X9 VPN Privacy Policy

1. Introduction

Welcome to X9 VPN ("we," "us," or "our"). We are committed to protecting your privacy and being transparent about how we handle your data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use our VPN service.

By using X9 VPN, you agree to the terms outlined in this Privacy Policy. If you do not agree with our practices, please do not use our service.

2. Core Privacy Principles

3. Information We Collect

3.1 Information We DO Collect

To provide, maintain, and improve our VPN service, we collect the following limited technical information:

• Connection Data: VPN server location you connect to, connection timestamp, duration of connection, and connection success/failure status
• Device Information: Device type (Android, iOS), operating system version, app version, and device language settings
• Network Status: Network type (WiFi, mobile data), connectivity status, and basic network performance metrics
• App Analytics: App crashes, feature usage (non-identifiable), and performance metrics to improve stability
• Advertising Data: Ad impressions, clicks, and reward status (for ad-supported free tier)

3.2 Information We DO NOT Collect

• Websites you visit or apps you use
• Content of your internet traffic
• DNS queries
• Your original IP address or location after connection
• Emails, messages, or any personal communications
• Files you download or upload

4. How We Use Your Information

We use the limited data we collect for the following purposes:

• Service Delivery: To establish and maintain VPN connections
• Performance Monitoring: To ensure server stability and optimal performance
• Technical Support: To troubleshoot connection issues and improve app functionality
• App Updates: To notify you of critical updates and new features
• Security: To detect and prevent abuse, fraud, or unauthorized access
• Ad-Supported Model: To display relevant advertisements that support our free service

5. Third-Party Services and Data Sharing

X9 VPN integrates with trusted third-party services to provide core functionality. These services may collect data according to their own privacy policies:

5.1 Advertising Partners

• Google AdMob: Displays advertisements in our free tier. AdMob may collect device identifiers, IP address, and ad interaction data. AdMob Privacy Policy
• Yandex Mobile Ads: Alternative ad network for certain regions. Yandex Privacy Policy

Important: Ad networks may use cookies and device identifiers to show personalized ads. You can opt out of personalized advertising in your device settings.

5.2 Analytics and Remote Configuration

• Firebase (Google): Used for app analytics, crash reporting, and feature updates. Firebase collects app usage data and device information. Firebase Privacy
• AppMetrica (Yandex): Used for analytics in certain regions. AppMetrica Privacy

5.3 In-App Purchases (Optional)

• RevenueCat: Manages premium subscriptions. RevenueCat may process transaction data but does not have access to payment card details (handled by app stores). RevenueCat Privacy

6. Data Retention and Deletion

• Connection Logs: Deleted automatically within 24-48 hours
• Crash Reports: Retained for up to 90 days for debugging purposes
• Analytics Data: Aggregated and anonymized, retained according to third-party policies
• Local App Data: Stored on your device and can be deleted by uninstalling the app

You can request deletion of your data by contacting us at any time (see Section 14). We will process deletion requests within 30 days of verification.

7. Permissions We Request

X9 VPN requires the following device permissions to function:

• VPN Service: To create a secure VPN tunnel
• Network Access: To connect to VPN servers and check connectivity
• Foreground Service: To maintain VPN connection in the background
• Notifications: To inform you of connection status and important updates
• Battery Optimization (Optional): To prevent Android from killing the VPN connection
• Installed Apps (Optional): For split tunneling feature (choose which apps use VPN)

We DO NOT access your photos, contacts, microphone, camera, or location services.

8. Children's Privacy (COPPA Compliance)

X9 VPN is not directed at children under 13 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information.

9. Security Measures

We implement industry-standard security measures to protect your data:

• Encryption: All VPN traffic is encrypted using secure protocols (V2Ray/VMess)
• Secure Storage: Sensitive app settings are encrypted on your device
• No Centralized Database: We do not maintain a centralized database of user activity
• Regular Updates: We update our app to address security vulnerabilities
• Secure Transmission: All data transmissions between the app and our servers use SSL/TLS encryption

10. Your Rights and Choices

Depending on your location (e.g., GDPR, CCPA), you may have the following rights:

• Access: Request a copy of the data we hold about you
• Deletion: Request deletion of your data
• Opt-Out: Disable analytics or personalized ads in device settings
• Correction: Request correction of inaccurate data
• Portability: Request your data in a machine-readable format
• Object to Processing: Object to certain types of data processing
• Withdraw Consent: Withdraw your consent for data processing at any time

To exercise these rights, contact us using the information in Section 14.

10.1 Opting Out of Personalized Ads

Android: Settings → Google → Ads → Opt out of Ads Personalization

iOS: Settings → Privacy & Security → Apple Advertising → Disable Personalized Ads

Alternatively, you can opt out through:

• Google Ad Settings: https://adssettings.google.com
• Network Advertising Initiative: http://www.networkadvertising.org/choices/
• Digital Advertising Alliance: http://www.aboutads.info/choices/

11. International Data Transfers

X9 VPN servers are located in multiple countries. When you connect to a VPN server, your encrypted traffic may be routed through servers in different jurisdictions. We ensure that all transfers comply with applicable data protection laws, including:

• European Union General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Personal Information Protection and Electronic Documents Act (PIPEDA) - Canada
• Data Protection Act - United Kingdom
• Other applicable international privacy regulations

We use appropriate safeguards such as Standard Contractual Clauses (SCCs) for international data transfers where required.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes through the app or via notification. Your continued use of X9 VPN after updates constitutes acceptance of the revised policy.

If you do not agree with the updated Privacy Policy, you should discontinue use of the service and may request deletion of your data.

13. Legal Compliance and Jurisdiction

We may disclose your information if required by law, legal process, or government request. However, due to our minimal data collection and no-logs policy, we have very limited information to provide.

X9 VPN operates in compliance with:

• Information Technology Act, 2000 (India)
• General Data Protection Regulation (GDPR)
• California Consumer Privacy Act (CCPA)
• Other applicable local and international privacy laws

14. Contact Us

15. Additional Information for Specific Regions

15.1 European Union (GDPR)

If you are located in the EU/EEA, you have additional rights under GDPR, including the right to lodge a complaint with your local data protection authority.

EU users can contact their local Data Protection Authority:

• List of EU Data Protection Authorities: https://edpb.europa.eu/about-edpb/board/members_en

15.2 California (CCPA)

California residents have the right to know what personal information we collect, delete their personal information, and opt-out of the sale of personal information (note: we do not sell personal information).

California residents may also designate an authorized agent to make requests on their behalf.

15.3 United Kingdom

UK users have rights under the UK Data Protection Act 2018 and UK GDPR, including the right to lodge a complaint with the Information Commissioner's Office (ICO).

15.4 Canada

Canadian users have rights under PIPEDA, including the right to access and correct personal information.

15.5 Other Jurisdictions

We comply with applicable privacy laws in all jurisdictions where X9 VPN operates. If your country has specific data protection requirements, please contact us for more information.

16. Transparency Report

We believe in transparency. Due to our no-logs policy, we have no browsing data to provide to any third party, including governments. If we receive legal requests, we will:

• Notify users unless legally prohibited
• Challenge overly broad or unlawful requests
• Provide only the minimal data necessary (if any exists)
• Publish annual transparency reports when possible

17. Third-Party Links

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

18. Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovery (as required by law)
• Report the breach to relevant authorities as required
• Take immediate steps to secure the affected systems
• Provide information about what data was affected and what steps you should take

19. Dispute Resolution

If you have concerns about our privacy practices, please contact us first. We are committed to resolving complaints fairly and promptly. If you are not satisfied with our response, you may:

• Lodge a complaint with your local data protection authority
• Seek resolution through applicable consumer protection agencies
• Pursue other legal remedies available in your jurisdiction

20. Effective Date and Acceptance

This Privacy Policy is effective as of February 14, 2026, and applies to all users of X9 VPN worldwide.

By downloading, installing, or using X9 VPN, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.