This policy covers RedFluent VPN — the apps for iPhone, Android and Windows, and the servers they connect to. RedFluent VPN is provided by Redfluent Pte. Ltd. (“we”, “us”), a company in Singapore. It explains what we collect, what our servers log, who can see it, how long we keep it, and what you can do about it.
For LorryGo and our websites, see the Privacy Policy. The rules for using the service are in the RedFluent VPN Terms of Use.
1. How the service works
- Access is by invite code. Each code allows a set number of devices, a monthly data allowance and, for some codes, a time limit.
- Your device connects through an encrypted tunnel to one of our servers: Tokyo, Japan (the default) or Singapore (for selected accounts). Both servers are hosted by Vultr.
- Only some traffic goes through the VPN. The app sends traffic for a defined list of services through the tunnel. Everything else goes directly over your normal connection and never reaches our servers.
- The app looks up domain names using Cloudflare’s encrypted DNS service (1.1.1.1), sent through the tunnel. We do not run our own DNS service and we do not see the names you look up.
2. What we collect
When you activate a device
- The invite code you enter, a device ID created by the app, your device’s name and the app version.
- The IP address and app identifier (user agent) the request came from, and whether activation succeeded.
While you use the service
- Device record: device ID, device name, a name the account holder may give the device, app version, the VPN credential issued to the device, whether it is connected, and when it last connected, disconnected and was active.
- Data usage: how much data each device uploads and downloads each month, so we can apply the data allowance. We count bytes; we do not record what the data is.
- Server logs: our VPN servers do not log individual connections or the addresses you connect to. They record only warnings and errors.
- Until 23 October 2026 our Tokyo server also logged each connection: the time, the device credential, the IP address you connected from, and the destination address and port. Those older entries are deleted automatically within about 30 days.
- Request log for our app service: when the app talks to our service (to activate, check your allowance or report its status), we log the time, IP address, approximate country, app identifier, the request and the result. Sign-in tokens are not written to this log.
What we do not collect
- The content of your traffic. We do not inspect or store it.
- Your contacts, photos, precise location or advertising identifier.
- The diagnostic log the app keeps on your device. It stays on your device; our service has no way to receive it. If you send us a screenshot or log for support, we use it only to help you.
- The apps contain no advertising or analytics software.
3. Why we use it
- To connect your device and keep the service running.
- To apply device limits, data allowances and expiry dates.
- To protect the service against abuse and to investigate problems you report.
4. Who can see it
- Redfluent staff who run the service. Our admin tools show device names, data usage and when each device was last used.
- Service providers that process data for us: Vultr (servers in Tokyo and Singapore), Cloudflare (network protection for our app service), and Apple and Google (app distribution).
- Authorities, only when the law or a court order requires it.
- We do not sell your data and we do not use it for advertising.
5. Where it is stored
Account, device and usage records are stored on our server in Tokyo, Japan. Logs are stored on the server that produced them, in Tokyo or Singapore.
6. How long we keep it
| Data | Kept for |
|---|---|
| DataActivation records | Kept forAbout 90 days, then deleted. |
| DataMonthly data usage per device | Kept forUp to 400 days after the end of the month, then deleted. |
| DataDevice and invite records | Kept forWhile your access is active. Ask us and we will delete them. |
| DataTokyo server system log, including the connection entries recorded before 23 October 2026 | Kept forAbout 30 days, then deleted automatically. |
| DataSingapore server warnings and errors | Kept for90 days. |
| DataRequest log for our app service | Kept forAbout 30 days, then deleted automatically. |
7. Security
- Traffic between your device and our server is encrypted.
- The app signs in to our service with a token issued to your device, not with a password.
- Server and admin access is restricted to Redfluent administrators.
8. Your choices and rights
- You can ask what personal data we hold about you, ask us to correct it, or ask us to delete your devices and records.
- You can stop using the service at any time by disconnecting and deleting the app.
- Email us at the address below.
9. Children
RedFluent VPN is not intended for children under 13, and we do not knowingly collect their data.
10. Contact
- Data Protection Officer, Redfluent Pte. Ltd.: ai@redfluent.com
- If you are not satisfied with our response, you can contact the Personal Data Protection Commission of Singapore (pdpc.gov.sg).
11. Changes to this policy
If we change this policy we update the date at the top. If we start collecting a new type of data, we update it first.