Privacy Policy

1. Who We Are

Orvyx VPN (“Orvyx,” “we,” “us,” or “our”) is a virtual private network service operated by AFNATO (SMC-Private) Limited.

Where applicable under data-protection law, AFNATO (SMC-Private) Limited is the data controller responsible for the personal information described in this Privacy Policy.

This Privacy Policy explains what information is processed when you use Orvyx VPN, why it is processed, how it is protected, and the choices and rights available to you.

2. Scope

This Privacy Policy applies to:

• the Orvyx VPN iOS application;
• Orvyx account and subscription services;
• the Orvyx VPN website at orvyxvpn.com;
• customer-support communications; and
• backend systems and service providers used to operate Orvyx VPN.

It does not replace the privacy policies of independent services such as Apple that process information under their own terms.

3. Information We Process

Account Information

When you use Orvyx VPN, we create and maintain limited account identifiers needed to provide the service.

This may include:

• an internal Orvyx account identifier;
• an Orvyx account/support code;
• an authentication identifier; and
• information needed to associate your account with your subscription and VPN access.

Orvyx currently does not request your name or email address through Sign in with Apple.

The current Sign in with Apple implementation does not request Apple email or full-name scopes and does not deliberately store those details in Orvyx application data.

We use account information to provide authentication, account recovery, customer support, security, subscription ownership, and access to Orvyx VPN.

Subscription and Purchase Information

If you purchase an Orvyx VPN subscription through Apple's App Store, we process information needed to verify and manage that subscription.

This may include:

• the subscription product purchased;
• Apple transaction identifiers;
• original transaction identifiers;
• purchase and expiration information;
• subscription status; and
• cryptographically signed transaction information provided by Apple.

Orvyx does not receive or store your payment-card number, bank-account details, or other payment credentials.

Payments are processed by Apple.

We use purchase information to:

• verify subscriptions;
• activate Premium access;
• restore purchases;
• prevent subscription fraud or misuse; and
• maintain subscription entitlement.

4. VPN Activity and Connection Data

Orvyx VPN operates using a no-logs VPN configuration provided through GZ Systems Limited, d/b/a PUREVPN.

Orvyx does not maintain logs of the websites, services, or content you access while connected to the VPN.

In particular, Orvyx does not maintain VPN activity logs containing:

• browsing history;
• websites or domains visited;
• traffic content;
• user-generated DNS queries;
• originating IP addresses;
• assigned VPN IP addresses; or
• records designed to reconstruct your online activity.

Orvyx also does not maintain persistent VPN connection timestamps, session-duration records, or bandwidth-usage records in its own application backend.

Providing a VPN service necessarily requires certain network information to be processed temporarily so that a connection can be established and internet traffic can be routed. Temporary technical processing does not mean that such information is retained as a browsing or VPN activity log.

5. Diagnostic Information

Limited technical diagnostic or error information may be processed where necessary to:

• establish or maintain VPN connectivity;
• troubleshoot connection failures;
• protect the service;
• diagnose technical errors; or
• maintain service reliability.

The VPN technology used by Orvyx supports optional operational analytics functionality. That optional partner analytics configuration is not enabled for Orvyx's current white-label SDK deployment.

Limited diagnostic processing may nevertheless occur through the underlying VPN technology where necessary to provide, secure, maintain, or troubleshoot the VPN service.

Diagnostic information is not used for targeted advertising or cross-app tracking.

6. How We Use Information

We process information only where reasonably necessary to:

• provide and operate Orvyx VPN;
• authenticate users and maintain accounts;
• verify subscriptions;
• provide Premium features;
• restore purchases;
• allocate and manage VPN access;
• maintain service reliability;
• protect accounts and systems;
• detect or prevent fraud and abuse;
• troubleshoot technical or connection problems;
• provide customer support; and
• comply with applicable legal obligations.

We do not use VPN user data for targeted advertising.

7. Legal Bases for Processing

Where applicable data-protection law requires a legal basis for processing personal information, we generally rely on:

Performance of a contract

Where processing is necessary to provide Orvyx VPN, maintain your account, verify subscriptions, restore purchases, or provide VPN access.

Legitimate interests

Where processing is necessary to protect our services, prevent abuse or fraud, maintain security, troubleshoot technical failures, or improve service reliability.

Legal obligations

Where processing or retention is required to comply with applicable law or valid legal requirements.

Consent

Where applicable law requires consent for optional processing.

We do not rely on consent for processing that is strictly necessary to provide a service you have requested.

8. No Sale, Advertising, or Tracking

Orvyx does not sell VPN user data.

We do not use VPN user data for:

• third-party advertising;
• behavioral advertising;
• cross-app tracking;
• cross-site tracking;
• advertising measurement; or
• sale to data brokers.

We do not disclose data obtained through operation of the VPN service to third parties for unrelated purposes.

Where service providers process information on our behalf, that processing is limited to purposes necessary to provide, secure, maintain, support, or verify the Orvyx service.

9. Service Providers and Data Processors

Orvyx relies on specialized providers to operate the service.

GZ Systems Limited, d/b/a PUREVPN

GZ Systems Limited, d/b/a PUREVPN provides the underlying VPN infrastructure and technology used by Orvyx VPN.

The Orvyx deployment operates using PureVPN's no-logs VPN configuration.

The service is designed not to retain identifiable records of:

• websites visited;
• browsing activity;
• traffic content;
• DNS queries;
• originating IP addresses; or
• assigned VPN IP addresses

as VPN activity logs.

PureVPN technology also supports optional operational analytics and diagnostic capabilities. Optional partner analytics functionality is not enabled in Orvyx's current white-label SDK deployment.

Limited technical diagnostic processing may still occur where necessary to operate, secure, maintain, or troubleshoot VPN connectivity.

Apple

Apple provides:

• App Store payment processing;
• subscription services;
• StoreKit transaction information; and
• Sign in with Apple.

Apple processes information in accordance with Apple's own privacy policies and terms.

Supabase

Supabase provides infrastructure used for:

• authentication;
• account management;
• database services;
• subscription and entitlement management; and
• backend application functionality.

Vercel

Vercel currently hosts a restricted server-side component used to cryptographically verify Apple-signed subscription transaction information.

This component is used for subscription verification and is not used for advertising or behavioral analytics.

Cloudflare

Cloudflare may provide website hosting, content delivery, security, DNS, or related infrastructure for orvyxvpn.com.

Cloudflare may process standard technical request information as necessary to deliver and protect the website.

10. Website Information

When you visit orvyxvpn.com, standard technical information may be processed by our website infrastructure providers in order to deliver and secure the website.

This may include information such as:

• IP address;
• browser and device information;
• request timestamps;
• requested pages or resources; and
• security-related request information.

Orvyx does not currently use its website for targeted advertising or cross-site behavioral tracking.

11. Public IP Lookup

The Orvyx application may perform a real-time public-IP lookup to display or verify the currently visible public IP address.

This information is used for real-time app functionality and is not stored by Orvyx as part of your account or VPN activity history.

12. Customer Support

If you contact Orvyx for support, we may receive information that you voluntarily provide, such as:

• your email address;
• your support request;
• your Orvyx account/support code;
• screenshots or diagnostic information you choose to provide; and
• correspondence with our support team.

We use this information only to:

• respond to your request;
• investigate technical problems;
• protect the service; and
• maintain appropriate support records.

Please do not send passwords, VPN credentials, authentication tokens, or other sensitive authentication information in a support request.

13. Data Retention

We retain account and subscription information only for as long as reasonably necessary to:

• provide the service;
• maintain subscription records;
• protect against fraud or abuse;
• maintain security;
• resolve disputes;
• comply with applicable legal obligations; and
• enforce applicable agreements.

Limited diagnostic information, where processed, is retained only for as long as reasonably necessary for service operation, security, troubleshooting, support, or applicable legal obligations and in accordance with applicable service-provider arrangements.

We do not retain browsing activity or VPN traffic logs as described in this Privacy Policy.

Where information is no longer reasonably required, we take appropriate steps to delete, anonymize, or otherwise dispose of it, subject to applicable legal requirements.

14. Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information, including the right to:

• request access to personal information we hold about you;
• request correction of inaccurate information;
• request deletion of personal information;
• restrict certain processing;
• object to certain processing;
• receive certain information in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with an applicable data-protection authority.

These rights may be subject to legal limitations or exceptions.

To exercise a privacy right, contact support@orvyxvpn.com.

We may need to verify your identity before completing certain requests.

15. Account and Data Deletion

Orvyx provides users with the ability to request deletion of their account and associated personal information.

You can initiate permanent deletion of your Orvyx account from the Account section of the Orvyx VPN app by selecting Delete Account.

When an account-deletion request is completed, we delete or de-identify personal information associated with the account unless retention is reasonably required for:

• legal obligations;
• accounting or financial records;
• fraud prevention;
• security;
• dispute resolution; or
• other legitimate and lawful purposes.

If Sign in with Apple is connected to your account, Orvyx will revoke the associated authorization where the required Apple authorization credentials are available. For accounts created before this capability was available, you may be instructed to remove Orvyx manually from your Sign in with Apple settings after account deletion.

Subscriptions must be cancelled separately through your Apple account or App Store subscription settings.

You may also contact support@orvyxvpn.com for assistance with privacy or account-deletion matters.

16. International Processing

Orvyx and its service providers may process information in countries other than the country in which you reside.

Where applicable law requires safeguards for international transfers or processing of personal information, we take reasonable measures intended to provide appropriate protection.

17. Security

We use reasonable technical and organizational safeguards designed to protect information processed through Orvyx VPN.

Our security measures include protections such as:

• authenticated backend access;
• restricted database permissions;
• encrypted handling of VPN credentials;
• server-side verification of Apple subscription transactions;
• access controls; and
• measures designed to prevent unauthorized account or subscription access.

No internet-based service can guarantee absolute security.

18. Children's Privacy

Orvyx VPN is not directed to children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has improperly provided personal information to Orvyx, please contact support@orvyxvpn.com and we will take appropriate steps.

19. Legal Requests

We may disclose information where we reasonably believe disclosure is required by applicable law, regulation, legal process, or a valid governmental request.

Because Orvyx does not maintain browsing or VPN activity logs as described in this policy, we cannot provide information that we do not possess.

We may also preserve or disclose information where reasonably necessary to protect the rights, safety, security, or integrity of Orvyx, our users, or others, subject to applicable law.

20. Changes to This Privacy Policy

We may update this Privacy Policy as Orvyx VPN, our technology, our service providers, or applicable legal requirements change.

If we make material changes, we will update the effective date of this Privacy Policy and provide additional notice where required by applicable law.

21. Contact Us

For privacy questions, account-deletion requests, or other privacy-related matters:

AFNATO (SMC-Private) Limited
Orvyx VPN
Email: support@orvyxvpn.com
Website: orvyxvpn.com