This Privacy Policy explains how oixCloud ("we", "us", or "the App") handles information when you use our VPN application on iOS, tvOS, and related platforms. We are committed to protecting your privacy and designed oixCloud to collect as little data as possible.
Requests to the oixCloud API support account authentication, session maintenance and account device counts, service configuration retrieval where available, and optional certificate management. These requests do not report VPN browsing activity, traffic usage statistics or tunnel connection logs.
The tunnel processes network packets, destination addresses, DNS requests and byte counts to establish connections and apply your routing settings. This operational processing is separate from server-side retention. Our managed service does not retain VPN traffic usage statistics or connection logs.
The oixCloud service does not collect, record, store, or sell the contents of your network traffic, the websites you visit, your DNS queries, or your IP-level browsing activity.
MITM is off by default. If you explicitly enable it and trust its root certificate, the App decrypts traffic only for domains covered by rules you enable. This processing happens on your device so your rules can inspect or modify request and response URLs, headers, and bodies. JavaScript you install can also make network requests and may send matched data to destinations identified by that script. Review the displayed source and import scripts only from sources you trust.
We do not sell personal data, use VPN browsing activity for advertising or profiling, or provide VPN activity records to advertising or analytics providers. We do not retain browsing or connection logs to disclose to third parties.
Account device records are scheduled for cleanup after 90 days without an authenticated request from that installation, and are removed when the account is deleted. These records are separate from tunnel connection logs.
Recent request records are held in a bounded device-memory buffer. Local network-event history is limited to seven days, 500 events and 512 KiB. Local diagnostics are not account-server logs.
By default, decrypted URLs, headers, and bodies are processed in memory and are not added to the persistent network-event history or diagnostic packages. A script you install can deliberately store, log, or send values through its documented APIs. Diagnostic packages may include anonymized connection metadata, such as host aliases and routing outcomes, but not decrypted headers or bodies. Configuration and script storage remain on your device until you remove them or delete the App. Synced configuration remains with the selected sync service until you delete it there.
Traffic is protected using industry-standard encryption. While no method of transmission is perfectly secure, we apply appropriate technical and organizational measures to safeguard your information.
oixCloud is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from them.
Account records are stored on servers managed by us. Cloudflare may process account-service requests through its global network. Optional iCloud data is stored on Apple infrastructure. These services may process information outside your country or region; using a CDN is distinct from storing account records or retaining VPN activity.
Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise these rights, contact us at the address below.
Selected VPN/proxy, DNS and subscription providers receive requests needed to provide the services you choose. The exit-IP display contacts IP.SB to obtain the current public exit IP; connectivity checks contact test endpoints. These are ordinary network requests and do not attach account credentials, browsing history or VPN activity logs. When routed through a proxy, the endpoint sees the proxy exit IP. Providers process these requests under their own privacy policies. Apple also provides app distribution and optional iCloud services.
We may update this Policy from time to time. Material changes will be reflected by updating the effective date above. Continued use of the App after changes constitutes acceptance of the revised Policy.
If you have questions about this Privacy Policy, contact us at support@dler.io.
本隐私政策说明 oixCloud（"我们""本应用"）在您使用我们的 VPN 应用（iOS、tvOS 及相关平台）时如何处理信息。我们致力于保护您的隐私，并将 oixCloud 设计为尽可能少地收集数据
oixCloud API 请求用于账户验证、登录状态维护及账户设备数量统计、可用时的服务配置获取，以及可选的证书管理；这些请求不会上报浏览活动、流量用量统计或隧道连接日志
隧道处理网络数据包、目标地址、DNS 请求和字节计数，用于建立连接和执行您的路由设置；这些运行时处理与服务端留存不同，我们的自营服务不保存 VPN 流量用量统计或连接日志
oixCloud 服务不会收集、记录、存储或出售您的网络流量内容、访问的网站、DNS 查询或 IP 级浏览活动
MITM 默认关闭。仅当您明确启用并信任其根证书后，本应用才会在设备上解密您已启用规则所覆盖域名的流量，使规则能够检查或修改请求与响应的 URL、标头和正文。您安装的 JavaScript 还可发起网络请求，并可能将匹配数据发送到脚本源码指定的目的地。请查看应用显示的源码，且仅从可信来源导入脚本
我们不出售个人数据，不将 VPN 浏览活动用于广告或用户画像，也不向广告或统计分析提供方提供 VPN 活动记录；我们不留存可向第三方披露的浏览或连接日志
某次安装连续 90 天未发起已验证身份的请求后，对应的账户设备记录会进入定期清理范围；删除账户时也会移除这些记录；这些记录与隧道连接日志不同
近期请求记录保留在有容量限制的设备内存缓冲区中；本地网络事件历史最多保留 7 天、500 条及 512 KiB；本地诊断不属于账户服务器日志
默认情况下，解密后的 URL、标头和正文仅在内存中处理，不会加入持久网络事件历史或诊断包。您安装的脚本可通过其公开 API 主动存储、记录或发送数据。诊断包可能包含匿名化连接元数据，例如主机别名和路由结果，但不包含解密后的标头或正文。配置与脚本存储保留在设备上，直至您将其移除或删除应用；已同步的配置会保留在所选同步服务中，直至您从该服务删除
流量采用行业标准加密保护。尽管没有任何传输方式是绝对安全的，我们仍采取适当的技术与组织措施来保护您的信息
oixCloud 并非面向 13 周岁以下（或您所在司法辖区规定的最低年龄）的儿童，我们不会在知情情况下收集其个人数据
账户资料存储在我们管理的服务器上；Cloudflare 可能通过其全球网络处理账户服务请求，可选的 iCloud 数据存储于 Apple 基础设施；这些服务可能在您所在国家或地区以外处理信息，使用 CDN 与账户资料存储或 VPN 活动留存是不同环节
视您所在地区而定，您可能有权访问、更正或删除您的个人数据，或反对某些处理活动。如需行使这些权利，请通过下方地址联系我们
您选择的 VPN／代理、DNS 和订阅提供方会接收提供相应服务所需的请求；出口 IP 显示通过 IP.SB 查询当前公网出口 IP，连通性检测访问测试端点；这些普通网络请求不附带账户凭据、浏览历史或 VPN 活动日志，经代理路由时对方看到的是代理出口 IP；相关提供方依其隐私政策处理请求，Apple 另提供应用分发和可选的 iCloud 服务
我们可能会不时更新本政策。重大变更将通过更新上方生效日期予以体现。变更后继续使用本应用即表示接受修订后的政策
如对本隐私政策有任何疑问，请联系 support@dler.io