kemangVPN app privacy policy

In short

• No traffic logs. We don't record the sites you visit, your traffic, your DNS requests or how much data you use.
• No analytics or trackers. The app has no analytics, ads or automatic crash reports.
• Only what's needed. The app only sends what it needs to sign you in, pick a server and keep the 10-device limit per account.

What the app sends to kemangvpn.com

• Email: when you sign in, to send you a 6-digit code. It's the email already on your account.
• Device name and model, operating system, app version: so you can recognise the device in your account area and remove it. The device name comes from your computer's or phone's name.
• The city you pick: each time you connect, so a server in that city can be chosen for you.
• Heartbeat: while connected, every 5 minutes and once on disconnect: connected status, server and protocol. It keeps two devices on the same account from getting the same WireGuard server. It carries no traffic, destinations or data amounts.
• Connection result: success or failure, server, protocol and how many seconds it tried. It helps us spot broken servers.
• IP address: like every internet request, our server sees your device's IP address when the app contacts it. It is used for rate limiting and sign-in security, and shown back in the app as your exit IP. It isn't stored with your device data.

What our server stores

For each device: name, operating system, model, app version, last active time, last server and protocol, connected status, and when it was added and removed. The device token is stored only as a hash, so nobody reading the database can use it.

Connection records hold the server, protocol and outcome, never keys or passwords.

What stays on your device

The device token is kept in the operating system's secure storage (on Mac and Linux: a system folder only the kemangVPN service can read). On computers, the WireGuard key and VPN password exist only in memory while connected and are requested again on every connect. Tokens, keys and passwords are never written to a log.

The app log stays on your device, without secrets and without traffic destinations. It only leaves your device if you press Copy log and send it to us yourself.

VPN keys and our infrastructure provider

kemangVPN's VPN servers are run by our infrastructure provider. VPN accounts and WireGuard keys are created and stored by that provider. The app receives them through kemangvpn.com, not directly from the provider, and keeps them on your device.

As with any VPN service, the VPN server sees your originating IP address while you are connected and forwards your traffic to the internet.

Devices and removal

• Up to 10 devices: per account. An 11th device is refused with a clear message.
• Remove any device: from your account area, Devices. The app on that device goes straight back to the sign-in screen.
• Signing out of the app: also revokes its device token on our server.
• Unused for 180 days: the device token expires by itself.

What we don't do

We don't sell or share user data for advertising. The app doesn't ask for access to your contacts, photos, microphone, camera or GPS location.

Contact

Questions about privacy, or want your device data deleted? Contact support@kemangvpn.com or WhatsApp +62 859 7304 0222.