This Privacy Policy explains what data the CarrotVPN Android app ("the App"), provided by Vinnorokom IT, collects, what it never collects, and how the two are kept separate. For the detailed breakdown of exactly what happens to your VPN traffic specifically, see our dedicated No-Logs Policy.
Table of Contents
Quick Summary
| Data Type | Collected? |
|---|---|
| Browsing activity / websites visited | Never |
| DNS queries | Never |
| Your real IP address (logged/stored) | Never |
| Connection timestamps | Never |
| Session duration | Never |
| Content of your traffic | Never |
| Anonymous crash/performance data | Yes, aggregated |
| Advertising identifiers (for ad delivery) | Yes, via ad SDK |
| Purchase data (if you buy an in-app upgrade) | Yes, via Google Play Billing |
Your VPN Traffic
CarrotVPN does not collect, store, or share logs of your VPN activity — including browsing history, DNS queries, your real IP address, connection timestamps, session duration, or the content of your traffic. This is covered in full detail, including how to think about verifying this kind of claim, on our No-Logs Policy page.
What We Do Collect
Separately from your VPN traffic, a small amount of data supports running the App itself:
- Anonymous crash and performance data — aggregated diagnostics (e.g. app crashes, load times) that help us fix bugs. This data is not linked to your VPN activity or browsing.
- Advertising data — CarrotVPN is supported by in-app advertising rather than charging for the free tier or selling user data. Our ad partners may collect device advertising identifiers to deliver and measure ads, governed by their own privacy policies.
- Purchase data — if you make an in-app purchase, that transaction is handled by Google Play Billing. We receive confirmation that a purchase was made, not your payment card details. See our Refund Policy for how purchases and refunds work.
App Permissions
CarrotVPN requests the Android VPN service permission (BIND_VPN_SERVICE) to establish the encrypted tunnel — this is required by Android for any VPN app to function, and is the core permission the App needs. Any additional permissions requested (such as network state, for detecting connectivity changes) are used only to operate the VPN connection reliably, not to access or read your other app data.
Third-Party Services
The App relies on a small number of third-party services, each governed by their own privacy practices:
- Advertising network(s) — to serve the ads that keep the App free, which may use advertising identifiers as described above
- Google Play Billing — to process any in-app purchases
- Crash/analytics tooling — to collect aggregated, anonymized crash and performance data
None of these services have access to your VPN traffic, browsing activity, or DNS queries, because CarrotVPN does not collect that data in the first place — there's nothing to share with them.
Data Retention
Because VPN activity (browsing, DNS, connection logs) is never collected, there is no retention period to disclose for that data — it simply doesn't exist. Aggregated crash/performance data and advertising data are retained only as long as needed for their stated purpose (debugging and ad delivery/measurement), consistent with our third-party providers' own retention practices.
Worth Knowing
If we ever received a government or law enforcement request for a specific user's VPN activity logs, we would have nothing to provide — that data is never collected or stored in the first place.
Children's Privacy
The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us using the details below and we will address it.
Your Rights
Since CarrotVPN does not require an account or collect personally identifying VPN activity, there is generally no persistent user profile tied to you to access, export, or delete. For questions about advertising identifiers or purchase records tied to your device, contact us using the details below, or manage ad personalization through your device's Android settings (Settings › Privacy › Ads).
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date on this page. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
Contact
Questions about this policy can be sent to contact@vinnorokom.com. See our Contact page for other ways to reach us, and our Terms of Service for the rules governing use of the App.
Privacy By Design
No account, no VPN activity logs, no data sold. Free on Android.
Download CarrotVPN Free