Privacy Policy

Change My IP (“the App”) is a Virtual Private Network (VPN) application designed to help users improve their online privacy by masking their public IP address and routing network traffic through third-party VPN servers.

This Privacy Policy explains the information that may be collected, used, processed, retained, or shared when you use the App. It also explains your choices and how to request deletion of your account and associated data.

1. Information We Collect or Process

Account and Authentication Information

Most features of the App can be used without signing in. If you choose to sign in with Google for account-related features, such as managing access to an ad-free subscription or joining a waitlist, the App and Firebase Authentication may receive or store:

• Your Google account email address
• A Firebase user ID and linked sign-in provider identifier
• Authentication tokens used to verify and maintain your signed-in session

Sign-in is optional unless it is required to use a particular account-based or subscription-related feature.

Purchase and Subscription Information

If you purchase or restore an ad-free subscription, Google Play Billing and RevenueCat may process information such as:

• Product and subscription identifiers
• Purchase history and transaction status
• Purchase tokens and app-specific customer identifiers
• Subscription entitlement, renewal, expiry, cancellation, and restoration status
• Country, locale, and currency information associated with the transaction

Payment card numbers, bank-account details, and other direct payment credentials are handled by Google Play. The Developer does not receive or store your full payment-card or banking information.

Advertising, Analytics, and Diagnostic Information

The App uses third-party advertising, analytics, and crash-reporting services. Depending on your device, region, consent choices, and service configuration, these services may collect or process:

• IP address and approximate location inferred from the IP address
• Advertising ID, App Set ID, installation ID, and other device or account identifiers
• App launches, taps, ad views, video views, and other app interactions
• Device model, operating-system version, language, and general device information
• Crash logs, diagnostic information, performance data, and connection errors
• Advertising consent and preference information

VPN Connection Information

VPN functionality is provided through third-party VPN providers and SDKs. To establish and maintain a VPN connection, those providers may process technical information such as:

• Your originating public IP address
• The VPN server or country you select
• Device, network, and connection information
• Connection timestamps, duration, bandwidth usage, and connection errors
• Security and fraud-prevention signals

The Developer does not operate the VPN servers and does not intentionally inspect, collect, or store the content of your VPN traffic, browsing history, DNS-query content, messages, files, or communications. VPN traffic is routed and technically processed by the applicable third-party VPN provider according to that provider's own terms and privacy practices.

Support and Deletion Requests

If you contact us for support or submit an account-deletion request, we may collect your email address and the information you voluntarily include in your message. This information is used to respond to and process your request.

2. Information We Do Not Intentionally Collect

Except when you voluntarily include such information in a support message, the Developer does not intentionally collect:

• Phone numbers
• Contacts, address-book data, SMS messages, or call logs
• Precise GPS location
• Photos, videos, audio recordings, or personal files
• Health or fitness information
• Full payment-card or bank-account details
• The content of VPN traffic or communications

The App does not clone devices, identities, phone numbers, SIM cards, or user accounts.

3. Information Stored Locally on Your Device

The App may store limited information locally on your device, including:

• Favorite website URLs manually added by you
• App preferences and settings
• Sign-in state or locally cached account information

Local data can generally be removed by clearing the App's storage in your device settings or uninstalling the App.

4. How Information Is Used

Information may be used to:

• Authenticate users and maintain account sessions
• Provide, restore, and verify ad-free subscription access
• Operate and maintain VPN connectivity
• Display and measure advertisements for non-subscribing users
• Analyse app usage, performance, stability, and reliability
• Detect fraud, abuse, security threats, and technical problems
• Respond to support, privacy, and account-deletion requests
• Comply with legal obligations and enforce the Terms of Use

The Developer does not sell personal and sensitive user data.

5. Third-Party Services and Data Sharing

The App relies on third-party services that may process data on our behalf or for their own permitted purposes. These services include:

• Google Sign-In and Firebase Authentication for account access
• Firebase Analytics and Firebase Crashlytics for analytics and diagnostics
• Google Play Billing for subscription purchases and payment processing
• RevenueCat for subscription entitlement and purchase-history management
• Appodeal and its advertising mediation partners, which may include Google AdMob, Meta Audience Network, AppLovin, and other supported ad networks
• Third-party VPN service providers and SDKs used to establish VPN connections
• Hosting, email, security, and technical service providers

Information may also be disclosed when reasonably necessary to comply with applicable law, respond to valid legal requests, prevent fraud or abuse, protect users and the service, or complete a merger, acquisition, or transfer of the App with appropriate notice where required.

Third-party services process information according to their own privacy policies, terms, configurations, and retention practices.

6. Data Retention

Account and authentication data is retained while your account remains active and for the period reasonably necessary to provide account features, process deletion requests, maintain security, resolve disputes, and comply with legal obligations.

Purchase and subscription records may be retained by Google Play, RevenueCat, or the Developer where necessary for subscription management, accounting, fraud prevention, dispute resolution, or legal compliance.

Advertising, analytics, crash-reporting, and VPN-service data is retained according to the settings and retention policies of the applicable third-party service provider.

Aggregated or anonymised information that can no longer reasonably identify an individual may be retained.

7. Account and Data Deletion

You may request deletion of your Change My IP account and associated data by following the instructions on our Account Deletion page .

Subject to verification and legitimate retention requirements, we will delete or anonymise account-related data under our control and request deletion from relevant service providers where applicable.

Deleting your Change My IP account does not automatically cancel an active Google Play subscription. Subscription cancellation must be completed through Google Play.

8. Security

We use reasonable administrative and technical measures to protect information. Data transmitted between the App and supported online services is designed to use encrypted connections such as HTTPS or TLS.

No method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.

9. Your Choices

• You may use most App features without signing in
• You may decline or manage advertising consent where the applicable consent controls are provided
• You may reset or delete your advertising ID through Android device settings
• You may clear locally stored App data or uninstall the App
• You may request deletion of your account and associated data

10. Children's Privacy

The App is intended for users aged 18 and above. The Developer does not knowingly collect personal information from children under 18.

11. International Processing

Third-party service providers may process information on servers located outside your country. Privacy and data-protection laws in those locations may differ from those in your country.

12. Changes to This Policy

This Privacy Policy may be updated when the App, its service providers, or legal requirements change. The revised version will be posted on this page with an updated effective date.

13. Governing Law

This Privacy Policy is governed by the laws of Malaysia, subject to any mandatory privacy rights that may apply in your jurisdiction.