FreeSky

Privacy Policy

Last updated: 19 August 2026

FreeSky VPN (“we”, the “Service”) respects your privacy. This Policy explains what data we process when you use the app and website, why, and on what legal grounds.

By using the Service you agree to your data being processed as described below; if you do not agree, do not use the Service.

The Service is operated by, and the controller of your personal data is, Arkona Development LLC, a company registered in the Republic of Armenia; address: 3 Hakob Hakobyan St., Yerevan 0033, Republic of Armenia. You can reach us about data processing at support@freesky.app — we answer in Russian and English.

Data is processed outside the Russian Federation. We do not store personal data on servers in Russia and do not localise it under Russian Federal Law No. 152-FZ. Processing is carried out in accordance with the personal-data protection law of the Republic of Armenia and follows the principles of the EU General Data Protection Regulation (GDPR).

1. What data we process

Device identifier. On first launch, the app generates an anonymous device identifier (device_id, a UUID) and stores it in the device’s secure storage. It lets you use the Service without registration.

Account data (Premium only). For Premium you create an account with an e-mail address and a password; the address is confirmed with a code sent by e-mail. We store the password only as an irreversible hash. No registration is required for the free tier.

Google Sign-In. If you sign in with a Google account, we store your Google account’s permanent identifier (the sub claim) and the e-mail address Google provides. No password is created in that case. The identifier is what recognises your account on the next sign-in: an address can be changed on Google’s side, the identifier cannot.

Telegram identifier. Premium is purchased through a Telegram bot, so we store your Telegram account’s numeric identifier and link it to your account. This is what lets the bot show your subscription status, credits a payment to the right account, and makes support requests work. We neither request nor store your phone number or Telegram username.

VPN session data. To run the connection we process: the chosen server and protocol, your device’s public key, the assigned internal VPN network IP address, and the session start time, end time and duration. Your encryption private key is generated on your device and is never sent to us.

Rewarded-ad data. On the free tier, access is unlocked by watching an ad. To show ads we use the CAS.AI (CleverAdsSolutions) ad network; the ad SDK may collect advertising identifiers in line with its own policy.

Payment data. Premium is paid through a Telegram bot and payment providers. Card data is handled by the providers — we do not store it and have no access to it.

Push tokens. If you allow notifications, we store a push token (Firebase Cloud Messaging) to send service messages (for example, subscription expiry).

Technical data. For stability and security we may process technical information: device type, OS and app version, and error diagnostics.

Network operator (ASN). When you attempt to connect, we determine your internet provider’s autonomous system (AS) number and store only that — for example, to see that subscribers of one operator cannot reach a particular server, and move them to a working one. The lookup runs on our side against a local database; the IP address itself is not stored and is not linked to your activity.

Website analytics. On the website we use our own self-hosted, cookieless analytics: anonymous visit statistics (pages, referrer, country, device type). We do not store IP addresses and do not share this data with third parties.

Launch waitlist. If you leave your e-mail in the site form, we store it (and optionally your Telegram username) to notify you once when the service launches. You can opt out by emailing support@freesky.app.

2. What we do NOT do

3. Why we process data

To provide and maintain the VPN; to unlock a free session for watching an ad; to activate and renew Premium; to send service notifications; to ensure security and prevent abuse; and to comply with the law.

Performance of a contract (providing the Service), your consent (ads, notifications), legitimate interests (security and improving the Service), and compliance with legal obligations.

5. Third parties

We engage processors only to the extent needed to run the Service:

If we add other payment providers, this list will be updated before we start accepting payments through them.

Each processor handles data under its own privacy policy.

We provide the Service for lawful use only (see the Terms of Use). We do not carry out user identity verification (KYC) and do not keep network-activity logs, so the amount of data we hold is minimal. Premium payments are handled by third-party payment providers and Telegram — they are the parties that apply their own anti-money-laundering (AML) and know-your-customer (KYC) procedures to payments; we do not handle funds and have no access to card data.

We may disclose the data we hold only in response to a valid, lawful request from a competent authority of an appropriate jurisdiction, and only to the extent required by applicable law. We may suspend or terminate access where the Service is used for unlawful purposes.

7. Security measures

We apply technical and organisational safeguards: connections to our servers and website are encrypted (TLS); passwords are stored only as irreversible hashes; access tokens are stored as hashes and expire; server access is key-based and granted only to those who need it; your VPN encryption private key is generated on your device and never sent to us.

That said, no method of transmission over the Internet and no storage system can be considered absolutely secure. We cannot guarantee unconditional security, but we undertake to notify you and the competent supervisory authority of an incident affecting your personal data, within the time and manner required by applicable law.

8. Retention and deletion

Account and session data are kept while your account is active and for the periods required by the processing purposes and the law. Detailed connection records are deleted once they have been folded into anonymous daily statistics, which retain no link to an account. Access tokens are stored as hashes and are transient. You can request deletion of your account and related data by emailing support@freesky.app.

9. Your rights

You may request access to your data, its correction or deletion, restrict or object to processing, and lodge a complaint with a supervisory authority. To exercise your rights, contact us.

10. Children

The Service is not intended for anyone under 16; we do not knowingly collect their personal data.

11. Changes to this policy

We may update this Policy. The current version is always available on this page; the last-updated date is shown at the top.

12. Cross-border transfers

The data controller is a company registered in the Republic of Armenia, while the Service’s infrastructure (application servers and VPN nodes) is hosted with providers in the European Union. Your data may therefore move between Armenia and EU countries. Transfers are limited to what running the Service requires and are covered by the safeguards described in §7.

13. Contact

For questions about personal-data processing, and to exercise the rights listed in section 8, write to us at the e-mail address above.