Privacy Policy

Last updated 5 August 2026

Teal VPN is operated by Fxolio LLC, a Wyoming limited liability company (“we”, “us”). This policy explains exactly what we collect, what we deliberately do not collect, and why. It is written to be read, not to be survived.

1. What we collect

Account information

• Account number. Every account has a generated number. This alone is enough to use the service.
• Email address — only if you choose to provide one, for sign-in recovery and receipts. An account without an email is a full account.
• Google account identifier and email — only if you choose to sign in with Google.
• Password hash — only if you set a password. We never store the password itself.

Device information

• Your device’s public key. The matching private key is generated on your device and never transmitted to us. We could not produce it if asked.
• A device label and platform (for example “Android”), so you can recognise and revoke your own devices.

Connection metadata

• The IP address you connect from, recorded when your device registers or signs in. We keep this to investigate abuse, fraud and account sharing, and to comply with lawful requests. It is retained for 30 days and then deleted.
• The country that address resolves to, used to enforce the restrictions described in our Terms of Service.
• Total bytes transferred per account, to enforce plan limits. This is a number, not a record of what was transferred.
• The time of the most recent handshake per device, so inactive devices can be cleaned up.

2. What we do not collect

• We do not log the websites, services or IP addresses you connect to through the tunnel.
• We do not log DNS queries. Name lookups are answered by the VPN server itself and are not written to disk.
• We do not inspect, record or store the contents of your traffic. It is encrypted end to end between your device and the exit server, and we hold no key that would let us read it.
• We do not use advertising identifiers, analytics SDKs, trackers or fingerprinting in the app.
• We do not sell, rent or share personal information with data brokers or advertisers. Ever.

3. Payments

Card payments are handled by a third-party payment processor acting as merchant of record. We receive confirmation that a payment succeeded and the associated account; we never receive or store your card number. Cryptocurrency payments are recorded as a transaction reference against your account.

4. Why we are allowed to hold this

Where the GDPR or similar laws apply, we rely on: performance of a contract (running the account you paid for), and legitimate interests (preventing abuse and fraud, and keeping the service available). Where we rely on consent — for example if you opt in to product emails — you may withdraw it at any time.

5. How long we keep things

• Connection IP addresses: 30 days, then deleted.
• Account records: for as long as the account exists.
• After you delete your account: account records are removed within 30 days, except records we are legally required to retain, such as payment records kept for tax purposes.

6. Who we share with

We share personal information only with: our payment processor (to take payment), and our hosting providers (who necessarily carry the encrypted traffic). We do not give them, and they do not have, the ability to read your traffic.

We will disclose information if compelled by a valid legal order binding on Fxolio LLC. We can only ever produce what we actually hold, which is described above. We cannot produce browsing history or traffic contents, because we do not have them.

7. Your rights

You may request a copy of your data, ask us to correct it, or ask us to delete your account and its data. Write to [email protected] from the email on the account, or from the app if your account has no email. Depending on where you live you may also have the right to complain to a data protection authority.

8. Children

Teal VPN is not directed at children under 13, and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will delete it.

9. International transfers

We are a United States company and our servers are located in several countries. Using the service necessarily involves your data being processed in the country whose server you select, and in the United States.

10. Changes

If we change this policy in a way that materially affects you, we will post the new version here with a new date and, where we have your email address, notify you before it takes effect.

11. Contact