1. Introduction
Haven VPN ("the app") is an Android application published by Pivot Master Apps ("we", "us"). This policy explains what information the app handles, what leaves your device and what does not, and the choices you have.
It covers the app published on Google Play under the package name
com.pivotapps.havenvpn, and this website.
Haven VPN is a VPN service: while it is on, your device's internet traffic is encrypted and passes through a Haven VPN server. We do not log that traffic.
2. What the app collects
"Collects" here means information that leaves your device. Everything the app does purely on your phone is listed in section 3 and is not collected by anyone.
| Information | When | Why | Where it goes |
|---|---|---|---|
| VPN key and purchase ID | While the VPN is connected | To route your encrypted traffic and to check whether you have Pro | Haven VPN servers (deleted when the session ends) |
| App integrity check | When you connect | To confirm the app is the genuine version from Google Play and protect our servers from abuse | Google Play Integrity and Firebase App Check (our servers receive only a yes/no token) |
| Advertising ID | In the free version | To show and measure advertising | Google AdMob |
| App activity, diagnostics and crash reports | Always | To see which features are used and to fix crashes | Google Firebase Analytics and Crashlytics |
| Purchase status | When you subscribe or buy | To unlock Pro | Google Play and RevenueCat |
What the app never collects
- The websites you visit or the content of your traffic
- Your DNS queries
- Your name, email address or phone number
- Your precise location
- Your contacts, photos, files or messages
3. Processing that happens only on your device
Haven VPN uses Android's VpnService to create an encrypted WireGuard® tunnel from your device to a Haven server, which forwards your traffic to the internet. Apps you exclude with split tunnelling bypass the VPN.
What our VPN servers do not store: the websites you visit, the content of your traffic, your DNS queries, connection logs, or your original IP address. Your IP address is held in server memory for a few minutes only, to rate-limit connection attempts.
What our VPN servers store while you are connected: your device's WireGuard public key (generated on your device; the private key never leaves it), the anonymous purchase ID used to check whether you have Pro, the private tunnel address assigned to you, and when your session ends. For free sessions the server also counts how much data the session has used, to apply the free fair-use limits (speed and data per session). All of these are deleted automatically when the session ends.
Abuse protection: when you connect, the app asks Google Play, through Firebase App Check and the Play Integrity API, to confirm that it is the genuine Haven VPN installed from Google Play. Our servers receive only a signed yes/no token that expires within an hour; they do not receive or store device details. Copies of the app that cannot be verified still work, on reduced free-tier limits.
When Shield is on, DNS lookups are resolved by Cloudflare's malware-blocking resolver (1.1.1.2); otherwise by Cloudflare's public resolver (1.1.1.1). See Cloudflare's privacy policy for its resolver.
The VPN is used only to secure your connection and hide your IP address. It is never used to show, block or modify ads in other apps.
5. Advertising
The free version of the app shows advertisements served by Google AdMob. To do that, AdMob collects your device's advertising ID and technical information about your device, and may use it to show you personalised advertising. This is the one category of information that is genuinely shared with a third party.
You can reset or delete the advertising ID, or opt out of personalised advertising entirely, in Settings › Google › Ads on your device. Where required by law, the app asks for your advertising consent on first launch and you can change that choice later from the app's settings.
Buying the premium subscription removes advertising from the app.
6. Purchases and subscriptions
Purchases are processed by Google Play. We never see or store your card details. We use RevenueCat to record whether your subscription is active, which receives a purchase identifier and an anonymous app user id from the app.
7. Analytics and diagnostics
The app includes Google Firebase Analytics and Firebase Remote Config. These record anonymous events — app opens, which screens and features are used, device model, OS version, app version, coarse region — so we can tell which parts of the app are worth improving and can change configuration without shipping an update.
These events never contain your files, their contents, their names, or anything you typed into the app.
8. Permissions the app asks for
| Permission | What it is for |
|---|---|
| VPN (VpnService) | To create the encrypted tunnel. Android asks you to allow it the first time you connect. |
| Notifications | To show the connection status, live speed and a Disconnect button. |
| Internet and network state | To connect to Haven servers and detect when you are offline. |
Each one is requested at the moment the feature that needs it is used, and declining it only disables that feature.
9. Third-party services
The app relies on the following services. Each has its own privacy policy:
- DigitalOcean — hosts Haven VPN servers (privacy policy)
- Vultr — hosts Haven VPN servers in additional countries (privacy policy)
- Cloudflare DNS (1.1.1.1 / 1.1.1.2) — resolves DNS lookups made through the VPN (privacy policy)
- Google AdMob — serves the ads in the free version (privacy policy)
- Google Play Integrity and Firebase App Check — confirm that connections come from the genuine Haven VPN app (privacy policy)
- Google Firebase (Analytics, Remote Config, Crashlytics) — anonymous usage analytics, remote configuration and crash reports (privacy policy)
- RevenueCat — records whether your subscription is active (privacy policy)
- Google Play Billing — processes purchases (privacy policy)
We do not sell your information, and we do not share it with anyone for their own marketing.
10. Retention and security
VPN session records are deleted automatically when the session ends (at most 24 hours for Pro, 60 minutes for free sessions). Analytics events are kept for 14 months, the Google Analytics default.
All communication between the app and any service is encrypted in transit using HTTPS/TLS. Data stored in our Firebase project is encrypted at rest by Google Cloud. Access to that project is restricted to Pivot Master Apps, and security rules limit every signed-in user to their own data.
No system is perfectly secure. If a breach affects your data we will notify affected users and the relevant authorities as required by law.
11. Your rights and choices
- Access and portability — ask us for a copy of anything we hold about you.
- Correction — ask us to correct inaccurate information.
- Deletion — uninstalling the app removes everything it stored, because it stores it only on your device.
- Advertising — opt out of personalised ads in your device settings, or subscribe to remove ads.
- Objection and complaint — if you are in the EEA or the UK, you may object to processing based on our legitimate interests and complain to your local data protection authority.
Write to pivotmasterapps@gmail.com to exercise any of these. We answer within 30 days.
12. Children
The app is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has provided us with information, contact us and we will delete it.
13. International transfers
Our service providers — Google and RevenueCat — operate globally, so information may be processed in countries other than yours, including the United States. Those transfers rely on the providers' own standard contractual clauses and equivalent safeguards.
14. Changes to this policy
We update this policy whenever the app changes what it does with your information, and change the "last updated" date above. Material changes are announced in the app.
15. Contact
Pivot Master Apps
pivotmasterapps@gmail.com
https://softwaredevelopement.github.io/havenvpn/