Privacy policy

Translations of this page are provided for convenience only; the English version is the legally binding text.

Draft policy for the mobileproxy.app beta. The short version: we collect what the service needs to run and bill, we don't inspect the content of proxy traffic, and your phone's personal use is invisible to us.

What we collect

• Account data: email, password hash, plan, and payment records.
• Device telemetry from the app: connection status, network type, battery/permission state, app version — what the dashboard shows you.
• A device hardware identifier at pairing (IMEI on Android 9 and older, where you grant the phone-state permission; otherwise the reset-on-factory-reset ANDROID_ID). It ties a phone to your subscription so you can swap hardware and keep your proxies, and lets us detect the same phone re-registering. It is never shared and is deleted when you cancel the subscription.
• Gateway metering: bytes up/down per proxy, connection timestamps, and destination filtering events (allowed/blocked), used for billing, abuse prevention, and your usage charts.
• When an SMS lands on the phone, the app reads it (concatenating the parts of a multipart message into one), queues it on the device, and forwards the queued batch to your account over the same cellular-bound link the phone already uses to talk to the control plane. Forwarding happens on the phone's regular poll cycle (~25 s), so a code shows up within a few seconds of arriving. If the phone is briefly offline, messages buffer on the device and send once it's back. Each stored message keeps the sender, the body, and the received-at time.

What we don't collect

• The content of proxy traffic. Sessions are relayed, not decrypted.
• Your phone's personal traffic. The app only handles sessions arriving through the tunnel; your own apps and browsing never touch our infrastructure.

Cookies

We set only strictly necessary cookies: a session cookie that keeps you signed in and security cookies that protect sign-in and forms. We do not set tracking, advertising, or analytics cookies.

Retention

Metering and status data are kept as long as needed for billing and abuse handling, then aggregated or deleted. Account data is deleted on request when you close your account, subject to legal retention requirements.

Sharing

We don't sell data. We share it only with processors needed to run the service (hosting, payments) and when legally compelled.

Contact

Privacy questions and deletion requests: privacy@mobileproxy.app.