Last updated: 26 September 2026
1. Scope and contact
This policy covers the AHLA VPN website, applications and VPN service associated with your account. The operator identified in the contact section below is responsible for account and service data. Use the published contact details for questions and requests concerning your rights.
2. Information we process
We process information you provide to create and manage an account, including your name, email, phone number if used, and optional country, city and profile image. We also process verification, session and device information, account status, and plan and purchase information such as product identifiers, purchase verification tokens, subscription status and dates. Support correspondence may contain information you send to resolve a problem; do not send passwords or verification codes.
3. VPN traffic and technical information
The service must process connection traffic to route it through your selected server. Technical information, such as IP addresses, request times, server status and connection errors, may be processed to operate and protect the service and diagnose faults. Technical logs depend on the hosting environment and server configuration. This policy does not promise absolute anonymity or that other internet services stop collecting information when a VPN is active.
4. How we use information
We use information to provide accounts and connections, verify subscriptions, prevent fraud and abuse, provide support and handle complaints. Depending on the circumstances and applicable law, processing relies on performing a contract, a legal obligation or a balanced legitimate interest in protecting the service. Where consent is required for an optional feature, you may withdraw it without affecting the lawfulness of earlier processing.
5. Providers and payments
Hosting, server, email and support providers may process information necessary to deliver the service. Google Play or Apple processes payments under its own policies; we receive information needed to verify purchases and manage access. The account form does not require your payment card details. Google Firebase participates when you use phone verification. We do not sell account information and disclose it only to provide the service, with your permission or in response to a valid legal obligation.
6. Cookies and app preferences
The website uses necessary session cookies for sign-in, form security and language preferences. The app stores language and connection preferences and session information needed for your account. You may clear this information through your browser or device settings, which may sign you out or reset preferences. Any future optional tracking will require notice and consent choices where required by law.
7. Retention, security and international transfers
We retain information for the purposes described, considering account duration, purchase reconciliation, disputes and legal obligations. Information is deleted or anonymised when no longer legitimately needed; backup copies may remain until their retention cycle ends. We use appropriate access and security controls, but absolute security cannot be guaranteed. Where information is transferred outside the European Economic Area, an appropriate lawful transfer mechanism is applied when required. You may request information about recipients and safeguards.
8. Your rights and requests
Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information, object to processing and withdraw consent where processing relies on it. We may request information needed to verify your identity and respond within legal time limits, explaining any lawful exception. Closing your account or deleting the app does not automatically cancel a store subscription; stop renewal through Google Play or Apple. You may complain to the competent data protection authority, including IMY in Sweden.
9. Children and changes
The service is intended for people with legal capacity to subscribe and does not target children. Contact us if you believe a child supplied information without required permission. Policy updates will appear here, and we will provide appropriate notice before material changes to the purposes for which your information is processed.