Privacy Policy
WormHole VPN (“WormHole”, “we”, “us”) is operated by YOTTADS LTD. This policy explains what information the WormHole iOS app and our servers process, why, and what choices you have. We built WormHole to collect as little as possible.
1. What we do not collect
- The websites you visit, the apps you use, or the content of your internet traffic.
- DNS queries made through the VPN.
- Your originating IP address in our API or connection logs. Requests from the app to our API are not written to access logs.
- Your name, email address, phone number or contacts. WormHole has no user accounts.
2. What we process to provide the service
- Anonymous device identifier. On first launch the app registers with our server and receives a random token. We store only a hashed version of that token to recognise your device. It is not linked to your identity.
- WireGuard public key. Your encryption key pair is generated on your device. The private key never leaves your device; we receive only the public key, which is required to set up the encrypted tunnel.
- Tunnel configuration. The internal VPN address assigned to your device on a server, the time the configuration was issued, and the time of the most recent successful connection (handshake). We keep these so that inactive configurations can be removed automatically: a configuration that has not connected for 7 days (or never connected within 24 hours) is deleted.
- Connection attempts. Whether a request to set up a connection to a server succeeded or failed and the error code, used to detect outages. These records do not contain IP addresses.
- Active connections. While you are connected, the VPN server necessarily knows the network address your device connects from, in memory, in order to send traffic back to you. This address is not written to disk or logged.
3. Subscriptions
Purchases are processed by Apple. We never see your payment details. If you subscribe to WormHole Premium, the app sends us the signed transaction issued by Apple so our servers can confirm your access. We store the transaction identifier, product, subscription status, expiry date, the App Store country (storefront) and currency. We also receive subscription status notifications from Apple.
4. Third-party services
- Apple — payments, subscription management and App Store services, under Apple’s Privacy Policy.
- Apphud — manages in-app subscriptions and subscription analytics. It processes purchase information, the identifier for vendors (IDFV) and, if you allow tracking, the advertising identifier (IDFA). See Apphud’s Privacy Policy.
- AppsFlyer — measures which advertising campaigns led to an app install or subscription. It processes device identifiers (IDFV and, if you allow tracking, IDFA), app installs and opens, and subscription events sent to it by Apphud. See AppsFlyer’s Privacy Policy.
- Cloudflare DNS (1.1.1.1) — the DNS resolver used while you are connected to the VPN. See Cloudflare’s resolver privacy commitments.
- ipify — the app requests your current public IP address from api.ipify.org to show it on screen, so you can see whether the VPN is active. We do not store the result.
We do not sell your information and do not share it with data brokers. Your VPN traffic, browsing and DNS queries are never shared with anyone.
4a. Advertising measurement and tracking permission
We advertise WormHole and use AppsFlyer to understand which ads work. On first launch, iOS asks whether you allow WormHole to track your activity. If you allow it, your device’s advertising identifier (IDFA) is shared with AppsFlyer and Apphud and may be used together with data from advertising partners to attribute your install and subscription to an ad campaign. If you decline, the IDFA is not accessed and attribution relies on Apple’s privacy-preserving SKAdNetwork. You can change this choice at any time in Settings → Privacy & Security → Tracking.
5. How long we keep information
Tunnel configurations are removed after 7 days without a connection. Device and subscription records are kept while you use the app and deleted on request. Connection attempt records are kept for troubleshooting and do not identify you.
6. Your choices and rights
You can stop using WormHole and delete the app at any time; this removes your keys and token from the device. You can ask us to access or delete the information associated with your device by contacting us at the address below. Depending on where you live (for example, in the EU, UK or California), you may have additional rights to access, correct, delete or object to processing of your data; we will honour such requests.
7. Security
Traffic between your device and our servers is encrypted with WireGuard. Our API is available only over HTTPS. Access to our servers is restricted to authorised personnel using key-based authentication.
8. Children
WormHole is not directed to children under 13, and we do not knowingly collect information from children.
9. Changes
We may update this policy as the service evolves, for example when new features are added. We will change the effective date above and, for significant changes, notify you in the app.
10. Contact
YOTTADS LTD
Email: support@wormholevpnapp.com