Privacy Policy

The short version. Berry works without an account, email or phone number. We don’t record the websites you visit or the content of your traffic, and we don’t sell data or show personalised ads. To run the service we keep a few technical records (an anonymous ID, when your sessions start and end, which server they used, and payment records). The VPN servers are run by independent operators, who can see connection details and may keep their own logs.

1. Who we are

Berry VPN (“Berry”, “we”, “us”) provides the Berry VPN app for Android, the website at berryvpn.app and the service behind them. For any privacy question, contact support@berryvpn.app.

2. What we collect

2.1 An anonymous app identity

When you first open the app, it creates a random account ID and device ID, and a secret token that it keeps in your device’s secure storage. We store only a one-way hash of the token. We don’t ask for your name, email address or phone number.

2.2 Connection records

When you connect, the app tells our service which server it is connecting to, so we can apply the free 30-minute session limit or your Premium pass. For each session we record your anonymous account and device IDs, the VPN server’s address, and when the session started, when it is due to end and when it ended.

We do not record the websites or apps you use, your DNS requests, or the content of your traffic. Your VPN traffic doesn’t pass through Berry’s own servers: it goes from your device to the VPN server you connect to.

2.3 Network information

When the app or website contacts our service, we see the IP address it comes from. We use it briefly in memory to limit abuse (for example, too many requests) and we don’t store it in our database. Our hosting and network providers, including Cloudflare, may process it in short-lived security and delivery logs.

2.4 Payments

Premium passes are paid in stablecoins (USDT or USDC). For each order we keep the pass length and price, the coin and network, the deposit address, the amounts due and received, blockchain transaction IDs and the relevant times. Blockchain transactions are public by nature. Payments are processed by our payment provider, CryptAPI, which creates the deposit address and forwards the funds to us. We never receive card or bank details.

For orders placed on this website we also keep the redeem code, a hash of the secret in your receipt link, and, once the code is redeemed, which anonymous account redeemed it.

2.5 The website

Analytics: we may use Cloudflare Web Analytics, which counts visits without cookies and without building a profile of you.
Bot protection: the checkout uses Cloudflare Turnstile to check that a person, not a bot, is creating a payment address. Cloudflare processes technical signals from your browser for this check.
Your browser: your theme choice and a list of your recent orders (so you don’t lose a receipt link) are saved in your browser’s local storage. They never leave your device.

2.6 On your device

The app stores its settings, a cached server list, the servers that worked for you recently and its secret token on your device. This information stays on your device.

2.7 When you contact us

If you email us, we keep the conversation and your email address to answer you.

3. The VPN servers and what their operators can see

Berry doesn’t operate the VPN servers in its catalogue. They are run by independent third-party network operators in different countries, and Berry helps you find and connect to the fastest available ones.

Your traffic is encrypted between your device and the VPN server. From there it travels to the internet, and websites see the server’s IP address instead of yours.
The operator of the server you connect to can see the IP address you connect from, when and how long you are connected, and how much data you transfer. Operators may keep their own connection logs under their own policies and local laws, which we don’t control.
Traffic to websites and apps that don’t use their own encryption (HTTPS) can be read at the VPN server. Most sites today use HTTPS.
A VPN improves your privacy but does not make you anonymous. Please don’t rely on Berry where your safety depends on anonymity.

4. How we use information

To provide the service: apply session limits and passes, restore your session and keep the server list fresh.
To process payments, deliver redeem codes, handle refunds and keep accounting records.
To protect the service from fraud and abuse, and keep it secure.
To answer support requests.
To understand overall use of the website in aggregate.

Where data-protection laws such as the GDPR apply, we rely on performing our contract with you, our legitimate interest in running and protecting the service, and our legal obligations (for example, accounting).

We don’t sell personal information and we don’t share it for advertising. We share it only with:

service providers that run parts of the service for us: our server hosting provider, Cloudflare (network, website hosting, analytics and bot protection) and CryptAPI (payments);
Google, when you install the app from Google Play, under Google’s own privacy policy;
authorities, when the law requires it. We can only provide the limited records described above.

6. How long we keep it

Connection records: deleted automatically 30 days after the session ends.
Payment records and redeem codes: kept as long as needed for accounting, tax and refund purposes.
Anonymous account: kept while you use the app. If you uninstall it, the token on your device is gone and the account can no longer be used; you can ask us to delete the remaining records.
Support emails: kept for as long as needed to help you, then deleted.

7. Security

We use encrypted connections (HTTPS) for all communication with our service, store secrets only as one-way hashes, and limit access to production systems. No system is perfectly secure, but we work to protect what we hold.

8. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, or to object to how we use it. Because Berry doesn’t know who you are, we may need you to prove that an account or order is yours, for example with your receipt link. To make a request, email support@berryvpn.app. You may also complain to your local data-protection authority.

9. Children

Berry is intended for people aged 18 or over (or the age of majority where they live). We don’t knowingly collect information from children.

10. International transfers

Our providers may process information in countries other than yours. Where required, we rely on appropriate safeguards for these transfers.

11. Changes to this policy

We’ll update this page when our practices change and change the date at the top. For significant changes we’ll also let you know in the app or on the website.

12. Contact

Questions or requests: support@berryvpn.app.