Only what a feature needs.

No ads, no tracking, no sale.

We do not sell personal data, show advertising, or track you across other companies’ apps and websites. We do not use the device’s advertising identifier and we do not build profiles.

None of the apps this policy covers asks for an account, your name, or your email address.

Most of it never leaves.

What you set up in an app — filter lists, allowed sites, your own rules, the documents you fill in, the VPN keys and subscription links you add — is written to your device. Keys and identifiers are kept in the iOS Keychain. Where an app offers iCloud sync and iCloud is switched on, settings are mirrored through your own iCloud storage, which belongs to your Apple Account; we have no access to it.

Deleting an app removes what it stored, except small items in the Keychain, which iOS may keep until the device is erased.

We cannot see the pages you open.

Our ad blockers filter Safari through Apple’s Content Blocker mechanism: the system receives a compiled list of rules in advance and applies them itself. Safari never reports page addresses or page content back to the app, so there is no browsing history for us to hold. A count of blocked requests, where an app shows one, stays on the device.

A VPN in our apps does not record the sites you visit or the traffic that passes through it, and neither do we.

Your traffic goes to the service you connect to.

An app with a VPN connects you to servers run by a VPN service: the one whose access you buy in the app, which is operated by our partner, or any service whose key or subscription link you add yourself. That service handles the connection, including your IP address, under its own rules. We do not run those servers.

To keep a subscription’s server list current, the app asks the service that issued it, and sends along an identifier the app creates for the device, the device model, the system version and the language. VPN services use these to limit how many devices share one subscription.

Your keys and subscription links are never sent to us or to support. Nothing about how you use a VPN is sold, and none of it is used or disclosed to third parties for any purpose other than providing and supporting that VPN.

Counting, not watching.

Some apps send usage statistics so we can tell how many people use them and what goes wrong: a random identifier created when the app is installed, the app and system version, the device model, language and region, and events such as the app being opened, a key being added, or a VPN connection starting, succeeding or failing — with its duration, the server’s country and protocol, and the error, if there was one.

When a VPN connection fails, the app may also send its recent technical log — when the connection started and stopped, errors, network changes — so the cause can be found. It contains no list of the sites you visited, and never your key.

The identifier is not your name, email, Apple Account or advertising identifier, and nothing links it to them. Statistics are never sold, shared with advertisers or used to show you ads.

Apple takes the payment.

Purchases go through the App Store. Apple processes the payment under its own terms; we never see your card or billing details.

Apps with subscriptions use RevenueCat, a subscription-management service, to know which subscription is active. It receives an identifier the app creates, the purchase records the App Store provides — product, dates, price and storefront — and basic device information.

When a subscription gives access to a service run with a partner, such as a VPN, the partner receives what it needs to set up and renew that access: whether the subscription is active, its plan, dates, price and country, and the App Store’s signed record of the purchase, which shows that it is genuine. It does not receive your name, email address or payment details.

Which ad, not who.

If you installed an app after tapping one of our ads on the App Store (Apple Ads), the app asks Apple which campaign, ad group and keyword led to the download. Apple answers through its AdServices framework, without the advertising identifier and without tracking you. The app passes that answer — with the install’s random identifier and the subscription service’s identifier — to us, our partner and RevenueCat, so we can see which ads bring people who go on to use the app and subscribe.

Only if you say yes.

An app asks before it sends notifications. If you allow them, it passes its notification token — the address Apple gives this app on this device — with the app’s language and version to the service that sends them, ours or our partner’s. If you turn notifications off in Settings, the app tells that service and nothing more is sent. Opening a notification is counted.

What you write goes to the people who answer.

Some apps let you write to support from inside the app. Your messages, the photos you choose to attach, and a random identifier for your conversation go to the support team, together with the app and system version and the device model. In an app with a VPN, a new request also carries the state of the connection — on or off, the server’s country, protocol and address, the last error, when your access ends — and the app’s recent technical log, so support sees what you see. Never your key.

Requests about a service run with a partner may be answered by the partner’s team.

Other apps open your own mail app with a message already written. Nothing is sent until you press send, and you see the whole text first, including any technical summary.

Other requests apps make.

Ad blockers download filter lists over HTTPS from the people who maintain them — AdGuard (filters.adtidy.org), the EasyList authors (easylist.to), and any address you add yourself. Nothing about you is attached to those requests. Converting them into Safari’s rule format happens on the device.

Apps that fill in UK company details send the company number you enter — and nothing else — to Companies House, the UK government service that publishes the register, when you ask for the lookup and at no other time.

Any server an app contacts sees your IP address, as it would for any request on the internet. Ours and our partners’ use it to deliver the answer and to protect the service from abuse, not to identify you.

The services involved.

Apple, for App Store purchases, iCloud, notifications and ad attribution. RevenueCat, for subscription status and ad attribution. The partner that runs a service offered in an app, such as a VPN — its servers, the access you buy, and the statistics and support for that service. The hosting providers whose servers we and our partners use. Each receives only what its part needs, and uses it for that part.

Some of these services operate outside the United Kingdom and the European Economic Area. Where data goes there, we rely on the safeguards data protection law provides, such as standard contractual clauses.

Why we may use it.

To give you what you ask for — VPN access you bought, an answer to your support request, a company lookup — because that is part of providing the app to you. To count usage and fix what breaks, because keeping the apps working is in our legitimate interest and the data involved identifies no one by name. To keep purchase records, where the law requires it.

Kept while it is useful.

Statistics and technical logs are kept while they help us understand how the apps work and are then deleted or reduced to totals. Support conversations are kept while your request is open and for a reasonable time afterwards, in case you come back to it. Subscription records are kept while the subscription is active and for as long as accounting and tax rules require.

Ask, and we will act on it.

You can ask us for a copy of the data held about you, and ask us to correct it, delete it, or stop using it. Write to contact@varion-rp.com. The data is tied to random identifiers rather than to your name, so tell us which app it concerns and anything that could find it — the time of a support message, say, or the date of a purchase.

You can also complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live. Deleting an app stops everything it sends.

Encrypted on the way.

Everything an app sends travels over encrypted connections. Access to statistics and support conversations is limited to the people who need it to do their work.

Not directed at children.

These apps are not directed at children, and we do not knowingly collect data about children. If you believe a child has sent us personal data, write to us and we will delete it.

If this changes.

An updated policy is published on this page with a new date. We do not change it retroactively — if an app starts collecting something new, this page says so before the app does.