Privacy Policy

OneSafe VPN  |  Last updated: August 20, 2026

OneSafe VPN ("we", "our", or "us") respects your privacy. This policy explains what data the app collects, why, and how we handle it. By using OneSafe VPN you agree to this policy.

1. Data We Do Not Collect

• Your browsing history or visited websites
• Traffic content or DNS queries made while connected
• Your real IP address or the VPN IP address assigned to you
• Your personally identifiable information — no account or registration is required
• Your location (GPS), contacts, camera, microphone, or files

2. Data Collected to Operate the App

Server list — the list of available VPN servers is retrieved from Google Firebase. Firebase may record that your device fetched this list; it does not receive any VPN traffic or browsing data.

Feedback submissions (optional) — if you choose to submit feedback through the in-app Feedback screen, we collect:

• Your email address (optional — only if you enter it)
• Your feedback description
• Device model and Android OS version
• App version
• Country and ISP (detected at submission time, not stored with your identity)
• Last connected server IP

This information is used solely to respond to your feedback and improve the app. Feedback data is stored in Google Firestore and retained until manually deleted by our team.

3. Advertising (Free Tier)

OneSafe VPN displays advertisements served by Google AdMob. AdMob may collect:

• Android Advertising ID (you can reset or opt out in device Settings › Privacy › Ads)
• Device make, model, and OS version
• General app usage signals

AdMob's data use is governed by the Google Privacy Policy.

4. Premium Access via Rewarded Ads

Some VPN servers are marked as Premium. You can unlock temporary access to these servers by watching a short rewarded video advertisement. No payment, subscription, or account is required. No additional personal data is collected for this feature beyond what AdMob already collects as described in Section 3.

5. Third-Party Services Used

• Google Firebase — server list, remote configuration, and feedback storage. Firebase Privacy
• Google AdMob — in-app advertising. Google Privacy Policy
• ipwho.is — on each app launch, a request is made to ipwho.is to determine your approximate country and internet service provider (ISP) based on your IP address. This information is stored locally on your device and only transmitted to us if you submit feedback. ipwho.is does not receive any VPN traffic or personally identifiable information beyond your IP address. ipwho.is

We do not share your data with any other third parties.

6. VPN Permission Use

OneSafe VPN uses Android's VPN API solely to encrypt and route your internet traffic through our secure servers. This permission is never used for advertising, analytics, or tracking your location.

7. Data Security

VPN traffic is encrypted end-to-end using AES-256, with TLS securing the control channel. All communications with Firebase and AdMob use HTTPS.

Data stored locally on your device (server preferences, app settings) is protected by Android's standard app sandbox and is inaccessible to other apps.

The app includes runtime integrity checks to detect modified or compromised environments.

8. Data Retention

• Feedback submissions are retained until manually deleted by our team.
• We retain no other personally identifiable information.
• Third-party providers (Firebase, AdMob) manage their own retention periods per their respective privacy policies.

9. Children's Privacy

OneSafe VPN is not intended for children under 13. We do not knowingly collect data from children under 13. If you believe a child has used this app and provided personal data, contact us at the address below and we will take prompt action.

10. Your Choices and Rights

• Opt out of personalized ads: Settings › Privacy › Ads › Opt out of Ads Personalization on your Android device.
• Reset Advertising ID: Settings › Privacy › Ads › Reset Advertising ID.
• Request deletion of feedback data: email us at contact@xatsu.com and we will delete it promptly.
• Because we do not collect personal data beyond what is described above, there is typically no personal record to access or correct beyond feedback submissions.

11. EU / EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of access — request a copy of any personal data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your personal data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing of your personal data.
• Right to lodge a complaint — contact your local data protection authority if you believe your rights have been violated.

To exercise any of these rights, contact us at contact@xatsu.com. We will respond within 30 days.

Our legal basis for processing the limited data described in this policy is our legitimate interest in operating and improving the service.

12. California Users (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you the following rights:

• Right to know — request disclosure of the personal information we collect, use, or share.
• Right to delete — request deletion of personal information we have collected.
• Right to opt out — opt out of the sale of personal information. We do not sell personal information.
• Right to non-discrimination — we will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, contact us at contact@xatsu.com.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through an in-app notice. Continued use of the app after any change constitutes acceptance of the revised policy. The date at the top of this page reflects the latest revision.

14. Contact

Questions, concerns, or data requests:

Xatsu LLC
Email: contact@xatsu.com