Privacy Policy

Encrivo VPN · a product of BENEERA LLC · Last updated: 21 October 2026

This Privacy Policy explains what information Encrivo VPN (the "App"), provided by BENEERA LLC ("we", "us"; references to "Encrivo" in this document mean BENEERA LLC — Encrivo VPN is a product of BENEERA LLC), collects, how we use it, and the choices you have. Encrivo VPN is a virtual private network (VPN) app whose core function is to create a secure, encrypted WireGuard tunnel for your device's internet traffic.

1. Information we collect

To provide your account and the VPN service, we process:

• Account data — your email address (used to create and authenticate your account) and your password (transmitted to authenticate you; we store only a one-way hash on our servers, never the password itself, and never in plain text).
• Device and app data — a randomly generated app install identifier (device_uid), your device model, and your app/OS version. The install identifier is not your device's advertising ID and not a hardware identifier (such as IMEI, serial number, or Android ID).
• VPN session and connection metadata — when you connect, our servers record session timestamps, connection duration, the server you connected to, the protocol, total data volume transferred (byte counts only), your client IP address, and the VPN exit IP address.
• Subscription / plan status — your plan and entitlement status, managed through your Encrivo account.
• Google Play purchase records — if you subscribe to Encrivo Premium through Google Play, the app sends us the purchase token and product, and we receive the rest from Google Play. We store: the product and plan (monthly or yearly) and the offer used (for example, a free trial); the start and expiry dates; the subscription’s state (for example active, cancelled, in a grace period, on hold, paused, or expired), whether it is set to renew, and whether the purchase has been acknowledged; the category of any cancellation (cancelled by you, by Google Play, by us, or replaced by a new purchase); the latest Google Play order ID; the country or region Google Play reports for the purchase; whether it was a test purchase; the purchase token (stored encrypted) and a keyed fingerprint of it used to look it up; a link to any earlier purchase it replaced (for example, when you switch plans); the opaque account identifier described in Section 4; and whether the purchase currently gives your account Premium and, if not, why. We also keep a history of the subscription notifications, verification results, and status changes for each purchase. Google Play processes your payment: we never receive your card, bank, or other payment-method details, and we do not store your Google account name or email address. When you buy or manage a subscription, Google Play’s billing system (including the Google Play Billing Library in the app) communicates with Google to process it; Google handles that information under its own terms and privacy policy.

2. What we do NOT collect or log

Encrivo VPN does not log, monitor, inspect, or record the content of your traffic, the websites you visit, your DNS queries, SNI, or the destination domains, IP addresses, or ports you connect to through the tunnel. Our servers forward your already-encrypted traffic and do not inspect it. We also do not collect your precise location, advertising identifier, phone identifiers, contacts, photos, microphone, or camera data. Encrivo VPN contains no third-party advertising, analytics, or crash-reporting SDKs.

Note: this is a scoped statement about browsing/DNS/destination/content data — it is not an "all data" or unqualified "no-logs" claim. We do retain the account, device, and connection metadata described in this policy.

3. How your VPN traffic is encrypted

Traffic between your device and the Encrivo VPN server is encrypted with the WireGuard protocol (the Noise protocol framework, Noise_IKpsk2) using ChaCha20-Poly1305 encryption, a Curve25519 key exchange, and a per-session preshared key. Encryption and decryption happen on your device and on the VPN server; the App never accesses the plaintext of your tunneled traffic. Your WireGuard configuration, including private keys, is held in your device's memory only and is not written to disk.

4. How we use information

• To create and authenticate your account and provide the VPN service.
• To manage your registered devices and enforce per-plan device limits.
• To operate, secure, and troubleshoot the service, and to prevent fraud and abuse.
• To manage your subscription/entitlement status.
• To verify Google Play purchases with Google, provide Encrivo Premium, keep your subscription status in sync with Google Play, prevent a subscription from being used by a different account, limit the free trial to one per customer, update or end Premium access when Google Play reports a change (such as a cancellation, an expiry, a failed payment, a refund, a chargeback, or a revocation), and ask Google Play to stop a renewal when you delete your account. To do this we exchange subscription information with Google (Google Play): when you start a purchase the app gives Google Play an opaque identifier for your Encrivo account (a keyed hash, not your email address); we send Google the purchase token to look up, acknowledge, or cancel the subscription; and we receive subscription status notifications from Google.
• To produce internal, aggregate statistics about the service, such as the number of connections, of active, trial, and paid subscriptions, conversion, churn, and revenue. These statistics are for our own use; we do not sell them or use them for advertising.

We do not sell your personal data. We do not use your data for advertising.

5. Data retention

We retain your account data and the connection/session metadata described above for as long as your account is active, in order to operate the service. Encrivo does not currently operate a fixed automatic purge schedule for this operational metadata; it is retained while your account exists and is deleted or unlinked from your account when you delete your account (see Section 7). We will state a specific retention period here if and when one is enforced.

Subscription records, Google Play purchase records and their notification and verification history, and security, audit, and abuse-prevention records are kept while your account exists and are retained after you delete it, as described in Section 7. We do not currently have a fixed deletion schedule for these retained records. They are kept for fraud prevention, security, accounting, chargeback handling, and legal and compliance purposes. We will state a specific retention period here if and when one is set.

Data deleted from our live systems can remain in database backups until those backups are deleted.

6. Data security

• In transit: all communication with our servers uses HTTPS, and the VPN tunnel is WireGuard-encrypted.
• On your device: sensitive local data (such as sign-in tokens) is stored using Android's encrypted storage (EncryptedSharedPreferences, AES-256). Android backup of app data is disabled.
• On our servers: passwords are stored only as one-way hashes; access to systems is restricted.

7. Account deletion and your choices

You can delete your account at any time:

• In the app: open Account → Delete account, confirm with your password, and tap Delete. If you have a Google Play subscription that has not ended, the app first explains what happens to it and asks you to confirm.
• By web request: see our account deletion page if you cannot access the app.

What is deleted/revoked. When you delete your account we disconnect any active VPN session and revoke your device's VPN access (WireGuard peers and configuration), and we permanently delete your registered devices, VPN session records, and connection configuration profiles, and your profile information. Your account record is kept but stripped of your identifying details: your email address is replaced with a placeholder, your password is erased, your account is marked deleted, and your account identifier is removed from existing connection-event log entries (a record of the deletion itself, linked to the account’s internal identifier, is kept). After deletion you can no longer sign in with that account.

What is retained. We retain some payment, subscription, security, audit, and abuse-prevention records for fraud prevention, security, accounting, chargeback handling, and legal and compliance purposes. After deletion these records no longer contain your email address or profile, except that administrator audit entries for changes an operator made to your account, and server logs of sign-ins and registrations, may still show the email address used at the time. The retained records are pseudonymized, not anonymous: payment, subscription, and abuse-prevention records stay linked to the deleted account’s internal identifier, and retained connection-event entries keep the time, server, data volume, and IP address recorded at the time. Google Play purchase records (Section 1), including their notification and verification history, stay linked to the deleted account so that a subscription cannot be claimed by a different account and so that an outstanding renewal can still be stopped and refunds, chargebacks, and accounting obligations can be handled. They include the Google Play order ID, the encrypted purchase token and its fingerprint, and the opaque account identifier described in Section 4, which identify the purchase to Google Play, but they contain no name, email address, or payment details. We do not currently have a fixed deletion schedule for these retained records (see Section 5).

Google Play subscriptions. If you have an Encrivo Premium subscription that is still renewing through Google Play, deleting your account cancels that renewal with Google Play as part of the deletion so that you are not charged again, and a free trial that is still running does not convert into a paid subscription. Premium access ends immediately, and unused paid time is not refunded automatically (refund requests are handled by Google Play under its refund policies). Google Play may continue to show the subscription, marked as cancelled, until the end of the period you already paid for; this does not mean that Premium is still available. If Google Play does not confirm the cancellation at that moment, the account is still deleted and we keep retrying automatically; check Google Play (Payments & subscriptions) to confirm that the subscription shows as cancelled. Deleting your account also ends any remaining Premium time on a subscription you have already cancelled.

Depending on your jurisdiction, you may have rights to access, correct, port, or delete your data, or to object to or restrict processing. Contact us (Section 9) to exercise these rights.

8. Children

Encrivo VPN is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal data from them.

9. Contact

BENEERA LLC
Encrivo VPN is a product of BENEERA LLC
Privacy: privacy@encrivo.com
Support: support@encrivo.com
Mailing address: 30 N Gould St # 44190, Sheridan, WY 82801 USA

10. Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the app.