Privacy policy

Last updated: 25 October 2026

Who we are

The Fancy VPN app (“the app”) is operated by BAG-LAG, TOO, BIN 230340039627, Apt. 212, 10 Turkistan Street, Yesil District, Astana 010000, Kazakhstan (“we”). If you have questions about this policy, write to us at aibek.lukpanov@mail.ru.

What the app needs to work

Device key. When you first connect, the app creates an encryption key on your phone. Its public part is sent to our server, which assigns your device an internal VPN address. We store the public key, that address and the registration date so your device can connect. The private part of the key never leaves your phone. Each server you choose (Germany or the United States) registers the key separately.

Free ad-free days. The first 10 days after you install the app are free of ads. To count them, the app sends our server a one-way hash (SHA-256) of your device’s Android ID; the Android ID itself is never sent. We store this hash and the date you first opened the app, so that reinstalling the app does not restart the 10 days.

We do not record the websites you visit, your DNS requests or the content of your traffic. Our registration server does not keep logs of IP addresses. While you are connected, the VPN server holds your current connection address in memory only to deliver your traffic; it is not written to logs.

Settings stored on your phone

Some settings stay only on your device, such as the ad-free timer after watching an ad and your subscription status. They are deleted when you clear the app’s data or uninstall it.

Subscription and payments

Subscriptions are processed by Google Play. We receive only the status of your subscription (active or not). We never see your card details.

Advertising

The free version shows ads provided by Google AdMob. To show and measure ads, Google may collect your device’s advertising ID, device information and approximate location based on your IP address. This is governed by Google’s policy: https://policies.google.com/technologies/ads. You can reset or delete your advertising ID in your Android settings. Subscribers do not see ads.

DNS

While you are connected, the app uses Cloudflare’s public DNS service (1.1.1.1) to resolve website addresses. Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/.

Who we share data with

We do not sell your data. Data is processed only by the services needed to run the app: Google (payments and ads), Cloudflare (DNS) and our hosting provider Vultr (servers in Germany and the United States). We disclose information to authorities only when required by the law of the Republic of Kazakhstan, and we can only disclose what we actually store.

How long we keep data

We keep your device key, VPN address and the ad-free days record while you use the service. To delete them, write to aibek.lukpanov@mail.ru and include the device key shown in the app, or simply stop using the app and ask us to delete your data.

Children

The app is not intended for children under 13, and we do not knowingly collect their data.

Changes to this policy

If we change this policy, we will publish the new version on this page and update the date above.