隐私政策

Privacy Policy (English)

Effective October 22, 2026 · KunVPN is operated by Briefkite LLC (United States)

This policy covers the KunVPN website, apps and browser extension. If something is not listed here, we do not collect it.

What we do not collect

• The websites or apps you visit, your DNS queries, or the content of your traffic.
• Your IP address. Our website, API servers and line servers do not record the IP address you connect from. A device's approximate region is looked up at connection time and only the region name is stored.
• Timestamps of individual connections and disconnections.
• Which websites Real-time Protection blocked for you. The block list is downloaded to your device and checked there, so the addresses you open are never sent to us; the blocked-site history and counts stay on your device. We only learn a specific address if you tell support it was blocked by mistake.
• Your real name, phone number or government ID. Signing up only needs an email address.
• We never use your device as an exit for anyone else, never resell your bandwidth, never sell or rent user data, and do no advertising tracking.

What we collect and why

• Account: email address; a one-way hash of your password (we cannot see it); an account ID. Used for sign-in, password recovery, verification codes, receipts and plan-expiry reminders, occasional product and offer emails (every one has a one-click unsubscribe link), and support.
• Plans and orders: plan, amount, payment method, order and payment times, the country of a dedicated exit, and any invite code or points used. Used to activate, renew, reconcile and support your plan.
• Devices: device model, OS, app version, approximate region (state/country level), last seen time, and a device identifier generated by the app or provided by the OS for this app only (not an IMEI or hardware serial). Used to list your devices and enforce the limit on signed-in devices.
• iPhone notifications: only if you allow notifications on iPhone, the push token the system issues for this app; the app also receives one invisible silent push a day. Used to remind you before your plan expires or your trial ends; if silent pushes keep failing we treat the app as uninstalled and stop pushing.
• Install check-ins: each time the app opens, and once a day in the background on Android (and when the desktop app is uninstalled), it reports an install ID generated by the app, OS, app version, device model and the times of these check-ins. This also happens before you sign in; it contains no IP address and no account. Used to count active and uninstalled installs; deleted automatically after 180 days without a check-in.
• Traffic totals: bytes uploaded and downloaded per account per day, with no destinations. Used for traffic tiers and fair use.
• Connection quality reports: success or failure, latency, which line and connection method, network operator and approximate region. Not linked to your account. Used to tell which lines work where.
• Promotion source: only if the link you opened carries a source tag (e.g. ?s=tg-1006a) or is an invite link (kunvpn.com/i/CODE, recorded as i-code). The tag is kept in your browser for 30 days (local storage kun.src, plus kun.hit so a reload is not counted twice) and sent with your sign-up, where it is stored on your account. We also count visits and download clicks per tag, without recording your IP address. When you open an invite link, our server also keeps, in memory only and for 24 hours, a one-way digest of your network exit mapped to that invite code, so that when you then sign up in the app we can ask whether that friend invited you; it only counts if you confirm. It is never written to a database, the IP address itself is not stored, and it expires after 24 hours. No third-party analytics run on our website. Used to see how many people each promotion brings in, signs up and pays.
• Browser extension: it only routes this browser's pages through the line you choose after you click Connect, and never reads or changes page content. Kept on your computer and not sent to us: your sign-in, chosen country, settings, your "skip these sites" list, the Real-time Protection list and any site you chose to open anyway (protection is checked in your browser, so the addresses you open are never sent to us). Sent to us: your sign-in, and a device ID generated by the extension plus its version when it fetches your plan and lines — it counts as one device, like the app, and can be removed under My devices. Uninstalling the extension removes everything it kept on your computer.
• Support messages you send in the app; invite and points records; a one-way hash of your device ID and email to prevent repeated free trials; and, only if you link it, your Telegram chat ID and display name for points notifications.

Third parties

Cloudflare (website hosting, downloads and request forwarding); Resend (verification, receipt, reminder and product emails); Apple Push Notification service (iPhone notifications); Telegram (support messages and optional notifications); our server and network providers, which, like any network operator, can see where connections go but not who you are; the public TRON blockchain and TronGrid (USDT payments) and third-party payment channels (CNY payments); the open-source Hagezi threat-intelligence lists for Real-time Protection, which our servers download and merge (your device never contacts them); and app stores under their own policies.

Where and how long

Our servers are located in Japan, the United States and other countries. Account, order and device records are kept until you delete your account; daily traffic totals are then kept only under an account number no longer linked to your email, for reconciliation with our network providers. Install check-ins are deleted after 180 days without a check-in, and in-app support conversations after 180 days. We keep no access logs on any of our servers; server error logs may contain an account ID or email and are kept for at most 30 days.

Your choices

You can view your orders, devices, points and traffic in the app and on the website; change your password, remove devices, sign out other devices and unlink Telegram; and request account deletion in the app's Settings or by email. Deletion in the app takes effect immediately: you are signed out of all devices and your email, password, devices, their install check-ins and support conversations are deleted at once. Requests by email are handled within 30 days. For accounting, the amount and date of paid orders and daily traffic totals are kept in a form no longer linked to you, and an irreversible hash of your device ID and email is kept to prevent repeated free trials. Our service is not directed to children under 13.

Contact

support@kunvpn.com · We will announce material changes on the website and in the app before they take effect.