Privacy Policy

1. Information we do not collect

The app does not collect or transmit any of the following to us or to any third party:

• Identity information such as your name, email address or phone number
• Device identifiers (IDFA, IDFV) or advertising identifiers
• Location data
• Contacts, photos, calendars or other system privacy data
• Browsing history, visited addresses or the contents of your network traffic
• Crash logs, usage statistics or behavioural analytics

The app requires no account registration and contains no sign-in functionality.

2. Data stored only on your device

To provide its core functionality, the app stores the following inside its sandbox on your device. This data never leaves your device:

• Configuration profiles — the YAML configurations you add via link, file or QR code, loaded and parsed locally.
• App settings — preferences such as log level, ports, latency-test URL and auto-update intervals.
• Traffic and connection records — the live connection list, request history and traffic statistics shown inside the app.
• Runtime and diagnostic logs — core logs and VPN start-up diagnostics.
• Geo data files — GeoIP / GeoSite databases used for local rule matching.

All of this can be cleared from within the app, and is removed entirely along with the sandbox when you delete the app.

3. Network connections

The app makes network requests in the situations below. The first four reach only destinations you chose. The last two are initiated by the app itself and are described in detail afterwards.

• Downloading a subscription — connects only to the subscription URL you entered.
• Updating Geo data — connects to the public data source specified in your configuration.
• Latency testing — sends connectivity probes to the nodes in your configuration.
• Traffic forwarding — only after you manually enable the VPN, and only according to your configuration's rules.
• Connectivity check — on launch the app requests Apple's public connectivity-test page on apple.com, so that iOS raises its network-permission prompt at a sensible moment rather than in the middle of a later task. The response is discarded.
• Exit-IP lookup — the app queries public third-party IP-geolocation services to display your current exit IP address and country. See below.

About the exit-IP lookup

This feature exists so you can verify which exit your traffic is actually leaving from. It runs when the app launches, when you switch configuration profiles, and when you tap refresh on the Status screen.

The app queries several public IP-geolocation services — currently ipwho.is, api.ip.sb, ipapi.co and ipinfo.io — and uses whichever responds first. Because any web request inherently reveals the address it originates from, those services necessarily receive the IP address of that request; their handling of it is governed by their own privacy policies. The app stores nothing from the lookup, does not associate it with you or with any identifier, and never uses it for analytics or tracking. The result is displayed on screen for reference only.

We operate no servers and none of this traffic passes through us. Data handling between you and any third-party service provider is governed by that provider's own privacy policy, which we encourage you to review.

4. VPN and Network Extension permission

The app uses the iOS Network Extension (Packet Tunnel) capability to handle system traffic. This permission:

• takes effect only after you manually enable the VPN toggle and grant iOS system authorisation;
• is used solely to forward traffic locally according to your configuration's rules;
• does not record, retain or upload the addresses you visit or the contents of your traffic.

You can disable the VPN in the app at any time, or remove the configuration under Settings → General → VPN & Device Management.

5. Camera access

The camera is used for one purpose only: scanning a QR code that contains a configuration URL. No image is stored and nothing is uploaded. You may decline this permission and still add profiles by URL or by file.

6. Children's privacy

This app is not directed at children under 13, and we do not knowingly collect personal information from children. Since the app collects no data at all, this holds equally for every user.

7. Third-party open-source components

The app uses the open-source mihomo core as its network processing component. It runs locally on your device and reports no data to any third party.

8. Changes to this policy

If this policy changes, we will update the "Last updated" date at the top of this page. Significant changes will also be noted in the app's release notes.

9. Contact us

If you have any questions about this privacy policy, email us at info@starhubinformation.com.