Zerova VPN

1. Overview

Zerova VPN (“the App”) is a VPN client for Android published by Across Cloud LLC (“we”, “us”, “our”). This Privacy Policy explains what information the App does and does not collect, and how it protects your privacy. By using Zerova VPN you agree to this policy.

2. Information We Do Not Collect

• We do not require or offer accounts, sign-ups, or logins.
• We do not log your browsing history, the sites or services you visit, DNS queries, or the content of your traffic.
• We do not collect your name, email address, phone number, or contacts. The App does not request location permission.
• We do not include advertising networks other than Google Mobile Ads (AdMob), described in section 6. Firebase Analytics and Crashlytics are used for diagnostics only, described in section 7.
• We do not sell or rent your data, and we do not share it with data brokers.

3. VPN Service and Device Key (Technical Data)

The App uses the Android VpnService API to create an encrypted WireGuard tunnel between your device and the VPN server you select. All traffic routed through the tunnel is encrypted in transit.

To give each install its own private tunnel, the App generates a WireGuard key pair on your device. Only the public key is sent to our VPN server when you connect, so the server can authorise your tunnel. The private key never leaves your device and is never sent to us.

This public key is a random, device-generated value. It is not linked to your name, email, or any account (we have none), and it is not used to track your browsing. It is stored on the server only to keep your tunnel working, alongside a random tunnel address and a last-seen time used to clean up idle entries, and it is removed when no longer needed.

Operating a VPN necessarily means your traffic passes through our servers to reach the internet. We do not monitor, record, or store that traffic, and we keep no connection logs tied to your identity.

4. Information Stored on Your Device

The App stores a small amount of data locally on your device only. The private key and settings never leave your device:

• VPN private key — generated on your device and stored in Android Keystore-backed secure storage. Never transmitted.
• Server-assigned tunnel address — stored locally.
• App settings (selected server, auto-connect, DNS, onboarding and privacy acceptance) — stored locally via shared_preferences.
• Split-tunnel selection — the package names of the apps you choose to bypass the VPN. Stored locally only; the list of installed apps is never transmitted, and the App declares no QUERY_ALL_PACKAGES permission (it queries launcher apps only).

You can remove all locally stored data at any time by clearing the App's data in Android Settings, or by uninstalling the App.

5. Third Parties

We do not sell or share personal data. To operate the service we rely on hosting providers for our VPN servers and for this website. These providers may process technical network metadata as necessary to deliver the service, under their own policies. We do not receive your browsing activity from them.

The App displays advertising supplied by Google AdMob. AdMob is a separate company (Google LLC) acting as an independent advertising provider. Section 6 explains what it collects.

6. Advertising (Google AdMob)

Zerova VPN is free. To pay for the VPN servers, the App shows ads supplied by Google AdMob. Ads are never shown on the Session screen, during connection setup, or before your first successful connection. New installs are ad-free for the first 6 hours, and no ad is shown until you have connected twice.

• What AdMob may collect: your device’s advertising ID (Android Advertising ID), IP address, approximate location derived from the IP address, device type and operating system, and ad interaction data such as impressions and clicks.
• Why: to select, deliver, cap, and measure ads, and to prevent fraud and invalid traffic.
• Who receives it: Google LLC and the advertising partners it works with. See Google’s privacy policy and its partner list.
• Personalised ads: where required by law (for example in the EEA, the UK, and Switzerland), we ask for your consent before personalised ads are shown. You can change or withdraw that choice at any time in Settings → Ad privacy settings.
• Opting out: you can reset or delete your advertising ID and turn off ad personalisation in Android Settings → Privacy → Ads. You will still see ads, but they will not be based on your advertising ID.
• Ad-free use: you can watch a rewarded video in Settings to use the App without ads for a limited time.
• VPN integrity: ads are delivered through the same encrypted tunnel as all other traffic. The App cannot be excluded from its own tunnel, so ad traffic is never split-tunnelled, redirected, or intercepted, and we never manipulate ads for revenue.

Because ads are served by Google, the App includes the Google Mobile Ads SDK. Google may collect the data above even before you see an ad, as part of requesting one. We rely on your consent for personalised advertising and for the advertising ID, and on our legitimate interests in providing a free, secure VPN service and preventing fraud.

7. Analytics and Diagnostics (Firebase)

The App uses Google Firebase Analytics and Firebase Crashlytics to understand how the App is used and to fix problems. Collection starts only after you accept this policy and the advertising consent choice is resolved.

• Firebase Analytics collects: app opens, app version, device model and operating system, approximate region derived from the IP address, and in-app events such as “connected”, “disconnected”, “server switched”, “reward earned” and “feedback sent”.
• Crashlytics collects: crash and error reports, including the stack trace, device state at the time, app version and an installation identifier.
• It does not collect: your browsing history, DNS queries, the contents of your VPN traffic, the reason you pick in the feedback form, or a record of the apps installed on your device.
• Why: to diagnose crashes, measure retention, and understand which features are used.
• Who receives it: Google LLC, acting as our data processor.

Split tunnelling (section 4) reads the list of apps you can launch so you can pick which ones bypass the tunnel. That list is read on your device, is never transmitted, and is not stored anywhere except in your own local settings.

8. Security

We use industry-standard encryption (WireGuard) for tunneled traffic, keep our servers updated and access-restricted (key-based SSH, firewall rules), and never bundle shared secrets in the App. No method of transmission or storage is 100% secure, but we design the App to hold as little as possible about you.

9. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect data from children. Ads are configured with a maximum content rating of G and sensitive categories are blocked. If you believe a child has used the App, contact us and we will help you remove any local data.

10. Your Rights

Depending on where you live, you may have rights to access, correct, or delete personal data, and to object to processing. We hold no account for you, so the only data linked to you is advertising data held by Google. You can exercise your rights over that data through Google’s Privacy Controls, or by contacting us and we will forward your request. Users in the EEA, the UK, and Switzerland can change their ad consent at any time in Settings → Ad privacy settings. You may uninstall the App at any time to remove all local data.

11. Changes to This Policy

If this policy changes, the updated version will be published on this page and reflected in a future app update.

12. Contact

For any privacy-related question, contact:
Across Cloud LLC
Email: support@ryzadev.com