Privacy Policy
Last updated 2026-10-12
Cybo VPN ("the Service") is a VPN, operated by Usama Butt FZ-LLC. This page says exactly what we store, because a VPN's whole value is what it doesn't keep.
What we store
| Data | Why | How long |
|---|---|---|
| A random device identifier and token, the kind of device (Android, iOS, TV) and when it last contacted us | So the app can ask for a server without an account | Until you uninstall or we prune inactive devices after 12 months |
| Which server you are currently connected to, and the tunnel address and public key we set up for that session | To route your traffic and to remove you when you disconnect | Deleted on disconnect, or automatically after 24 hours |
| Only if you create an account: your email address, a scrambled (hashed) form of your password, and, if you sign in with Google, your name and Google account identifier | So one subscription can cover up to 5 of your devices, and so you can sign back in | Until you delete the account |
| Your subscription status and the purchase token from Google Play or the transaction identifier from the App Store (if you subscribe) | To know you're a premium user; Google or Apple handles payment | For the life of the subscription plus 30 days |
| Aggregate counts: devices, sessions and total traffic per server | Capacity planning | Indefinitely, as numbers only |
What we do not store
- No browsing activity. We do not log the sites you visit, DNS queries, IP addresses you connect to, or the content of your traffic.
- No source IP logs. The IP address you connect from is not written to disk. It exists only in the VPN server's memory while your session is live.
- No account needed. The app works without one. An account is optional and holds only what the table above lists.
- No per-device bandwidth logs beyond the live counters shown in the app, which are not sent to us.
We do not sell or share your data
We do not sell, rent or trade your data, and we do not use or disclose it to third parties for any purpose other than running the Service as described on this page. Nothing that passes through the VPN is ever used for advertising.
Third parties
- Google Play and the Apple App Store process payments. We receive a purchase token or signed transaction and a subscription status, never your card details.
- Google AdMob shows ads to free-tier users of the Android app. AdMob's own policy governs what it collects; premium users see no ads, and the iOS app shows none.
- Google Sign-In is an optional way to create an account on Android. If you use it, Google tells us your email address, name and a Google account identifier.
- Resend delivers the emails that verify an address or reset a password. It receives the email address the message is sent to.
- Hosting providers run our servers in the countries listed in the app. They see encrypted WireGuard traffic and nothing else.
Your rights
You can delete your account at any time in the app (Me → Delete account) or by the steps on the delete your account page. The account, its email address and its password are removed straight away.
Uninstalling the app abandons your device identifier. To have a device record removed immediately, email us the device ID from the app's settings screen.
Contact
support@cybovpn.com
Changes
We will update the date at the top of this page and, for material changes, show a notice in the app.