Privacy Policy

Last updated: 13 June 2026

This Privacy Policy describes how the OpenConnect Android application ("the app", "we", "us") handles information. We built OpenConnect to be a private, focused VPN client. We do not sell your data, and we do not log or inspect the traffic that passes through your VPN tunnel.

The short version: Your VPN credentials and server profiles stay on your device. Your browsing traffic is never routed to us or recorded. We use standard Google services for crash reporting, anonymous analytics, push notifications, and advertising, as described below.

1. Information stored on your device

VPN server profiles — server addresses, usernames, protocol settings and related preferences you enter are stored locally on your device so you can reconnect. They are not transmitted to us.
Credentials & tokens — any passwords, certificates, or RSA SecurID tokens you provide are used only to authenticate with your chosen VPN gateway and remain on your device.

2. VPN traffic

OpenConnect establishes an encrypted tunnel directly between your device and the VPN gateway you configure. We operate no VPN servers and act as no intermediary. We do not monitor, store, or share the contents, destinations, or timing of your network traffic.

3. Information processed by third-party services

To keep the app reliable and free, we use the following Google services, which may process limited data in accordance with Google's own privacy policies:

Firebase Crashlytics — collects anonymized crash reports (device model, OS version, stack traces) so we can fix bugs.
Firebase Analytics — collects aggregated, anonymous usage statistics (e.g. screen views, feature usage) to help us improve the app.
Firebase Cloud Messaging — used to deliver optional service announcements. It does not access your traffic.
Google AdMob — displays advertisements to support development. AdMob may use an advertising identifier to serve and measure ads. See Google's Ads Privacy for details.

4. Advertising identifier

The app uses the Android Advertising ID (AD_ID) solely so that Google AdMob can serve and measure advertisements. You can reset or limit this identifier at any time in Android Settings → Privacy → Ads.

5. Permissions

VPN service — required to create the secure tunnel.
Network state — to detect connectivity changes and auto-reconnect.
Notifications — to show the ongoing VPN status and optional announcements.
Query installed apps — used only to populate the per-app split-tunnel list on your device; this list is not transmitted.

6. Children

OpenConnect is not directed to children under 13 and we do not knowingly collect personal information from them.

7. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

8. Contact

Questions about this policy? Email us at [email protected].