What we log, and what we don't.

We never log your activity

These are the things that make a VPN worth using, and we don't record any of them:

• The websites or apps you visit, or your DNS lookups.
• What you stream, download, or search.
• Your traffic content, of any kind. It's encrypted end-to-end through the tunnel and never inspected.
• A browsing history tied to you. There isn't one to hand over, and nothing to sell.

What we do keep, and why

Running the service honestly needs a small amount of operational data. It is not a record of what you do online. We keep it minimal and delete it quickly:

• Your account:email and login details, so you can sign in. Kept while your account is open.
• Minimal connection metadata:session start/stop times and the total amount of data moved, used only for capacity planning, fraud prevention, and fair-use. No destinations, no content. Row-level records are deleted after 30 days and only anonymous totals remain.
• Billing records:if you subscribe, we keep what UK tax law requires (payments are handled by Stripe; we don't store your card).
• Security events:short-lived records of things like failed logins to stop abuse, kept minimal.

The free tier is honest about how it works

ROOT VPN is free to start because you can choose to share a little idle bandwidth with our Server-Secured P2P Network, in exchange for premium features. When you opt in, your device can act as a residential exit for other users, but every connection still routes through ROOT's own servers first, where it is encrypted, whitelisted and filtered. No device ever carries raw traffic, and no user connects straight to another user's device, the server is always the hub. This is the difference from a network like Hola, which ran hidden and routed unchecked traffic straight between strangers, with no consent and no control. Sharing is off by default, only runs on the conditions you set (like Wi-Fi and while idle), and you can turn it off in one tap. We never share your data or files, only spare bandwidth you choose to give, and when it is enabled your connection helps carry allow-listed traffic for others, including verified business customers. How that bandwidth is used is set out plainly in the Bandwidth Sharing Terms. Read them before you decide.

On the words "no logs"

Plenty of VPNs say "no logs" as an absolute. We prefer to be precise: no activity logs. We're commissioning an independent audit of our logging practices, and until that's published we'll keep our wording exact rather than sweeping. When the audit is done, we'll link it here.

Your data, your rights

You can ask for a copy of your data, correct it, or have it deleted. Deleting your account removes your personal data (except anything a legal obligation, like tax, requires us to keep). Contact privacy@rootvpn.app.

This page describes our intended practices for launch and will be kept current. It isn't a contract, the Privacy Policy is.