Privacy Policy

Effective 2026-09-27 (announced 2026-09-20 · Section 8 added. Before that, the 2026-08-25 version applied)

This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.

Everything concerning VPN connections and traffic is listed in the table below. The minimum information we store to run accounts, devices and payments is set out separately in Sections 2–4 that follow.

1. What we store

The country is read directly from the country value attached to the connection request. We do not put the IP address into a variable and discard it afterwards; we take only the country from the start.

2. When you create an account

• What Kakao, Google and Apple give us is a token that confirms your login.
• The user identifier the provider gives us is not kept as is; we convert it irreversibly before storing it. Even if our storage were leaked, that value could not be used to find out who you are.
• We do not store your email address. We use it once to create a display name and then discard it.
• We keep the display name (nickname) and profile photo address provided by your login provider in your account and show them in the app and on the My account screen. We do not download the photo file itself. We delete them when you delete your account.
• We keep the version (effective date) of the Terms of Service and Privacy Policy you agreed to at sign-up, and the time you agreed, as well as whether you agreed to the optional item “receiving marketing messages”. If you do not agree to the optional item, the service stays exactly the same.
• We do not create, receive or store passwords.

3. About your devices

To manage device slots, we keep a device identifier made by irreversibly converting (SHA-256) the device's unique value (iPhone identifierForVendor · Android ANDROID_ID · Mac IOPlatformUUID · Windows MachineGuid), together with the device name, its type (mobile · computer) and the time it was registered. The device identifier is not shown anywhere on screen. When you free up a slot, we delete these as well.

3-1. App error reports

If the app crashes or fails to reach the server, it uploads the type · time · app version · device type of that error to the server, so that we can fix it. Reports are sent without login information, so they are not linked to your account; anything in the error message that looks like a secret is removed before the report is saved, and reports are deleted automatically after 14 days.

4. Payments

Payments are processed through PortOne. Card numbers are not kept on our side. What we keep is the payment identification number, your internal account number and your subscription period (until when you can use the service). If you turn on automatic payment, we also keep the payment key (billing key) issued by PortOne. It is not a card number, but it can be used to charge your next payment, so we state this clearly. Turn it off with one tap on the account screen and we delete it on the spot — no confirmation dialog, no grace period. We keep the payment ledger for 5 years to handle refunds and disputes and to prevent the same payment from being applied twice. The original identifier from your social login provider and your email are not recorded in the payment ledger.

If you subscribe inside the iPhone app (App Store), Apple processes the payment. We do not receive card information; we receive only the transaction number · product · expiry time · auto-renewal status signed and sent by Apple, and use them to set your period of use. To tie the purchase to your account, we also pass Apple a single random token fixed for each account; that token cannot be used to tell who you are. The retention period is the same as for the payment ledger above.

5. Cookies

This website uses only one cookie, to keep you logged in. It is blocked from being read by scripts and is not sent to other sites. We have not added any advertising or analytics tracking tools to the website — it makes no requests to outside parties at all.

The Android app is different. While you use it for free, a single ad banner appears at the bottom of the screen. Section 5-1 below describes this. In contrast, the iPhone app has no ads. The Mac and Windows apps have no ads either.

5-1. Ads in the free version (Android)

Until you start a pass, a single Google AdMob banner appears at the very bottom of the Android app screen. Once you start a pass, the ads disappear. By contrast, the iPhone app has no ads, and it does not contain any advertising tool (SDK). The Mac and Windows apps have no ads either.

• To show ads, your approximate location (country level) and device and app information are sent to Google.
• In Europe and some other regions, we show a consent dialog before requesting any ads. If you do not consent, we do not request ads.
• We do not use full-screen or rewarded ads. There is only the one banner.
• What Google receives is described in Google's advertising privacy information. We do not pass your connection records or the sites you visit on for advertising — we do not have them in the first place (Section 1).

5-2. Once-a-day feedback

Once a day, the app asks “How was today?” You do not have to answer.

• What we store: the date · good/not so good · any text you write (up to 500 characters).
• Any text you write is kept exactly as you wrote it. Please do not include personal information.
• Retention: 60 days. After that it is deleted automatically.
• If you tap “Good” two or more times, a store review prompt may appear. That prompt is shown by Apple or Google, and we cannot see its result. We give nothing in return for a good review.
• If you delete your account, we delete this as well (Section 7).

6. Do we pass it on to anyone?

We do not sell it and we do not hand it over. Even when we receive a demand made through a procedure set by law, all we have is the information described in Sections 1–5-2 of this document. Whether we have received any such demand is disclosed on our warrant canary page.

7. When you ask us to delete it

Tapping bottom of the Pass screen › Delete account in the app, or Delete account on the My account screen on the website, deletes your social account mapping · account record · device records · subscription records · feedback records (including any text you wrote) and your current access rights, all together. The minimum payment ledger needed to handle refunds and disputes remains for the retention period in Section 4 above. Connection time · country records are deleted automatically after 30 days. Usage is not stored on our servers; it is kept only on your device.

If you disconnect our app on Kakao's side, we delete your account · device slots · consent records · feedback records as described above as soon as we receive that notice.

One thing remains even after you leave — a marker showing that you have already used the free trial. The trial is one per account, and this marker keeps us from giving it again if you leave and sign up again.

• What we keep: only an irreversibly converted value of your social account identifier and the date. Because it is made by mixing in a secret key held on our server, no one can tell who you are from that value, and we cannot reverse it either.
• What we do not keep: email · name · the original social account identifier · devices · payments · feedback records. These are deleted as described above.
• Retention: 1 year. After that it is deleted automatically, and if you come back you are treated as a new customer.
• Legal basis: performance of the contract and prevention of abuse under Article 22 of the Act on Promotion of Information and Communications Network Utilization and Information Protection. It is the minimum measure needed to stop the free benefit from being claimed again and again.
• This marker is used only for the trial. It does not stop you from signing up again or from starting a pass.

For accounts we have blocked, one more thing remains. If we block use of the service for conduct described in Section 6 of the Terms of Service, then, to prevent the person from signing up again, we keep the time of the block · the administrator who applied it · the user number at the time · the display name, keyed to an irreversibly converted value of the social account identifier. This record is deleted when the block is lifted.

7-1. When you request access, correction, deletion or suspension of processing

You can ask us at any time to show you your information (access), fix it (correction), delete it (deletion) or stop processing it (suspension of processing). You can delete it yourself right away in the app or on the website, as described in Section 7; for everything else, let us know at info@grafydesign.com or 070-8633-7222, and we will handle it within 10 days and tell you the result. You can also make a request through a representative. For anything we cannot delete, such as the payment ledger that the law requires us to keep, we will also tell you the reason.

7-2. Deletion procedure and method (destruction)

• Records with a set retention period (connection time and country 30 days · app error reports 14 days · feedback 60 days) are deleted automatically by our storage once that period has passed.
• If you delete your account, we delete what is listed in Section 7 on the spot.
• The payment ledger is deleted once the 5 years set by the Act on the Consumer Protection in Electronic Commerce have passed.
• All records are kept only as electronic files, and we delete them in a way that cannot be recovered. We keep no printed paper copies.

7-3. Children under 14

We do not collect personal information from children under 14 years of age (we have no procedure for obtaining consent from a legal representative). If we learn that a child under 14 has signed up, we delete that account and its information.

8. Information that goes abroad — the Tokyo servers and the account ledger

Our VPN servers are in Tokyo, Japan, and the account and subscription ledger runs on Cloudflare. We operate both ourselves, but the equipment is located outside Korea, so under Paragraph 1, Item 3 of Article 28-8 of the Personal Information Protection Act (entrustment of processing and storage for the performance of a contract) we disclose the following in this policy.

Questions about overseas transfers go to our Chief Privacy Officer (김응석 · 070-8633-7222 · info@grafydesign.com).

8-1. Who we entrust processing to (entrustment)

If you subscribe inside the iPhone app, the payment is processed directly by Apple as the seller (Section 4). Kakao, Google and Apple, which you use to sign in, each only confirm your login under their own policies; they are not entities we entrust processing to. If the entities we entrust processing to change, we update this table first.

8-2. How we keep it safe

• Everything sent and received travels only over encrypted connections (HTTPS).
• The identifier and login tokens given to us by your login provider are stored not in their original form but as irreversibly converted values (hashes).
• We do not receive card numbers. The admin screen can be opened only by someone who holds the admin key, and that key is kept only in the server's secret settings.
• Records past their retention period are set to be deleted automatically, as described in Section 7-2.

8-3. Chief Privacy Officer and where to get help

Our Chief Privacy Officer is 김응석 (Representative) — 070-8633-7222 · info@grafydesign.com. Please send any questions, complaints or requests for redress concerning personal information to this contact.

If you need help because your personal information has been infringed, you can also contact the bodies below.

• Personal Information Dispute Mediation Committee — 1833-6972 · www.kopico.go.kr
• Personal Information Infringement Report Center — (no area code) 118 · privacy.kisa.or.kr
• Supreme Prosecutors' Office — (no area code) 1301 · www.spo.go.kr
• Korean National Police Agency — (no area code) 182 · ecrm.police.go.kr

9. What changed

• 2026-09-27 — We gave their own sections to the items that the law requires a privacy policy to state but that did not yet have one: 7-1 how to request access, correction, deletion or suspension of processing · 7-2 destruction procedure and method · 7-3 children under 14 · 8-1 entrustment of processing · 8-2 measures to ensure security · 8-3 Chief Privacy Officer and bodies that provide remedies for infringement of rights. What we collect and how long we keep it did not change.
• 2026-09-26 — We added two more items so that this policy matches what actually happens. Section 3-1 “App error reports”: the error reports the app has been sending since 2026-09-01 were missing from this policy (not linked to your account, kept for 14 days). Section 4: we listed the items we receive from Apple for subscriptions inside the iPhone app (App Store) (that payment method opens on 2026-10-03 under Section 4-5 of the Terms of Service).
• Effective 2026-09-27 (announced 2026-09-20) — Added the new Section 8 “Information that goes abroad”. The items we store and how long we keep them did not change. Corrections made in the same version to match actual practice (2026-09-25) — removed Naver login, which had already been discontinued, from Section 2; corrected Section 5-1 to say that ads appear only in the Android app and that the iPhone app does not even contain an advertising tool; and added the in-app location for deleting your account to Section 7. We did not start collecting anything more.
• Effective 2026-08-25 — Section 5-1 ads in the free version · Section 5-2 once-a-day feedback · the trial marker in Section 7.

---

If this policy changes, we will record the change on this page together with its effective date.