ZedSecure VPN

Privacy Policy & Terms of Service

ZedSecure is a VPN client. It has no user account, no backend server of ours, and no analytics.

Application ID com.zedsecure.vpn  ·  Publisher: Cluvex Studio  ·  Effective: 7 September 2026  ·  Last updated: 7 September 2026

The short version

Contents
  1. Who we are and what this covers
  2. What the app stores on your device
  3. What we do not collect
  4. What leaves your device, and to whom
  5. Permissions and why each is needed
  6. Device identifier
  7. Security, and its honest limits
  8. Children
  9. Your choices and rights
  10. Changes to this policy
  11. Terms of Service
  12. Contact

1. Who we are and what this covers

ZedSecure VPN ("the app") is published by Cluvex Studio ("we", "us"). This document covers the ZedSecure VPN Android application distributed under the application ID com.zedsecure.vpn.

ZedSecure is a client, not a VPN service. It does not include, bundle or sell access to any VPN server. It connects to servers, subscriptions and providers that you add — a configuration link you paste, a subscription URL you enter, a corporate gateway you configure, or a public network such as Tor or Psiphon that you choose to use. We have no visibility into, and no control over, any of them.

Because there is no account and no server of ours, there is no database in which your use of the app could be recorded.

2. What the app stores on your device

All of the following is written to the app's private storage on your device. It is not transmitted to us, and it is removed when you uninstall the app.

3. What we do not collect

The app contains no analytics framework, no crash-reporting service, no advertising library and no tracking SDK of any kind. Specifically, we do not collect:

We do not sell, rent or share personal data, because we do not receive any.

4. What leaves your device, and to whom

The app is a network tool, so it necessarily makes network connections. Every destination below is a third party we do not control, and each necessarily sees your IP address when contacted. None of them receives an identifier issued by us.

FeatureWhere it connectsWhat is sentOptional?
Your VPN connection The server, subscription provider or network you configure — including Tor and Psiphon if you select them Your network traffic, as any VPN client would send it. It goes to your chosen provider, never to us. This is the app's purpose
Subscription updates The subscription URL you entered An HTTP request for the configuration list. The provider sees your IP and the client identifier sent with the request. Yes — only if you add a subscription
Connection info / country Public IP-lookup services, tried in order: api.ip.sb, ipwho.is, ipapi.co, ifconfig.co, Cloudflare /cdn-cgi/trace. You can substitute your own URL in Settings. A request with no parameters. The service replies with the IP, city and country it sees — which is how the app can show where you appear from. Yes — used by the info card and the map
Speed test speed.cloudflare.com Test traffic only. A full run transfers up to roughly 150 MB, which counts against your data plan. Yes — only when you start it
Routing data (geo files) GitHub, from the rule set you select (Loyalsoldier, runetfreedom or Chocolate4U) A file download. The app ships these files and only fetches updates when you ask it to. Yes
Update check The app's public Google Play listing page A request for the listing, to read the latest published version and its release notes. No identifier is attached. Yes — can be ignored or dismissed
DNS resolution The resolver you choose in Settings (for example Cloudflare, Google, AdGuard, Quad9 or one you enter) DNS queries, as any DNS client sends them. Configurable
Tor / pluggable transports The Tor network, its directory authorities, and bridge or Snowflake infrastructure when you enable them Traffic as the Tor protocol defines it. Yes — only if you use Tor

Each third party operates under its own privacy policy. We suggest reviewing the policy of any provider whose server or subscription you use, since that provider — not us — carries your traffic.

5. Permissions and why each is needed

PermissionWhy the app requests it
INTERNETTo make network connections. A VPN client cannot work without it.
FOREGROUND_SERVICE, FOREGROUND_SERVICE_SPECIAL_USETo keep the tunnel running with a visible ongoing notification while you use other apps, as Android requires.
ACCESS_NETWORK_STATE, ACCESS_WIFI_STATE, CHANGE_NETWORK_STATETo detect connectivity changes and reconnect when the network changes, and to configure the tunnel interface.
POST_NOTIFICATIONS, POST_PROMOTED_NOTIFICATIONSTo show the connection status notification and its live status chip.
QUERY_ALL_PACKAGES Used solely by the per-app proxy feature, so the app can show you a list of your installed applications and let you choose which of them go through the tunnel. The list is read on your device, displayed to you, and never transmitted anywhere. Only the selection you make is saved locally. If you never open that screen, the list is never used.

The app does not request location, contacts, camera, microphone, SMS or storage-wide file access. The VPN connection itself is established through Android's standard system VPN consent dialog, which you must approve.

6. Device identifier

Settings shows a Device ID so you can copy it. This value is Android's ANDROID_ID — an identifier generated by the operating system that is specific to your device and this app's signing key, and that changes on a factory reset.

The app does not transmit this value anywhere. It is displayed for one purpose: if someone shares a locked Vault configuration with you and chooses to restrict it to specific devices, they need your Device ID in order to include yours. Sending it to them is an action you take deliberately, outside the app.

7. Security, and its honest limits

Vault configurations are encrypted with AES-256-GCM. Ordinary configurations and settings are stored in the app's private storage, which Android isolates from other applications.

We would rather be accurate than reassuring, so:

8. Children

The app is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children — in fact, we do not knowingly collect personal information from anyone, as described above.

9. Your choices and rights

Because the app holds no data about you on any server of ours, there is nothing for us to export, correct or delete on your behalf. You remain in full control:

If you are in the EEA or UK: since we neither collect nor process personal data through the app, we do not act as a controller of your personal data in connection with it.

10. Changes to this policy

If this policy changes, the updated version will be published at this address with a new "Last updated" date. Material changes will also be noted in the app's release notes. Continuing to use the app after an update means you accept the revised policy.


11. Terms of Service

11.1 Acceptance

By installing or using ZedSecure VPN you agree to these terms. If you do not agree, do not use the app.

11.2 What the app is

ZedSecure is client software that connects to servers you configure. We do not provide, operate, endorse or resell VPN servers or subscriptions. Any server, subscription, gateway or network you use is supplied by a third party and governed by that party's own terms.

11.3 Licence

You are granted a personal, non-exclusive, non-transferable licence to use the app on devices you control. You may not resell the app, present it as your own product, or remove or alter its attributions.

11.4 Acceptable use

You are responsible for how you use the app and for complying with the laws that apply to you. VPN use is restricted or regulated in some jurisdictions; determining what is lawful where you are is your responsibility. Do not use the app to break into systems, distribute malware, harass others, infringe copyright, or commit any other unlawful act.

11.5 Third-party services and open-source components

The app incorporates independent open-source components, each under its own licence — including Xray-core, hev-socks5-tunnel, Tor and its pluggable transports, Psiphon, OpenConnect (LGPL-2.1), AmneziaWG and others. Their licences and attributions are listed in the app. Those projects are not affiliated with Cluvex Studio and do not endorse this app.

11.6 No warranty

The app is provided "as is" and "as available", without warranty of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that connections will be available, uninterrupted, fast, or able to bypass any particular restriction.

11.7 Limitation of liability

To the maximum extent permitted by law, Cluvex Studio is not liable for any indirect, incidental, special, consequential or punitive damages, or for loss of data, profits, revenue or goodwill, arising from your use of or inability to use the app — including any act, omission, outage or data handling by a third-party server, subscription seller or network you choose to use. Nothing here excludes liability that cannot lawfully be excluded.

11.8 Data charges

The app uses your network connection. Features such as the speed test can transfer a substantial amount of data (up to roughly 150 MB per run) and may incur charges from your mobile operator. Data usage is shown before you start a test.

11.9 Availability and changes

Features may be added, changed or removed between versions. We may update these terms; the current version is always the one published at this address.

11.10 Termination

You may stop using the app at any time by uninstalling it. These terms cease to apply on uninstallation, except for provisions that by their nature survive (such as the disclaimer of warranty and the limitation of liability).

12. Contact

Questions about this policy or these terms: