Privacy Policy

1. Who is responsible

Excellent Web Services s.r.o. (IČO 47514400), S. Chalupku 1581/10, 036 01 Martin, Slovakia, operates VoxGate Connect and is the controller for the app and its own installation and notification service. Contact: privacy@voxgate.app.

This policy covers the VoxGate Connect application and this static privacy page. The page does not set cookies or run analytics scripts, but its hosting or CDN may process your IP address and basic request data to serve it. A separate payment page or external service opened from the app may have its own privacy notice.

2. Data kept on your device

The app keeps your subscription link and credentials, downloaded server configurations, cryptographic keys, routing rules, preferences, connection state, and session traffic counters on your device so it can connect and update your subscription.

If you enable diagnostic logging, Xray access and error logs are written locally. They may contain connection destinations and technical errors. The app does not automatically upload these logs to our installation or notification service.

If you choose a local or iCloud backup, the backup may contain subscriptions, server settings, and routing data. You control the backup destination and must remove cloud copies separately; uninstalling the app does not erase copies you saved elsewhere.

3. Subscription and update requests

When you add or refresh a subscription, the app requests the address you supplied. The request includes an installation-specific HWID and device headers such as model, operating system and version, locale, and app version. The subscription service uses these details to supply compatible configurations and, where applicable, enforce device limits.

The destination and its hosting or CDN can see the network address of the request and the subscription URL or token needed to retrieve it. The app also downloads routing data from the configured sources when requested.

4. Device registration and notifications

After a subscription is verified, our device and notification service registers a random installation ID and receives the platform, app version, device model, OS version, language, subscription HWID, notification permission state, and a push token if available.

We record limited events: app open, successful subscription refresh, and notification receipt or opening. We also store the last activity time and notification delivery status. These records support device statistics, service reliability, and relevant notifications; they are not a browsing-history feed.

You may decline operating-system notification permission. The app can still use the basic installation and activity service after a verified subscription, while push delivery will be unavailable.

5. VPN traffic and diagnostic logs

VPN traffic is sent through the server you select. The app does not send browsing history or traffic contents to our device statistics or notification service. Network endpoints still process the technical data needed to carry traffic.

Optional Xray access and error logs are off by default. If enabled, they remain only on your device and are not automatically sent to VPN servers or our device and notification service. Sharing a log with support is a separate action you control. We do not sell, rent, or disclose VPN traffic data for advertising.

6. Optional device permissions

The VPN permission creates and operates the system tunnel. Camera and photo access support QR import, notifications allow push alerts, and local-network access supports sending a subscription to a TV on the same network. Availability varies by platform. You can manage these permissions in device settings.

7. Service providers

Google Firebase Cloud Messaging and Apple Push Notification service deliver optional push messages. Our hosting providers process the requests needed to run the subscription and installation services. Routing-data sources receive downloads requested by the app. If you select iCloud backup, Apple stores that backup under your iCloud account.

8. Purposes and legal basis

Processing necessary to deliver a requested subscription, connection, backup, and support response is based on performance of a contract or steps requested before one. We rely on legitimate interests, where permitted, to keep the service secure and reliable and to understand installation and notification delivery activity. Where consent is required for an optional feature, you can withdraw it without affecting earlier lawful processing.

9. Retention and deletion

Local app data remains until you delete it or uninstall the app. Backups that you made outside the app remain until you delete them from their destination. Pending activity events on the device expire after 30 days if they cannot be delivered.

The current installation and notification backend does not automatically purge device registrations, event history, and delivery records after a fixed number of days. We retain these records until a valid deletion request or the service is discontinued, subject to any legal obligation to retain limited records. Contact us to request deletion of records linked to your installation; removing a local subscription alone does not delete its server-side device record.

Support correspondence is kept while needed to answer your request and, where applicable, to resolve a related dispute or protect legal rights.

10. Your choices and rights

You can manage subscriptions, permissions, backups, and local data in the app or device settings. To request access, correction, deletion, restriction, portability, or to object to processing, write to privacy@voxgate.app. We may ask for information needed to verify that the request concerns your installation.

When you contact support, we process your email address, message, and any technical details you choose to provide to answer the request. Please do not send passwords, private keys, full subscription links, or payment-card details.

Where processing relies on consent, you may withdraw it. You may also lodge a complaint with your local supervisory authority or the Slovak Data Protection Authority (Úrad na ochranu osobných údajov Slovenskej republiky).

11. Children

VoxGate Connect is intended for people aged 16 or older. We do not knowingly provide the service to children under 16. If you believe a child under 16 has provided personal data through the service, contact us so we can review and delete it where appropriate.

12. Changes to this policy

We may update this policy when the app or its data practices change. The current version and effective date will remain on this page. Material changes will be communicated in the app or by another appropriate method.