Privacy Policy

Scope and controller

This Privacy Policy covers the AwraithVPN Android application and the VPN connection service it operates (together, “AwraithVPN,” “the Application,” or “the Service”). The controller for processing AwraithVPN determines is CT Mecha Noodle, operated by CT MECHA NOODLE BAR LLC, 151 Bedford St, Stamford - 06901-1902, United States (US). Contact: ticket_a014c@gaochengy.com.

“You” means the person using the Application. This Policy does not govern processing carried out by your internet or mobile provider, VPN or proxy infrastructure operators, the websites and apps you connect to, Google Play, Android, or the advertising and analytics providers named below. Those parties act under their own notices.

Information you choose to give us

AwraithVPN does not require an account, a phone number, or a sign-in. The personal information we receive from you is what you decide to send:

• Support email: if you use the Contact option, we may receive your email address, name, message, attachments, and any device or log details you include.
• Rating feedback: the in-app rating prompt sends your star selection to Google Play. We do not receive your Google account details through it.

Please do not send passwords, payment credentials, health data, or other information you did not intend to share.

Information handled automatically

VPN connection and session data

To establish and maintain the tunnel you request, AwraithVPN and the service infrastructure handle the selected entry, connection configuration and credentials, routing information, tunnel state, session timing and remaining-time counters, transferred-byte counters and estimated rates, network status, connection results and technical errors, exit addresses, and related connection metadata.

Exit-network lookups

For the exit IP and connection-parameters displays, AwraithVPN sends requests to public information services: ipinfo.io, api.ipify.org, and checkip.amazonaws.com. Connection diagnostics in the bundled library may also call speed.cloudflare.com/meta. These services may receive the requesting IP address, request time, User-Agent string, and ordinary network-request metadata, and may return an IP address, hostname, network or organisation name, city, region, country, approximate coordinates, postal area, and time zone. Any location shown is derived from an IP address, not from GPS.

Device and application identifiers

Where advertising, attribution, or stability features are active, the following may be processed: the Android advertising identifier (AD_ID) and app-set identifier, Firebase Installation ID, AppsFlyer and Meta SDK identifiers, device model, manufacturer, Android version and API level, app version and build, locale, time zone, network type, and carrier.

Information stored on your device

AwraithVPN keeps limited values locally so it can operate: the selected entry, configuration values, session timing and connection state, whether a prompt has already been shown and its cooldown, cached exit-lookup responses with timestamps, and reward-step status. Storage uses app preferences and an internal database inside the app's private area.

The Application sets allowBackup="true". If backup or device-transfer is enabled on your device, Android or your platform provider may process these preferences and files. Encryption, retention, and deletion of backup copies are controlled by the platform and your device settings.

Crash and performance data

Firebase Crashlytics and Analytics may collect stack traces, exception types, device and app version context, session and screen events, and ad-related measurement events, used to keep the Service working and to measure stability.

Why the information is used

Provide the VPN

Connection configuration, selected entry, routing and tunnel state, technical connection data.

Show session details

Timing, byte counters, estimated rates, exit address and network parameters.

Operate and protect

Errors, diagnostics, abuse prevention, capacity and reliability management.

Advertising and rewards

Ad requests and rendering, consent state, reward steps that add session time.

Measure and attribute

Install sources, campaign performance, in-app events.

Support you

Email address, message, and anything you voluntarily attach.

Meet legal duties

Responding to valid legal process, protecting rights, safety, and property.

Where a lawful basis is required, processing rests on performance of the service you requested, our legitimate interests in delivering and securing it, your consent (for example for personalised advertising or notifications where the law requires it), or compliance with legal obligations.

Advertising, attribution, and measurement

AwraithVPN is free and supported by advertising. Ad formats may include app-open, interstitial, native, and rewarded ads, delivered through Google's advertising platform (Google Mobile Ads SDK / AdMob) and, where the law requires it, with consent collected through Google's User Messaging Platform. Rewarded steps may grant additional session time in exchange for viewing an ad.

AppsFlyer and the Meta (Facebook) SDK may be used for install attribution, event and ad-revenue measurement. Firebase Analytics aggregates app behaviour, and Firebase Remote Config supplies operational settings. These providers may process the identifiers and signals described in Section 03 under their own policies, including for frequency capping, fraud prevention, and reporting.

Consent choices affect personalisation, not whether ads appear. You can change or withdraw consent where the consent dialog offers it, and you can reset or delete the advertising identifier in your Android Settings → Privacy → Ads, or opt out of personalised ads there. Opt-outs do not stop contextual ads.

VPN traffic and the logging boundary

VPN traffic must pass through VPN or proxy infrastructure in order to reach its destination. Infrastructure operators and technical providers may handle connection requests, credentials, routes, session values, exit addresses, data in transit, and related metadata as technically necessary to transmit traffic, authenticate access, keep the Service reliable, prevent abuse, secure systems, or comply with applicable law.

Use HTTPS whenever a site supports it, and do not transmit information you are not authorised to transmit.

Android permissions and service visibility

• VPN access: granted only on the system-controlled consent screen Android shows before a tunnel is created.
• Internet, network state, Wi-Fi state: establish and monitor connectivity, react to network changes, route the traffic you request, and perform exit lookups.
• Notifications (POST_NOTIFICATIONS) on Android 13+: the ongoing VPN notification and connection status; also used for locally scheduled reminders that the notification component re-arms after reboot (RECEIVE_BOOT_COMPLETED). Content from other apps is not read.
• Foreground service, special use: keeps the user-started tunnel running when the app leaves the foreground. Declared as android:foregroundServiceType="specialUse" with subtype vpn_tunnel.

While connected, Android shows an ongoing, low-priority notification that can display current upload and download rates, open the Application when tapped, and provide a Stop action. The foreground service ends when the VPN disconnects, including when the configured session period expires.

AwraithVPN does not request or use camera, microphone, contacts, call log, SMS, storage browsing, or precise location permissions.

Disclosure and recipients

Information may be disclosed only within these categories:

• VPN and network infrastructure providers that route traffic and operate the connection systems;
• Exit-information services: ipinfo.io, api.ipify.org, checkip.amazonaws.com, and Cloudflare metadata for diagnostics;
• Advertising and measurement providers: Google (ads, User Messaging Platform, Firebase Analytics, Remote Config, Crashlytics), AppsFlyer, and Meta;
• Platform and device services: Google Play, Android backup or device-transfer, and your email application when you choose to use it;
• Authorities and other parties where valid law requires it, or where reasonably necessary to protect rights, safety, or property, or to investigate misuse;
• Successors in a merger, restructuring, financing, or transfer, subject to applicable protections.

We do not sell your personal information. Where a jurisdiction's law treats disclosure to advertising partners for cross-context behavioural advertising as a “sale” or “share,” you may use the opt-outs described in Section 05.

Retention and deletion

Values stored on your device remain until they are replaced, cleared by the Application or Android, removed through Settings → Apps → AwraithVPN → Storage → Clear data, or deleted when you uninstall the Application. Cached exit-lookup responses are reused only for a limited window and are then overwritten.

Support correspondence is kept as long as needed to answer the request, keep a support record, protect rights, or meet legal obligations. Infrastructure, advertising, and measurement providers apply their own retention periods.

To request deletion of information you sent us directly, write to the address in Section 14. We may need enough detail to find the relevant correspondence, and we may retain limited records where the law requires it.

International processing

The Service, network routes, infrastructure, support communications, and the providers named above may operate in countries other than yours, including the United States. Information may therefore be processed under laws different from those of your residence. Where required, we rely on legally recognised transfer safeguards or other lawful transfer mechanisms.

Security

We use administrative and technical measures appropriate to the nature of the Service, including HTTPS for app-server and lookup requests, private app storage, and release-build controls. No internet transmission, VPN route, device, or storage system is completely secure, and we cannot guarantee absolute security. Keep Android and AwraithVPN updated, lock your device, use strong and unique passwords, and enable multifactor authentication where available.

Children

AwraithVPN is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Local law may set a higher age threshold. If you are a parent or guardian and believe a child has sent personal information directly to us, contact us so we can review it and delete it where appropriate.

Your rights, choices, and policy changes

Depending on where you live, you may be able to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or a review by a supervisory authority; you may also have rights to know whether personal information is sold or shared and to limit sensitive-information use. These rights can be limited by applicable law and by whether we hold information linkable to you. Send a request using the contact details below; we may verify it before acting. You may also lodge a complaint with your local privacy authority.

We may update this Policy when features, providers, legal requirements, or data practices change. The effective date at the top is revised, and material changes may be announced in the Application or on its store page. Review the current Policy before using a materially changed Service.

Contact

Privacy questions and requests may be sent to:

Developer

CT Mecha Noodle

Organisation

CT MECHA NOODLE BAR LLC

Address

151 Bedford St, Stamford - 06901-1902, United States (US)

Account owner

Yang Chaomei

Email

ticket_a014c@gaochengy.com