Privacy Policy

How we protect your privacy and handle your data

Last Updated: September 2025
Effective Date: September 2025

Introduction

Our Team built the Rosa VPN app as a Free app. This SERVICE is provided by Our Team at no cost and is intended for use as is.

This page is used to inform visitors regarding our policies with the collection, use, and disclosure of Personal Information if anyone decided to use our Service.

If you choose to use our Service, then you agree to the collection and use of information in relation to this policy. The Personal Information that we collect is used for providing and improving the Service. We will not use or share your information with anyone except as described in this Privacy Policy.

The terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, which is accessible at Rosa VPN unless otherwise defined in this Privacy Policy.

Our Commitment to Privacy

Rosa VPN is designed with privacy at its core. We believe everyone deserves free VPN protection without compromising their personal data. This policy outlines our practices and your rights regarding your information.

Rosa VPN is a No-Logs VPN Service

We want you to know that when you use our Service, we do NOT engage in any of the following activities:

  • Logging users' traffic or content: We do not log, monitor, or store your browsing history, the content of your communications, websites you visit, or any data transmitted through our VPN service.
  • Discriminating against devices, protocols, or applications: We treat all devices, protocols, and applications equally. We do not block, throttle, or prioritize any specific type of traffic, device, or application.
  • Throttling your Internet connection: We do not intentionally slow down or limit your connection speed based on your usage, content, or any other factors.

Our no-logs policy means that we cannot and do not track what you do online when connected to our VPN service. We have designed our systems to ensure that we have no ability to link your online activities to your identity or device.

Information Collection and Use

Rosa VPN is designed with privacy in mind. We do not require you to provide personally identifiable information to use our Service. All data collection is focused on improving service quality and security, and all collected data is anonymous, aggregated, and cannot be used to identify you personally.

Data We Collect

When you use our native applications (mobile apps), we collect the following anonymous and aggregated information to improve service quality and user experience:

  • Device-related data: OS version, device make and model, language settings, and app version
  • General information: User IP address and internet service provider (for connection routing only)
  • Service metrics: Connection metrics, server performance data, and usage patterns

Important: All data collected through our native applications is anonymous and aggregated. We do not collect personally identifiable information, and the data we collect cannot be used to identify, track, or profile individual users. This anonymous data helps us improve service quality, security, and user experience without compromising your privacy.

Please note that some platforms, such as the Google Play Store, may also collect anonymous, aggregated statistics about app usage. These platforms are governed by their respective privacy policies and terms and conditions, which are separate from this Privacy Policy.

Log Data

In the event of an error in the app, we collect data and information (through third-party products) on your device called Log Data. This Log Data may include information such as your device Internet Protocol ("IP") address, device name, operating system version, the configuration of the app when utilizing our Service, the time and date of your use of the Service, and other statistics.

This diagnostic data is collected anonymously and is used solely for troubleshooting and improving app stability. It cannot be used to identify you personally.

Legal Basis for Data Processing

We process your data based on the following legal grounds under GDPR:

  • Legitimate Interest: Service optimization, security, and fraud prevention
  • Contract Performance: Delivering VPN services as requested
  • Legal Obligation: Compliance with applicable laws and regulations
  • Consent: For optional features and enhanced analytics

How We Use Your Information

We use the anonymous, aggregated data we collect for the following purposes:

  • Service Optimization: Improve server performance, connection quality, and user experience
  • Security Monitoring: Detect and prevent abuse, fraud, and illegal activities
  • Performance Monitoring: Track connection speeds, server load, and service reliability
  • Technical Support: Provide better customer support and troubleshoot issues
  • Feature Development: Understand usage patterns to improve app features
  • Abuse Prevention: Identify and prevent fraudulent usage and ensure fair service access

How We Protect Your Privacy and Data Security

We implement comprehensive security measures to protect your data and privacy:

  • Industry-standard encryption for data transmission and storage
  • Data protection with appropriate technical and organizational measures
  • Access controls to protect collected data from unauthorized access
  • Regular security audits and updates to maintain data protection
  • Confidentiality measures to keep collected information secure

We keep the information we collect confidential in accordance with this Policy and have adopted reasonable physical, technical, and organizational procedures appropriate to the sensitivity of the data. However, no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee absolute security.

Data Retention

  • Service Data: Retained for service optimization and security purposes
  • Security Data: Retained for abuse prevention and fraud detection
  • Analytics Data: Retained for service improvement and user experience enhancement
  • Legal Compliance: Data may be retained longer if required by law

Consent

By using our Service, you consent to the collection, use, storage and disclosure of anonymous, aggregated data for the purposes identified in this Policy. Since we do not collect personally identifiable information, your consent applies to the anonymous data collection practices described in this Policy.

You may withdraw your consent to data collection at any time by contacting us at: [email protected]. Please note that withdrawal of your consent may result in you being unable to continue to use our services, as anonymous data collection is necessary for service operation and security.

Your Privacy Rights

Under applicable privacy laws (including GDPR), you have certain rights regarding your personal data. However, since Rosa VPN collects only anonymous, aggregated, and non-identifiable data and does not store personally identifiable information, most traditional privacy rights (such as access, rectification, erasure, and data portability) are not applicable as there is no personal data linked to your identity.

You can still:

  • Request information about our data collection practices
  • Object to processing or request restrictions on data processing (though this may affect service functionality)
  • Withdraw consent for any optional features at any time

Note: To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

Service Terms and User Responsibilities

By using Rosa VPN, you agree to our service terms and understand that:

  • Service Monitoring: We monitor service usage for quality improvement and security
  • Abuse Prevention: We reserve the right to block users engaging in illegal activities
  • Data Collection: We collect necessary data for service optimization and security
  • Service Termination: We may terminate service for users violating our terms
  • Legal Compliance: We comply with applicable laws and regulations

Service Providers and Third-Party Services

Rosa VPN uses third-party services to provide our free VPN service. We may employ third-party companies and individuals to:

  • Facilitate our Service
  • Provide the Service on our behalf
  • Perform Service-related services
  • Assist us in analyzing how our Service is used

The third-party services we use include:

  • Google AdMob: For serving advertisements to keep our service free
  • Google Play Services: For app distribution, updates, and analytics
  • Google Analytics for Firebase: For app analytics and performance monitoring
  • Firebase Crashlytics: For error reporting and app stability

These third-party services have access to anonymous, aggregated data to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose. These services have their own privacy policies, and we encourage you to review their policies to understand how they handle your data.

Links to Other Sites

This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. Since we collect only anonymous, aggregated data that cannot identify you personally, data sharing is minimal. We may share data only in the following circumstances:

  • Legal Requirements: When required by law, court order, or government request
  • Service Providers: With trusted third-party services that help us operate our service (as described in the "Service Providers" section above)

Children's Privacy

These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.

Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. We will take immediate steps to contain the breach and prevent further unauthorized access.

Privacy Policy Changes and Updates

From time to time, we may need to update this Policy or our privacy practices. We will let you know by posting changes on our website. Changes will be effective at the time of posting. It is your responsibility to review our website for any changes and your continued use of our services after the effective date constitute your acceptance of such changes.

This Privacy Policy was last updated on September 2025.

Contact Information

If you would like more information about this Policy or the personal information collection, use, storage and disclosure policies and practices of us, including in respect of our policies and practices, please contact our Privacy Officer by e-mail at:

Please let us know your questions or concerns and we will do our best to help you.