Privacy policy
Pekpik VPN is operated by JONLAN PTY LTD, Australia (“Pekpik”, “we”). This policy explains what we collect when you use our apps and website, why, and the choices you have. If a translation differs from the English version, the English version applies.
The short version
- You can use Pekpik without giving us your name or email. The app creates a guest account on your device.
- We collect what we need to run the service: your account and devices, connection and usage records, and purchase status.
- We don’t sell your personal information.
- You can delete your account at any time from the app, or by emailing us.
What we collect
| Information | Why we use it |
|---|---|
| A device identifier, platform, device model, system version, language, app version and, if you add one, a device name | To create your guest account, keep you signed in and manage your devices |
| Your email address, if you choose to link one | To sign you in with a one-time code, sync your account across devices and contact you about your account |
| Connection records: the IP address you connect from, the server you use, connection start and end times, and the amount of data transferred | To run the service, apply free data allowances, enforce device limits, prevent abuse and troubleshoot problems |
| Technical logs kept by our servers and systems | To keep the service secure and working |
| Connection quality reports, such as latency to servers and whether a connection succeeded | To choose good servers and fix ones that don’t work |
| Purchase and subscription status | To give you VIP access and handle renewals and refunds |
| Usage statistics and crash reports from the apps, such as app opens, whether a connection succeeded, paywall and purchase steps, and app errors | To understand how the apps are used, fix crashes and improve Pekpik |
| A push notification token, if you allow notifications | To send service messages to your device |
| Messages you send to support and feedback you submit | To answer you and improve Pekpik |
| Diagnostic logs, only when you choose to upload them | To investigate a problem you reported |
We are changing how connection records are kept on VIP servers. When that change takes effect, we will update this policy and say exactly what is no longer recorded.
Payments
Purchases in the App Store are processed by Apple. We receive confirmation of your subscription through Apple and our subscription provider RevenueCat, but not your card details. Purchases on direct downloads are processed by Stripe, which handles your card or Alipay details; we receive the payment status.
Ads in the iPhone app
The iPhone app can show optional rewarded ads to free users, served by Google AdMob. Before ads are personalised, iOS asks for your permission to track. If you decline, ads are not personalised. Watching ads is always optional. VIP users don’t see ads.
Usage statistics and crash reports
In versions that support it, our iOS, Android, macOS and Windows apps send usage statistics and crash and error reports. Usage statistics include things like opening the app, whether a connection succeeded and roughly how long it took, and paywall and purchase steps.
- They use a random ID created when you install the app. We don’t use your advertising ID.
- We don’t collect what you browse, the websites you visit, DNS queries, your IP address or the history of your connections to our servers.
- The data passes through our servers first, where your IP address is removed, and then goes to PostHog, Inc. (usage statistics) and Sentry, operated by Functional Software, Inc. (crash reports). Both store it in the European Union.
- PostHog keeps usage statistics for up to 1 year; Sentry keeps crash reports for 30 days.
- They are on by default. If you are in the European Union, the United Kingdom, Iceland, Liechtenstein or Norway, the app asks you when you first open it, and they stay off unless you agree.
- You can turn usage statistics and crash reports off separately in the app’s settings at any time.
Diagnostic logs
If something isn’t working, you can upload diagnostic logs from the app, for example in Settings or after a connection error. Logs are uploaded only when you choose to send them or agree to a request from our support team, never silently in the background.
- Logs record what the app did, such as connection steps, errors, and app and system versions. They don’t include the websites you visit or DNS queries.
- Before upload, your device removes or masks sign-in tokens, server settings, payment links, email addresses and part of each IP address. Our servers mask them again.
- After uploading you get a diagnostic code. Share it with support so we can find your logs.
- We use these logs only to fix problems, not for analytics or marketing, and delete them after 30 days.
Who processes your information
We use service providers to run Pekpik. They process information on our behalf and only for the purposes above:
- Microsoft Azure: servers and databases
- Apple and RevenueCat: App Store purchases
- Stripe: direct-download purchases (when available)
- PostHog: usage statistics from the apps, stored in the EU
- Sentry (Functional Software, Inc.): crash reports from the apps, stored in the EU
- Google Analytics for Firebase and Firebase Crashlytics: usage analytics and crash reports in some app versions (to be removed in a later version)
- Google AdMob: rewarded ads in the iPhone app
- Apple Push Notification service and Firebase Cloud Messaging: notifications
- Our email provider: one-time codes and support email
These providers may store information outside your country, including in the United States and other countries where they operate. We take reasonable steps to make sure they protect it.
How long we keep information
We keep your account information while your account exists. When you delete your account, your account, devices, connection and usage records and feedback are deleted or de-identified in our production systems. Some payment and entitlement records may be kept where needed for accounting, fraud prevention or legal reasons. Copies in backups are removed when those backups expire. Data held by Apple, RevenueCat and Google is handled under their own policies. PostHog keeps usage statistics for up to 1 year and Sentry keeps crash reports for 30 days. Diagnostic logs you upload are deleted after 30 days.
Your choices and rights
- Delete your account in the app, or follow the steps on our account deletion page.
- Ask for a copy or a correction of your information by emailing privacy@pekpik.com.
- Turn off notifications and ad tracking in your device settings.
- Turn off usage statistics and crash reports in the app’s settings.
- Complain to us first; if you are not satisfied, you can contact the Office of the Australian Information Commissioner or your local data protection authority.
Children
Pekpik is not directed at children under 13, and we don’t knowingly collect information from them.
This website
pekpik.com uses Google Analytics to see how visitors find and use the site, such as which pages they view and which download buttons they click. Google Analytics sets cookies and processes your IP address and browser and device information; Google handles this data under its own privacy policy. We have turned off Google’s advertising features, and we don’t link website analytics to your Pekpik account. You can block analytics in your browser settings or with Google’s opt-out add-on. Our hosting provider, Cloudflare, processes basic request logs to deliver and protect the site.
Changes and contact
If we change this policy we will update the date at the top, and tell you in the app if the change is significant. Questions: privacy@pekpik.com, JONLAN PTY LTD, Australia.