Privacy Policy

About this policy

Atlas Connect is a VPN app from Elviont Technologies. This policy covers the app, account service, account website and support. The current app requires an email account and valid access.

We do not sell personal data, use it for advertising, or track you across apps and websites. Data is used to operate and protect the service, administer access and respond to support requests.

Information we handle

Account and purchases

We store your email, salted password hash, account ID, sessions, verification and recovery records, purchases, payment references, package limits and expiry. For App Store purchases this includes the App Store transaction ID, product, purchase date, price and currency.

Usage

Account-linked uploaded and downloaded byte totals enforce package allowances. This metering record does not contain traffic content or browsing destinations. Uploads and downloads across both routes count toward the package allowance; the app displays each route’s local statistics separately.

IP address and country

Our servers and the network-check services listed below receive your IP address and request headers, as with any internet connection. The app does not look up your location from your IP address and does not request GPS location. The account website estimates your country from your IP address with a local database to choose a price currency. Security controls retain hashed rate-limit keys for their expiry window.

On your device

Connection history and preferences stay on the device. The network type shown on Home (for example Wi-Fi or mobile data) is read from iOS on the device and is not sent to us. Session tokens and VPN credentials use iOS Keychain. Notification choices are local; there is no remote push-token registration.

Support

We receive the email, message, attachments and diagnostics that you choose to send.

How information is used

We use account and usage information to authenticate users, verify email, recover accounts, confirm purchases, provision VPN access, enforce allowances and prevent abuse. Network checks show connection information and measure performance. Speed tests transfer data and use bandwidth.

The account website uses a locally stored DB-IP country database for regional prices. That lookup does not send your IP to DB-IP.

Storage and security

Account passwords are sent over HTTPS for verification and stored as salted hashes on the account server. The app saves its session token in Keychain. Diagnostics redact credentials.

The account website uses an HttpOnly session cookie to keep you signed in. Passwords and session tokens are not saved in browser local storage. Signing out revokes the current session.

These measures protect account access, but no network or storage system can guarantee absolute security. Keep passwords and VPN credentials private.

VPN and other services

Selected VPN servers process network traffic to provide the requested connection. Hosting providers operate the infrastructure. Microsoft 365 processes Atlas verification and recovery emails; Atlas uses its own sender and service configuration.

To measure latency, the app contacts Cloudflare while the VPN is disconnected and, while connected, the health-check address of the selected route through the VPN (currently Google’s connectivity check for the International route and Baidu for the China route). Speed tests that you start use Cloudflare. These services receive the connection IP address and standard request information and may keep operational logs under their own policies. Atlas does not send account details, purchase records or location lookups to them. The app does not use IP-geolocation services.

These service integrations support connection functions, not advertising. Review the current App Store privacy label together with this policy for declared collection.

Payments

In the app, packages are sold as App Store purchases and Apple processes the payment. Each purchase is linked to your Atlas account by an account identifier included in the purchase. Our server receives Apple’s signed transaction (transaction ID, product, purchase date, price and currency) and checks Apple’s signature before activating the package. We do not receive your Apple Account details or payment card. Apple notifies our server of refunds and revoked purchases, which end the related access.

On the website, payments use Stripe. When checkout is available, Stripe receives your email and the payment information you provide. Atlas Connect stores purchase status, amounts and transaction references, not your payment card details.

Payment confirmation activates purchased access. Package expiry, refunds and payment disputes are used to determine whether that access remains available. The price and duration are shown before you pay.

These privacy and support pages

These public information pages do not require an account and do not use advertising or analytics cookies, remote fonts or third-party scripts. Help search runs locally in your browser; your search text is not sent to a search service.

Hosting and network services may generate standard request logs when you visit. Following a link to the account website, Stripe or another service opens that service, where its own functionality and data handling apply.

Your choices and data requests

You can control optional notifications, change preferences and reset the VPN configuration. Signing out removes the local session and VPN profiles; it does not delete the account.

To delete an account, use Settings → Account → Delete account and confirm with your password, or contact support from the account email if you cannot access Settings. Deletion removes account and linked usage records from the active database and revokes access. Limited transaction-retirement records, backup copies pending rotation and independently retained payment-provider records may remain. Deletion does not automatically issue a refund. Refunds for App Store purchases are requested from Apple at reportaproblem.apple.com.

Account information is retained while needed to operate the account. Contact us for access, correction, deletion or details about retained records. Do not send passwords, VPN credentials or full payment-card details.