X-Tun

Privacy Policy

Effective 20 October 2026.

In short: X-Tun requires no sign-up and does not collect your name, phone number or email. To give you VPN access, the app sends our server a random device identifier and technical data, and sends usage statistics to AppMetrica (Yandex). We do not keep VPN traffic logs: the sites you visit, DNS queries and traffic content are not stored.

1. Who processes the data

The X-Tun app and the VPN service it connects to are provided by WEL-TECH PLANT LTD (a company registered in Northern Ireland, No. NI662902, 21 Shinn Road, Newry, BT34 1PE, United Kingdom), "we". This policy describes what data is processed when you use the X-Tun app for iOS.

2. Data we process

Device identifier. On first launch the app creates a random identifier and stores it on the device. It is not linked to your name, phone, email or Apple's advertising identifier. Our server uses it to recognise the device and issue its VPN profile.
Apple DeviceCheck token. Confirms that the request comes from a genuine Apple device and protects free access from abuse. The token is verified with Apple and contains no personal data.
Technical request data: app version, platform (iOS), the IP address and client information (User-Agent) of requests to our server, and app events (for example, tapping "Connect" and connection errors). Used to operate the service, prevent abuse and investigate failures.
Usage statistics (AppMetrica). The app sends Yandex's AppMetrica service information about app launches and events (taps, the screen before connecting, errors), device model, iOS and app versions, AppMetrica and vendor identifiers (IDFV), and the IP address, from which AppMetrica derives an approximate region. Precise location and the advertising identifier (IDFA) are not sent. The statistics help us find and fix failures.
VPN profile data: the keys and address needed to establish the VPN connection, and the access expiry date. The profile is created on our server and delivered to the device.
Activation link. If you open an activation link we sent you, the one-time code from that link is sent to our server to bind the device to your profile.

We do not collect precise (GPS) location, contacts, photos, browsing or app history, traffic content, or advertising-tracking data. The app does not use App Tracking Transparency tracking or the advertising identifier (IDFA).

3. VPN traffic

Traffic between your device and the VPN server is encrypted. We do not log VPN traffic: we do not store the sites you visit, DNS queries or the content of transmitted data.

4. Where data is stored

On the device, the identifier, VPN profile and access token are stored in the iOS Keychain. Our server stores the device identifier, VPN profile data, access expiry and technical request logs.

5. Purposes

providing VPN access, including the trial period;
protecting free access from abuse;
analysing how the app works and fixing errors;
keeping the service stable and providing support;
complying with the law.

6. Sharing with third parties

We do not sell data. Data is shared only with:

Apple — the DeviceCheck token, to protect free access from abuse;
Yandex (AppMetrica) — the usage statistics listed in section 2, processed under the AppMetrica terms;
authorities, where expressly required by law.

The app does not track you across apps and does not share data with ad networks. There are no ads in the app yet: the screen before connecting collects no data.

7. Where data is processed

The server that issues access and stores service data is located in Russia; VPN servers are located in various countries; Yandex processes AppMetrica statistics on its own servers. When data is transferred outside the United Kingdom, we process only what is necessary to run the service and protect it with technical and organisational measures.

8. Retention

Data is kept while you use the service and deleted after your access ends, within the periods needed to operate the service and meet legal requirements. Technical logs are kept for a limited time and deleted regularly. AppMetrica statistics are kept under the AppMetrica terms.

9. Your rights

You can request information about the data linked to your device, its correction or deletion, and withdraw your consent. Email support@x-tun.net. Deleting the app stops any new data from being sent.

If you believe your data is processed unlawfully, you have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in your country.

10. Children

The service is not intended for children under 13, and we do not knowingly collect their data.

11. Changes

If this policy changes, the new version will be published on this page with a new effective date.

12. Contact

Privacy questions: support@x-tun.net.
WEL-TECH PLANT LTD · a company registered in Northern Ireland, No. NI662902 · 21 Shinn Road, Newry, BT34 1PE, United Kingdom

Last updated: 20 October 2026.