AliHapp privacy policy

1. What we keep

When you make an account: your email, your password (only as a one-way hash), and, if you add them, your name and mobile number.

If you sign in with Google: your email, your name and an internal ID Google gives us. Your Google password never reaches us.

If you sign in with or link Telegram: your Telegram ID and name, so your website, app and bot accounts are one.

Purchases and account: your services, wallet balance, transactions, and the tickets and messages you write to support.

2. Technical and security data

To keep your account safe we keep the IP address and the browser or device details of each sign-in, so you can see and close signed-in devices and we can spot suspicious attempts.

A sign-in cookie (session) is stored on your device; it expires after 30 days without use. Signing out closes that device.

3. On the website

To improve the website we record simple events such as the pages you see, the plans you look at and the steps of a purchase. They are used only to improve the website and for support, and are never sold.

We use Google Analytics for overall visit statistics. It sets an analytics cookie and records the pages you see, the type of device and the approximate country; your name, email and account details are not given to it. We use no advertising tools.

4. The Android app and the VPN

Your internet traffic: when you connect with the app or our configurations, we do not record or keep the websites and apps you use or the content of your traffic. We record only how much data each service has used and when it was last connected, to count your service’s volume and dates.

App reports: the app sends a short report when it opens and every few minutes: a random ID for this installation, the app version, the phone model and Android version, the phone’s language, the network type (Wi-Fi or mobile data) and the carrier name, whether it is connected and to which country, and the IP address. From the IP address we work out the carrier and your approximate city. The reports are used to find connection problems, to deliver in-app messages and to prevent abuse.

Phone identifier: so that the sign-up gift is given only once per phone, the app sends a one-way code (hash) of the phone’s Android ID, and we keep only a second hash of that code. The Android ID itself never reaches us and cannot be worked out from the code.

Location: the Google Play version does not ask for the phone’s location; the map shows only your country, worked out from the IP address. In the version installed from our website, only if you allow it, the app uses the phone’s approximate location to show your city on the map, never the precise location and never in the background; that version’s report carries only the city name and rounded coordinates (about 10 km).

Usage statistics: connected time, total data, the number of successful and failed connections and the reasons for errors, to find server problems. You can turn them off in Settings → “Send usage stats”.

Support log: sent only when support asks for it and you agree in the app.

Camera and app list: QR codes are scanned on the phone itself and no image is sent. The list of apps you choose to keep outside the VPN stays on your phone.

5. What it is used for

Making and running your account, delivering your services, answering tickets, sending sign-in codes and service notices (such as order results and support replies), and keeping things secure.

We do not send unnecessary emails. You can turn email and Telegram notices off in your account’s Profile.

6. Who it is shared with

We do not sell your data. To provide the service we work with a few partners: an email service to send messages, Google for Google sign-in and visit statistics (Google Analytics), Telegram for the bot and notices, payment gateways and wallets to receive payments, and infrastructure companies such as Cloudflare to deliver the website.

If the law requires it, we may have to hand over part of the data.

7. How long we keep it

As long as your account is active. Financial records and transactions may be kept longer for accounting and to settle disputes.

App reports are kept for overall statistics, and the app’s error events are deleted after 45 days. When you delete your account, your phone’s reports are no longer linked to it.

8. Your rights

In your Profile you can see and change your name and number and close your devices.

You can delete your account yourself in the app (Settings → “Delete account”) or in your account settings on the website; the details are on the account deletion page (alihapp.com/en/account-delete).

To get a copy of your data, open a ticket from the support section of your account; it is handled once we have confirmed it is you.

9. Changes to this policy

If this policy changes, the new version is published on this page with a new date.