1. Scope and operator
This Privacy Policy applies to the Sai VPN Android application, the website at sai-vpn.com, and related backend services (collectively, the “Service”). In this policy, “Sai VPN,” “we,” “us,” and “our” refer to the operator of the Service.
By using the Service, you acknowledge the practices described here. If you do not agree, do not use the Service.
2. Information we process
Anonymous installation and access information
Sai VPN does not require a traditional user account. The app and our backend create random identifiers for the app installation and an anonymous customer, together with credentials and access tokens used to authenticate requests and deliver the server catalog. The installation secret is stored by our backend in hashed form rather than as plain text.
Device and app information
We may process the app package and version, device model, Android version, language or locale, time zone, and a coarse country or region inferred from the time zone. Sai VPN does not request precise or coarse Android location permission and does not collect GPS coordinates through the app.
Connection and technical information
When the app communicates with our backend or VPN infrastructure, internet protocols make your IP address visible to those systems. We may also process request timestamps, selected server identifiers, connection result, connection duration ranges, data transfer totals, error information, and security or operational logs. We use this information to operate, secure, troubleshoot, and improve the Service.
VPN traffic
When you start a VPN connection, network traffic from your device is routed through the VPN endpoint you select. That traffic must be processed in transit to provide the VPN connection. We do not use the content of your VPN traffic for advertising. Infrastructure providers may process limited network and security metadata as necessary to deliver and protect their systems.
Purchase and subscription information
If you view, buy, or restore VIP access, we and our billing providers may process an anonymous app user identifier, product and offering identifiers, purchase and transaction identifiers, subscription status, purchase and expiration dates, and entitlement status. Google Play handles payment credentials. We do not receive or store your full card number.
Advertising, consent, analytics, and messaging information
The free version may display advertising through CAS.AI and its mediation partners. Depending on your device, region, settings, and consent choices, these providers may process device or advertising identifiers, IP address, general location inferred from IP, device and app information, ad interactions, and consent records. Sai VPN also uses Google Analytics for Firebase for app events such as startup, connection outcomes, server tests, and ad flow results, and Firebase Cloud Messaging to deliver service notifications or configuration updates. These services may use app-instance or messaging identifiers and related technical information.
Website information
This website does not currently place its own analytics or advertising scripts in your browser. Like most hosting services, our web server may automatically record IP address, requested URL, timestamp, browser information, and error or security events in server logs.
3. How we use information
We use information described above to:
- provide, authenticate, and maintain the app, API, and VPN connections;
- select and deliver available public and VIP servers;
- confirm purchases, restore access, and synchronize subscription status;
- show and measure ads in the free version, subject to applicable consent choices;
- deliver notifications and urgent service configuration updates;
- detect abuse, protect infrastructure, diagnose errors, and improve reliability;
- comply with law, enforce our Terms of Use, and protect users and the Service.
Where applicable law requires a legal basis, processing may be based on providing the Service you request, our legitimate interests in operating and securing the Service, your consent for certain advertising or device-storage activities, or compliance with legal obligations.
4. When information is shared
We may share or allow processing of information with:
- Google Play, for app distribution, billing, subscription management, and purchase restoration;
- RevenueCat, for purchase validation, anonymous customer identification, entitlement status, and subscription synchronization;
- Google Firebase, for analytics and cloud messaging;
- CAS.AI and enabled advertising partners, for ad delivery, measurement, fraud prevention, and consent management in the free version;
- hosting, network, and VPN infrastructure providers, to run and secure the website, API, and VPN endpoints;
- authorities or other parties, when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or handle a business reorganization.
Third-party services process information under their own terms and privacy policies. Their practices may vary by country, configuration, and the advertising partners enabled at the time of an ad request.
5. Retention
We retain information only for as long as reasonably necessary for the purposes described in this policy, including providing active access, maintaining purchase and entitlement records, preventing fraud, resolving disputes, meeting legal or accounting obligations, and maintaining limited backups. Retention periods vary by data type and provider. Operational and security logs are normally retained for a shorter period than subscription and transaction records.
Uninstalling the app removes local app data according to Android behavior, but it does not automatically delete backend records, third-party records, or cancel a Google Play subscription.
6. Your choices and rights
- You can decline the Android VPN permission, but the VPN connection cannot work without it.
- You can control notification permission in Android system settings.
- Where required, the app provides advertising privacy choices through its consent flow or privacy settings.
- You can manage or cancel a paid subscription in Google Play Subscriptions.
- You may request access, correction, deletion, restriction, objection, or portability where applicable law grants those rights.
To make a privacy request, email support@sai-vpn.com. Include enough information to identify the relevant installation or purchase without sending passwords, full payment card details, or VPN configuration secrets. We may need to verify the request and may retain information that law requires us to keep.
7. Security and international processing
We use reasonable technical and organizational measures designed to protect the information we control, including encrypted HTTPS communication for the API and hashed installation secrets on the backend. A VPN tunnel protects traffic between your device and the selected VPN endpoint according to the protocol in use. No internet service can guarantee absolute security.
Sai VPN and its providers may process information in countries other than the one where you live. Where required, providers use contractual or other recognized safeguards for international transfers.
8. Children
The Service is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly ask children to provide direct contact information. If you believe a child has provided personal information without appropriate permission, contact us so we can review and delete it where required.
9. Changes to this policy
We may update this policy as the Service, providers, or legal requirements change. The “Last updated” date shows when the current version took effect. Material changes may also be communicated in the app or through another appropriate notice.
10. Contact
For privacy questions or requests, email support@sai-vpn.com. For general product support, you can also use Sai VPN support on Telegram.