Privacy, Security & Confidentiality

1. Company identity and scope

IonixVPN is developed and operated by Lines Stone LLC. In this notice, "IonixVPN," "we," "us," and "our" refer to Lines Stone LLC and the IonixVPN service. This notice applies to the IonixVPN Android application, the IonixVPN website, account support, subscriptions, and the VPN infrastructure used to provide the service.

This notice does not control the independent practices of Google Play, Stripe, your internet provider, websites you visit, apps you use, or other third parties. Their own terms and privacy notices apply to information they process.

2. Information we process

Information you provide

• Account information, such as name, email address, country, language, hashed account credentials, email verification status, and your acceptance of required terms or disclosures.
• Subscription and billing status, plan, provider, provider customer or subscription identifiers, transaction status, and entitlement dates. We do not receive or store full payment-card numbers from Stripe or Google Play.
• Messages and information you choose to send when requesting support, exercising a privacy right, or requesting account deletion.

Device, locale, subscription, and support information

To operate accounts and sessions, we may process a device identifier generated for the app, device name, brand, model, operating system and version, app version, platform, time zone, language, country, push-notification token, session status, and timestamps associated with account or device activity. Support communications may contain technical information you choose to provide.

VPN operational metadata

When a VPN peer is provisioned or used, IonixVPN processes the selected VPN server, assigned internal VPN address, WireGuard public key, peer status, creation and connection timestamps, disconnection time, last handshake time, activity and cleanup status, and aggregate bytes transferred and received. This information supports secure peer provisioning, device limits, connection history, diagnostics, abuse prevention, and peer removal.

Speed-test information

If you run a quality or speed test, we may process latency, jitter, packet loss, download and upload speed, computed quality score, test time, server region or country, and the public IP address reported during the test. Speed-test records are associated with your account so that results can be shown in the app and used for service diagnostics.

3. VPN traffic processing and Android permissions

IonixVPN uses Android's VpnService and WireGuard to create an encrypted tunnel between your device and an IonixVPN server. When connected, network packets selected for the tunnel must be processed transiently to route them to and from their destinations. This processing is necessary to provide the VPN connection you request.

The Android app uses internet and network-state access, Wi-Fi state, foreground-service capability, notifications where required, and the Android VPN permission. Wi-Fi permissions may be requested to recognize a trusted network name. The app can query launcher-visible installed apps so you can choose apps for split tunneling. Billing permission is used for Google Play subscriptions.

The IonixVPN application is designed not to intentionally log or retain your browsing history, visited destination list, traffic content, or DNS-query content as account records. Standard infrastructure components may generate limited availability, security, or error records. Those records are not intended to record browsing activity and are limited and protected according to operational need.

4. Information designed to stay on your device

Trusted Wi-Fi names (SSIDs), the launcher-visible installed-app list, and your excluded-app selections are stored locally on your Android device for trusted-network and split-tunneling controls. IonixVPN does not upload these lists to our account servers as part of their normal operation.

Local information can be removed by changing the related app setting, using the in-app account-deletion process, clearing app storage, or uninstalling the app. Android, device-backup tools, or other software outside our control may handle local data under their own settings. IonixVPN disables Android app backup for its application data.

5. Purposes and legal bases

We process information for the following purposes:

• To create and secure accounts, verify email, authenticate sessions, provision VPN peers, connect devices, enforce plan limits, and provide subscriptions.
• To deliver requested features, including connection history, Smart Connect, speed tests, support, and account deletion.
• To maintain reliability, prevent fraud and abuse, investigate security incidents, troubleshoot errors, and protect users and infrastructure.
• To comply with lawful obligations, resolve payment disputes, enforce applicable agreements, and establish or defend legal claims.

Depending on your location and the processing involved, our legal basis may be performance of our contract with you, your consent, compliance with a legal obligation, or our legitimate interests in operating and securing the service. Where we rely on consent, you may withdraw it for future processing, although withdrawing VPN-processing consent means we cannot initiate a VPN connection.

6. Service providers and disclosures

We use providers that process limited information for specific business functions. They may include:

• Google Play for Android distribution, subscription purchases, renewals, cancellation, and entitlement verification.
• Stripe for payment processing, billing, subscription management, fraud tools, and payment records.
• Resend for account, verification, support, and deletion-confirmation email.
• Hosting and VPN infrastructure providers for application hosting, databases, networking, encrypted VPN endpoints, monitoring, security, and backups.
• Content delivery and website providers that deliver public website assets and protect site availability.

Providers receive information only as needed for their functions and process it under their own legal obligations and agreements with us. We may also disclose information when required by valid legal process, to protect rights or safety, during a corporate transaction subject to appropriate safeguards, or with your direction.

No sale, behavioral advertising, or application analytics

IonixVPN does not sell personal information and does not share it for cross-context behavioral advertising. The IonixVPN app does not currently integrate an application analytics or advertising SDK. If these practices change, we will update this notice and provide any choice required by law before the new practice applies.

7. Retention and account deletion

We retain information only for as long as reasonably necessary for the purposes described in this notice, including providing an active account or VPN peer, maintaining security and reliability, resolving disputes, and meeting legal, tax, accounting, or payment obligations. The appropriate period depends on the data type, account status, sensitivity, risk, operational need, and applicable law.

You can request deletion through the app or our public Delete Account page. After confirmation, account access and VPN service end, sessions are invalidated, renewal cancellation is requested from the applicable provider, and user-linked service records are scheduled for deletion. External cancellation and VPN cleanup may continue in a restricted retry state if a provider is temporarily unavailable.

Account deletion does not itself create an automatic refund. Refund rights and retained transaction records are governed by the payment provider, applicable law, and the circumstances of the transaction. Minimal records may remain where reasonably required for payment disputes, fraud prevention, security, legal compliance, or the establishment or defense of claims. Stripe, Google, banks, or other independent providers may keep their own records under their policies and legal duties.

If service backups contain information scheduled for deletion, that information may remain inaccessible until the relevant backup is overwritten under the applicable operational cycle. Backup media is used for security and continuity, not active account access. Restoring a backup does not reinstate a deleted account for login.

8. Security and confidentiality

We use reasonable technical and organizational safeguards appropriate to the nature of the service. These include encrypted network transport, hashed account passwords and confirmation tokens, session controls, access restrictions, service separation, protected VPN keys, provider access controls, and procedures for revoking VPN peers and responding to incidents.

Personnel and service providers should access personal information only for authorized operational, security, support, or legal purposes. We review safeguards as the service changes. No method of storage, transmission, VPN tunneling, or access control is completely secure. We therefore cannot promise invulnerability, perfect confidentiality, uninterrupted availability, or protection against every attack or device compromise.

You can help protect your account by using a unique password, keeping your device and app updated, securing your email account, and contacting us promptly if you suspect unauthorized access.

International processing

IonixVPN and its providers may process information in countries other than the country where you live. Privacy laws may differ across locations. Where required, we use contractual or other lawful safeguards for international transfers and apply the protections described in this notice.

9. Your privacy rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also have a right to withdraw consent and to complain to a privacy regulator.

Send a request to info@linesstone.com or use the account-deletion controls. We may need to verify your identity and authority before completing a request. We will respond within the time required by applicable law. Some requests may be limited where an exception applies, including security, fraud prevention, the rights of others, legal obligations, or legal claims. Authorized agents may submit requests where permitted, subject to verification.

10. California privacy and browser signals

California residents may have rights to know, access, correct, delete, and receive information about categories of personal information, sources, purposes, and disclosures. IonixVPN does not sell personal information or share it for cross-context behavioral advertising, so we do not provide a sale or sharing opt-out mechanism for those activities.

Because the public website and app do not currently use cross-context behavioral advertising, Global Privacy Control and Do Not Track signals do not change those practices. Browsers do not provide a single, universally accepted Do Not Track standard. If our practices change in a way that makes a legally recognized signal applicable, we will honor it as required and update this notice.

We will not discriminate against you for exercising a privacy right, although some information is necessary to provide an account or VPN connection.

11. Children

IonixVPN is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and take appropriate action. Higher age thresholds may apply in some locations for consent-based processing.

12. Policy changes and contact

We may update this notice to reflect changes in the service, technology, providers, or legal requirements. We will post the revised notice at this public URL and update the effective date. If a change is material, we will provide additional notice or request consent when required by law.