Privacy Policy

Encrivo VPN · Encrivo LLC · Last updated: 20 June 2026

This Privacy Policy explains what information Encrivo VPN (the "App"), provided by Encrivo LLC ("Encrivo", "we", "us"), collects, how we use it, and the choices you have. Encrivo VPN is a virtual private network (VPN) app whose core function is to create a secure, encrypted WireGuard tunnel for your device's internet traffic.

1. Information we collect

To provide your account and the VPN service, we process:

• Account data — your email address (used to create and authenticate your account) and your password (transmitted to authenticate you; we store only a one-way hash on our servers, never the password itself, and never in plain text).
• Device and app data — a randomly generated app install identifier (device_uid), your device model, and your app/OS version. The install identifier is not your device's advertising ID and not a hardware identifier (such as IMEI, serial number, or Android ID).
• VPN session and connection metadata — when you connect, our servers record session timestamps, connection duration, the server you connected to, the protocol, total data volume transferred (byte counts only), your client IP address, and the VPN exit IP address.
• Subscription / plan status — your plan and entitlement status, managed through your Encrivo account.

2. What we do NOT collect or log

Encrivo VPN does not log, monitor, inspect, or record the content of your traffic, the websites you visit, your DNS queries, SNI, or the destination domains, IP addresses, or ports you connect to through the tunnel. Our servers forward your already-encrypted traffic and do not inspect it. We also do not collect your precise location, advertising identifier, phone identifiers, contacts, photos, microphone, or camera data. Encrivo VPN contains no third-party advertising, analytics, or crash-reporting SDKs.

Note: this is a scoped statement about browsing/DNS/destination/content data — it is not an "all data" or unqualified "no-logs" claim. We do retain the account, device, and connection metadata described in this policy.

3. How your VPN traffic is encrypted

Traffic between your device and the Encrivo VPN server is encrypted with the WireGuard protocol (the Noise protocol framework, Noise_IKpsk2) using ChaCha20-Poly1305 encryption, a Curve25519 key exchange, and a per-session preshared key. Encryption and decryption happen on your device and on the VPN server; the App never accesses the plaintext of your tunneled traffic. Your WireGuard configuration, including private keys, is held in your device's memory only and is not written to disk.

4. How we use information

• To create and authenticate your account and provide the VPN service.
• To manage your registered devices and enforce per-plan device limits.
• To operate, secure, and troubleshoot the service, and to prevent fraud and abuse.
• To manage your subscription/entitlement status.

We do not sell your personal data. We do not use your data for advertising.

5. Data retention

We retain your account data and the connection/session metadata described above for as long as your account is active, in order to operate the service. Encrivo does not currently operate a fixed automatic purge schedule for this operational metadata; it is retained while your account exists and is removed or anonymized when you delete your account (see Section 7). We will state a specific retention period here if and when one is enforced.

6. Data security

• In transit: all communication with our servers uses HTTPS, and the VPN tunnel is WireGuard-encrypted.
• On your device: sensitive local data (such as sign-in tokens) is stored using Android's encrypted storage (EncryptedSharedPreferences, AES-256). Android backup of app data is disabled.
• On our servers: passwords are stored only as one-way hashes; access to systems is restricted.

7. Account deletion and your choices

You can delete your account at any time:

• In the app: open Account → Delete account, confirm with your password, and tap Delete.
• By web request: see our account deletion page if you cannot access the app.

What is deleted/revoked. When you delete your account we disconnect any active VPN session and revoke your device's VPN access (WireGuard peers and configuration), and we permanently delete your registered devices, VPN session records, and connection configuration profiles, and your profile information. Your account is anonymized: your email address is replaced with a non-identifying value, your password is erased, your account is marked deleted, and your identifier is removed from connection-event logs. After deletion you can no longer sign in with that account.

What may be retained (anonymized). Some payment, subscription, security, audit, and abuse-prevention records may be retained as required for legal, accounting, fraud-prevention, chargeback, security, and compliance purposes. These records are no longer linked to identifying personal data once your account is anonymized.

Depending on your jurisdiction, you may have rights to access, correct, port, or delete your data, or to object to or restrict processing. Contact us (Section 9) to exercise these rights.

8. Children

Encrivo VPN is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal data from them.

9. Contact

Encrivo LLC
Privacy: privacy@encrivo.com
Support: support@encrivo.com
Mailing address: 30 N Gould St # 44190, Sheridan, WY 82801 USA

10. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the app.