Early access — pending legal review

Privacy Policy

Effective date set at publication. This page describes JipJip’s actual app behavior; it will be finalized with a lawyer before wide release.

Who we are

JipJip is a VPN service. JIPJIP TECHNOLOGY LIMITED is the legal entity that operates this website and the JipJip app, and is responsible for the personal data described on this page.

For any privacy question, or to delete your account, email [email protected].

What we collect

• Account: your email address and a password stored only as a one-way bcrypt hash (never in readable form). Your account’s access level and its active period.
• Redacted reliability reports (to keep the VPN working): the connection result and the stage it reached, the server used, a coarse network type (Wi-Fi or mobile — no network name), a masked exit IP (e.g. a.b.x.x), a reconnect count, and a diagnostic category (e.g. “the network may be blocking secure connections”).
• App and device basics for debugging: the app version and Android version.

What we never collect

• Your browsing history or content, or your DNS query content — the access log that would hold it is switched off in our VPN servers’ configuration, not merely unused. That is how they are configured today; if that changed, this policy would change with it.
• Your full IP address — it is used in memory to rate-limit sign-in attempts, and our web front end has no access log configured, so it is not written to disk (exit IPs are masked). Our servers do necessarily see connections arrive.
• Your IMEI, SIM / phone number, or Wi-Fi network name (SSID).
• Your precise / GPS location.
• The VPN’s internal secrets (server identifiers, paths, session tokens) — never logged or shown.
• Any in-app payment information — there is no payment inside the app.
• Any card, wallet, or bank details — the app takes no payments at all, so there is nothing for it to collect.

We do not sell, use, or disclose to third parties any data collected through the VPN, for any purpose. The one thing that is not a “disclosure” in that sense, and that we would rather state plainly than hide behind the word: your traffic physically transits a CDN provider (Cloudflare) and JipJip’s own servers, because that is how it reaches the internet. They carry it on our instruction and may not use it for their own purposes. Nobody else receives it.

How we use it

To run your account and access level, to keep the service reliable (the redacted reports help us tell a carrier block apart from a server problem), and to answer your support messages. We do not use your data for advertising, profiling, or resale.

Payments

The app is a free download and contains no purchase of any kind. It collects no payment data, because it takes no payments: we never see, ask for, or store your card number, wallet number, PIN, OTP, or a screenshot of a payment.

Where an account has paid access, it was arranged separately and outside the app. What our systems then hold is your access level and its period — not payment instruments. If money was paid, our accounting records keep the amount, currency, date and status, because a UK company must be able to produce its financial records.

How DNS works here

Your DNS lookups are answered by Cloudflare’s 1.1.1.1 resolver over encrypted DNS, and they travel through the tunnel — so Cloudflare sees them arriving from our server rather than from you. Our own domain names are the exception: they have to be resolved before the tunnel exists, so those few lookups go out directly. We do not run our own resolver and we do not keep a copy of your lookups.

VPN traffic

When you tap Connect, your traffic is routed through JipJip’s servers so it can reach the internet. We do not log your browsing content. See the VPN disclosure for details.

Keeping & deleting your data

Redacted reports and operational logs live in our server’s system journal. No fixed retention period is configured: older entries are rotated out as the journal fills, which at today’s volume works out to roughly the last two months. That is an observation of how much currently fits, not a guaranteed limit, and it can change. You can delete your account yourself from inside the app (Settings → Delete account), or request it by email. What is removed, and the one thing that is kept, are set out on the account deletion page.

Third parties

Your traffic transits a CDN provider (Cloudflare) and JipJip’s own servers, which carry it on our instruction and may not use it for their own purposes. Cloudflare also answers your DNS lookups, as described above. Our verification and password-reset emails are delivered by Resend, which therefore receives your email address for that purpose and nothing else. Our servers run at hosting providers. Each of these acts on our instruction. We share your personal data with nobody else — no advertisers, no data brokers, no analytics company. The app contains no advertising SDK and no analytics SDK, and it makes no payment of any kind, so neither Google Play nor Apple receives anything about you from it beyond what any app download involves.

Children, changes, and jurisdiction

JipJip is not directed to children under the age required in your jurisdiction. We may update this policy and will change the effective date; the governing jurisdiction is finalized at publication.

This is an honest early-access draft that matches what the app actually does. Every “never collected” item above is enforced in the app.

← Back to home