This policy explains how IBKO Pixels processes information when you use BaraqVPN. BaraqVPN does not require you to create an account to use its core features.
1. Information we may process
Device and app information
This may include device type, operating system and version, app version, language, country or approximate location derived from an IP address, mobile network, installation identifiers and technical settings.
VPN connection information
To establish, maintain and secure a VPN connection, the app and its infrastructure may process an IP address, connection timestamps, selected server or region, connection status, bandwidth or performance measurements and technical error information. IBKO Pixels does not use the content of network traffic to create advertising profiles.
Accounts and guest access
If you choose account sign-in, our authentication providers, Supabase and Firebase Authentication as configured by the app, process your email address, account identifier and available profile information such as your name and profile image. Guest access can also create an anonymous service identifier. Account identifiers may be shared with RevenueCat to associate Premium access with your account.
iOS analytics and advertising tracking
In iOS version 1.0.5 build 6 and later, Firebase Analytics and Meta App Events collection is disabled. These iOS versions do not ask for optional analytics consent and do not send app-use events to those analytics services. Advertising identifier collection is disabled. This does not remove the account, subscription, VPN connection or user-requested breach-check processing described in this policy.
Earlier iOS builds and Android versions may offer optional Firebase Analytics and Meta App Events measurement after consent. Where this option is present, you can continue without analytics. These events may include app opens, screen views, connection outcomes, selected server or protocol and subscription activity. We do not include scanned email addresses, browsing history, DNS queries or VPN tunnel payloads in analytics event parameters.
Subscriptions and optional breach scans
Apple and RevenueCat process purchase records, transaction and app-user identifiers, and subscription status to provide purchases, restore purchases and manage Premium access. When you explicitly start an email breach scan, the address you enter is sent to XposedOrNot and LeakCheck to return the scan result. This is separate from VPN traffic processing.
Diagnostics
Crash logs, performance data and technical diagnostics may be processed to maintain reliability, investigate errors and protect the service.
2. Why we process information
- Provide and maintain the VPN connection.
- Protect the app and infrastructure from misuse and security threats.
- Maintain accounts and diagnose technical problems. Optional app-use measurement applies only to versions that offer analytics consent; it is disabled on iOS build 6 and later.
- Provide Premium subscriptions, purchase restoration and user-requested breach scans.
- Comply with legal obligations and enforce our terms.
3. Legal bases
Where the GDPR applies, processing may be based on performance of the service you request, our legitimate interests in security and product operation, consent for optional analytics, and compliance with legal obligations.
4. Service providers
Our providers include VPN hosting and infrastructure providers, Apple and RevenueCat for subscriptions, Supabase and Firebase Authentication for accounts, Google Firebase Analytics and Meta App Events only in versions that offer consent-based app analytics, and XposedOrNot and LeakCheck for user-requested breach scans. They process information under their own terms or on our instructions, depending on their role. Some providers may process information outside the European Economic Area using legally recognised safeguards.
5. Retention and security
Information is retained only for as long as needed for the purposes described, including security, troubleshooting, optional app analytics, subscription management and legal obligations. Retention periods vary by data type and provider. We use reasonable technical and organisational measures, but no service can guarantee absolute security.
6. Your choices and rights
On iOS build 6 and later, analytics event collection is disabled without requiring a choice. In versions that offer analytics consent, you can choose “Continue without analytics”. You can request account deletion through the app where available, or contact us for help, deletion requests or withdrawal of previously granted consent. You can also contact us to exercise applicable privacy rights, including access, correction, deletion, restriction, objection and portability. You may complain to the Dutch Data Protection Authority or your local supervisory authority.
7. Children
BaraqVPN is not directed to children under 13. We do not knowingly request account information from children. If you believe a child has provided personal information, contact us.
8. Changes and contact
We may update this policy when the app, providers or legal requirements change. The current version will remain available on this page. Questions and privacy requests can be sent to contact@ibkopixel.nl.