Privacy Policy

Last updated: May 22, 2026 · Effective from the date of publication.

TL;DR: Neolink VPN does not collect personal data, keeps no traffic logs, and shares nothing with third parties. All connection settings are stored locally on your device only.

1. Who we are

The Neolink VPN mobile application is developed by Vetrov, registered as a self-employed individual under the Russian "Professional Income Tax" regime (NPD). It is a VPN client based on open Xray/VLESS protocols, designed to secure your connection on public and untrusted Wi-Fi networks.

2. Data we process

The application is built around data minimization:

VPN connection profiles (server address, port, VLESS UUID, TLS settings) are stored locally on the device and encrypted via androidx.security.crypto.EncryptedSharedPreferences.
Network traffic passes through the encrypted VPN tunnel. Content is not inspected, analyzed, or stored.
Technical identifiers (Advertising ID, Android ID, IMEI) are not requested or used.

3. What we do NOT collect

Names, emails, phone numbers, addresses.
Visited websites, source/destination IP addresses, DNS queries.
Cookies, search history, browsing metadata.
Advertising or in-app analytics data.

4. Sharing with third parties

We do not sell, share, or disclose user data to any third party, except where strictly required by Russian Federation law (upon a properly issued official request). At the time of writing, no such data is in our possession — there simply is nothing to collect.

5. Android permissions usage

The app requests the following permissions, used solely for the purposes stated:

android.permission.INTERNET — establishing the VPN tunnel.
android.permission.ACCESS_NETWORK_STATE — detecting connectivity changes for auto-reconnect.
android.permission.FOREGROUND_SERVICE + FOREGROUND_SERVICE_SPECIAL_USE (subtype vpn) — running the VPN service in foreground with a status notification.
android.permission.POST_NOTIFICATIONS — displaying connection status notifications (Android 13+).
BIND_VPN_SERVICE (system) — standard permission for the Android VpnService API.

6. Data retention and deletion

All local data (connection profiles, settings) is stored encrypted in the app's protected sandbox and is removed together with the app upon uninstallation. Cloud auto-backup is disabled (android:allowBackup="false") and no data is transmitted automatically.

7. Children

The app is not intended for users under 13. We deliberately do not request or process minors' data. If you become aware of such processing by mistake, contact us and we will remove the data.

8. Security

Industry-standard protections in place:

Local storage encrypted with AES-256 via Android Keystore.
Cleartext traffic disabled (android:usesCleartextTraffic="false").
Device-to-server traffic protected by TLS 1.3 / Reality / VLESS-XTLS.
Production builds are minified and obfuscated with R8.

9. Policy changes

If material changes are made, the "Last updated" date at the top will be revised. We recommend revisiting this page periodically.

10. Contact

Privacy-related questions and requests:

Email: privacy@neolink.ru