Privacy Policy

Русская версия · Same text as in the Level VPS app.

Effective November 14, 2026

What the app is

This app is a secure connection client. You add your own server or subscription (a share link, a subscription address or a configuration file), or sign in to a provider's panel with a connection link, and the app routes the device's traffic through the server you choose (except for sites that the traffic mode opens directly — see below).

The app itself has no built-in servers, no sign-up and no account. It also has no ads, no third-party analytics and no trackers.

What stays on the device only

• The servers and subscriptions you add: links, subscription addresses, connection keys, names, and subscription usage and expiry if the provider reports them.
• App settings and server check results (latency, whether a server answers).
• The app's technical log — the last hour of use, at most 256 KB — and the connection module error log (at most 512 KB). They keep no history of the sites you open or your DNS queries. If a site or a DNS server fails to answer, that site's name may appear in the connection module error log.
• After a panel sign-in: the panel session keys (in the iOS keychain), the panel address, the account email address if the panel reports it, and a random device identifier created by the app.

This data does not leave the device unless you send it to someone yourself. The only such case is the "Share log" button in Settings: it opens the system share sheet, and you choose who gets the log. Before that the app masks server addresses, domains and keys in it.

What is sent, and to whom

To your servers and subscription providers. The device's traffic goes through the server you chose. The exception is a traffic mode with direct sites (by default "Russia direct"): sites on its list open without the server, directly from the device. When a subscription is added or updated, the app downloads it from the address you entered and sends only the app name and version (as <name>/<version>). No device identifier, model or OS version is sent there. The owner of a server or subscription sees your IP address and traffic, like any server you connect to; how they handle it is up to their own rules.

DNS. While the connection is on, the names of sites that go through the server are resolved by the public DNS resolver set in the settings (Google Public DNS by default) through your server; it sees the server's address, not yours. The names of sites that the traffic mode opens directly are resolved by the DNS chosen under "Traffic mode" (Yandex DNS, Cloudflare, Google Public DNS or AliDNS) over encrypted DNS-over-HTTPS directly from the device; it sees your IP address. We do not see or keep these queries.

To a provider's panel — only if you signed in with a connection link. Until you sign in, the app does not contact any panel. After sign-in it talks to the panel named in the link:

• it receives servers, subscription expiry and usage, and service messages;
• it sends the session key, a random device identifier, the platform (iOS), the iOS version, the device model (for example, "iPhone15,3"), the app version and language, and the App Store country;
• it sends check results for that panel's servers: which one answered, in how many milliseconds, the speed of a test download, the network type (Wi-Fi or cellular), switches between servers, connection stalls and the connection type (transport), as well as whether the network and the panel's own addresses are reachable and which of the panel's servers this app version does not support. Servers you added yourself and the sites you open are never part of these reports;
• it sends the Apple push notification token, so the panel can send notifications, and "delivered" and "opened" marks that show whether notifications get through. Whether notifications are shown is decided by your iOS permission;
• if the panel is unreachable, it looks up the panel's backup addresses through public DNS (Google, Cloudflare, AdGuard, Comss.one) over DNS-over-HTTPS; they see your IP address and the panel's address.

This data is received by the panel's owner and handled under their own rules — for example, to count devices and pick working servers. If the panel is run by the app's developer, the developer uses this data only to run the connection and shares it with no one.

Apple. Panel notifications are delivered by the Apple Push Notification service. If such a notification has a picture, the app downloads it from the address given in the notification.

Connectivity checks. To find out whether there is internet access and whether the connection works, the app contacts public addresses:

• directly from the device — a short TLS connection to cp.cloudflare.com and www.gstatic.com; they see your IP address;
• through your server — cp.cloudflare.com, www.gstatic.com, www.google.com (latency checks) and ip-check-perf.radar.cloudflare.com (the exit address and country shown in the app); they see the server's address, not yours;
• for panel servers — a test download from speed.cloudflare.com, proof.ovh.net, cdn.jsdelivr.net or an address set by the panel.

Route sets. If you tap "Download" under "Traffic mode", the site lists are downloaded from cdn.jsdelivr.net, raw.githubusercontent.com, github.com or, after a panel sign-in, an address set by the panel.

The app does not sell data or pass it to advertising or analytics services.

What is not collected

• Traffic contents, browsing history, a log of DNS queries.
• Contacts, photos, files, messages, location.
• Advertising identifiers. There is no cross-app tracking.
• The clipboard is read only when you tap "Paste from clipboard".

Permissions

• Adding a network configuration — the iOS system prompt on the second step of the app introduction (you can postpone it with “Later”) or at the first connection. Without it the app cannot route traffic through a server. The permission itself turns nothing on.
• Notifications — the iOS system prompt on the app’s first screen, your choice: connection messages and, after a panel sign-in, messages from the provider.

The app asks for no other permissions.

How long it is kept

On the device — until you delete a server, a subscription or all data. The technical log keeps only the last hour of use. How long the owners of servers, subscriptions and panels keep data is up to them.

How to delete data

• Settings → "Delete all data" erases all servers, subscriptions, check results, the connection module log, most settings and the panel sign-in from the device. This button does not erase the app's technical log, but it only ever holds the last hour of use.
• Deleting the app erases everything except entries in the iOS keychain (see below).
• Signing out of a panel — the "Servers" tab, the panel profile menu → "Sign out". After that the app no longer contacts the panel.
• The device identifier for panels and the panel session keys are kept in the iOS keychain. The identifier is not erased by any of these actions (so a panel does not count a reinstall as a new device). After the app is deleted, the session keys stay in the keychain until the app is installed again: they are erased at the first launch of the new install. Without a panel sign-in none of this is sent anywhere.
• Data already received by the owner of a server, subscription or panel is deleted by them — please contact them.

Children

The app is not intended for children under 13.

Changes

If this policy changes, we will update this text and the date at the top.

Contact

Questions about your data: support@levelvps.site.