Privacy Policy

1. Who publishes the app

Fortify VPN+ for iPhone is published by RADIAL DATA SERVICES LTD, a company registered in England and Wales, with its office at 3rd Floor, 86-90 Paul Street, London EC2A 4NE, United Kingdom. For anything in this policy we are the controller of the personal data involved. Questions go to support@fortifyvpn.online.

2. What we never collect

None of the following is collected or stored by us:

• the sites, services or apps you reach through the tunnel;
• your DNS lookups, or anything inside your traffic;
• a session history tied to you, or a stored record of the IP address you connect from;
• your name, postal address, telephone number or card details;
• your contacts, photos, location or the files on your device.

Nothing in the app serves advertising. No advertising profile is built, the App Tracking Transparency prompt is never shown, and the device advertising identifier is not used. Registration does not exist, so there is no account to log in to. The app also does not scan your device and does not detect viruses.

3. What we handle, and why

Running the tunnel. Our servers necessarily pass your network traffic while you are connected, and that includes the IP address your device arrives from. It is handled in memory for the length of the session and never written into an activity log. Basis: performing our agreement with you.

Subscriptions. Apple takes the payment, not us. Card numbers and Apple Account credentials never reach us. The app asks Apple whether a valid subscription exists and unlocks accordingly, and Apple gives us aggregated sales reports that identify nobody. Basis: performing our agreement with you.

Email you send to support. Writing to us leaves us with your address and the contents of your message, held while we sort the matter out and keep a record of it. Basis: our legitimate interest in answering the people who use the app.

The leak check. That feature runs on Have I Been Pwned (HIBP), an outside breach-notification service run by Superlative Enterprises Pty Ltd in Australia. The address you type is sent to the HIBP API over an encrypted connection, and the answer says whether it turns up in known public breaches. We keep nothing afterwards, add you to no mailing list and send you no marketing. HIBP handles the query on its own terms, published at haveibeenpwned.com/Privacy. Basis: your request to run the check.

Diagnostics and usage. The app reports crashes, performance problems and basic interaction events, such as which screens are opened and whether a connection attempt succeeded, so that faults can be found and fixed. These reports travel with a device identifier rather than with your name, carry no browsing activity, and are not used to build a profile of you. Purchase events are processed the same way, so that a subscription can be restored and counted correctly. Basis: our legitimate interest in keeping the app working.

Settings on the device. Your chosen country and switches stay on the iPhone itself. Deleting the app clears them, together with the VPN profile it installed.

4. Who else is involved

Personal data is never sold, rented or traded, and none of it goes anywhere for advertising. The full list of anyone else who sees any of it: Apple, for distribution and billing; Have I Been Pwned, for a leak check you started yourself; our hosting providers, who run the server infrastructure to our specification; the providers that process purchase, crash and usage events on our instructions; and a public authority holding a legally binding request we have to answer. Activity logs cannot be handed over, because they are not kept.

5. Where processing happens

We are based in the United Kingdom, and the servers sit in a number of countries, so your network traffic is processed wherever the location you picked is. Any personal data leaving the United Kingdom or the EEA travels under the transfer safeguards those regimes provide for, in the UK GDPR and in the GDPR respectively.

6. How long anything is kept

Traffic handled during a session is gone when the session ends. An address checked against the breach database is not retained once the answer comes back. Diagnostic and usage events are held for up to 14 months and then drop out, and they are aggregated well before that. Support threads sit with us for two years at most, and longer only while a dispute runs or a legal duty makes us hold them. Aggregated Apple sales reports follow whatever accounting and tax rules demand.

7. Your rights

Local law may give you a set of rights over your personal data: a copy of it, a correction, deletion, a limit on how we use it, a portable export, an objection to a particular use, or the withdrawal of a consent you gave earlier. Write to support@fortifyvpn.online from the address you used with us and we answer within 30 days. Unhappy with the answer? In the United Kingdom the Information Commissioner's Office takes complaints, and inside the EEA your own supervisory authority does.

8. Children

The app is not aimed at children, and we do not knowingly take data from anyone under 13, or under the higher age your local law sets. Tell us if you think a child has sent us anything and it gets deleted.

9. Security

The link between your device and our servers is encrypted with industry-standard protocols. Access to our systems is restricted to the people whose work requires it. No system is absolutely secure, but holding almost nothing about you is the strongest protection we can offer.

10. Updates

If this policy changes, the new text appears on this page under a new date. Where a change affects you materially, the app will say so.

11. Reaching us

RADIAL DATA SERVICES LTD
3rd Floor, 86-90 Paul Street
London EC2A 4NE, United Kingdom
support@fortifyvpn.online