replaced with a new one every 30 days and the old key is deleted. If you remove the App, the key expires on our servers within 30 days |
| IP address | Only while a connection or request is active. Never written to logs |
| Support messages | As long as needed to resolve your request, then deleted |
Security
VPN traffic between your iPhone and our servers is encrypted by the AmneziaWG protocol. Access to our servers is restricted to the people who operate them. Collecting as little as possible is our main safeguard: data we don’t have can’t be exposed.
No system is perfectly secure. If a security incident affected data we hold, we would notify those affected and the relevant authorities as required by law. Because we don’t know who our users are, we would do this by publishing a notice on this website and in the App.
Deleting your data
To delete your data completely, remove the App from your iPhone. The access key and its tunnel settings are deleted from your iPhone immediately, and the copy on our servers expires and is deleted within 30 days of when the key was issued.
While the App is installed, your key doesn’t stay the same: it is replaced with a new one every 30 days and the old one is deleted from our servers. If you install the App again later, it receives a new key that isn’t connected to the old one.
You can also remove the VPN configuration in iOS Settings under General › VPN & Device Management.
International transfers
When you connect to a server in another country, your encrypted traffic is carried to that country, and the access key is stored on the servers that need it to accept your connection. Where the law requires it, we use appropriate safeguards for such transfers.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to receive it in a portable format, and to complain to a data protection authority. Our lead supervisory authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon); you can also contact the authority where you live.
- EEA, UK and Switzerland: the GDPR rights listed above apply.
- California and other US states with privacy laws: we do not sell or share personal information, and we don’t use it for targeted advertising or profiling.
To have your access key deleted, remove the App (see Deleting your data). Because the key isn’t linked to your identity, we can’t look it up from your name or email. For support messages you sent us, write to us and we will provide a copy or delete them. We will never treat you differently for exercising your rights.
Requests from authorities
We respond only to requests that are legally valid. Because we keep no activity logs and no information linking an access key to a person, we hold no data that could show what a particular user did online.
Children
The Service doesn’t ask for or knowingly collect personal information from anyone, including children. If you believe a child has sent us personal information through support, contact us and we will delete it.
Changes to this policy
If we change this policy, we will update the date above and publish the new version on this page. If we ever start collecting new kinds of data, we will describe them here first and, where required, ask for your consent in the App before collection begins.
Contact
Questions about this policy or your data: support@vezarus.com.
AS Palmako, registry code 10301984, Näituse tn 25, 50409 Tartu, Estonia.