Privacy policy

Scope

This policy covers the free iOS app and its account and VPN service, operated by LAKELAND PERIODONTICS, INC.

What we collect and why

Account: your email address, password hash and optional nickname for registration and account security. Your password is sent over HTTPS for authentication; the account database stores a hash.

Device: an app-generated identifier, platform, device description, app version and session timestamps to manage sign-in and the device limit.

VPN access: the service creates a random VPN username and password for your device. These are separate from your app password. The app saves the VPN password in iOS Keychain so the built-in IKEv2 VPN can connect. Our account and VPN servers handle these credentials to authorize access.

Usage: the VPN server measures uploaded and downloaded bytes. We store usage totals and remaining allowance to enforce limits. Account and usage totals also support internal service statistics and capacity planning.

Support: the feedback and related app or device information you choose to send.

Network: our API and VPN servers process network addresses and connection information to provide and protect the service. Operational and security logs may record requests, connection events and errors. We do not claim that no logs exist.

VPN data

The server you select carries your VPN traffic. The IKEv2 service records connection and usage information, not a list of sites you visit. We do not sell VPN user data or disclose it to third parties for any purpose. We do not use it for advertising. The app has no advertising or cross-app tracking SDK.

Storage and deletion

Account information and cumulative usage totals are kept while your account is active.

VPN credentials are valid for no more than 7 days. When a credential expires or is revoked, its password and associated sign-in token are cleared from the active credential record. Related credential and connection-usage records are retained for up to 6 more days to reconcile delayed or repeated usage reports, then removed by scheduled cleanup. These technical records remain within the 14-day limit.

Infrastructure operational and security logs are retained for up to 14 days. Restricted database backups are kept for up to 30 days. Older VPN warning and error logs may include network addresses and destination hostnames. The restricted recovery copies created during the September 26, 2026 retention update expire within 30 days of that update. We have not claimed that all historical browsing metadata has already been deleted.

In Account → Delete account, confirm your current password to permanently delete your active account, sign-in sessions, device records, VPN credentials, usage records, feedback and verification records. VPN access is revoked. Historical accounting totals from other services, where present, are de-identified. Restricted backup copies expire under the schedule above.

A minimal account identifier and deletion timestamp remain in the live deletion record for up to 31 days to prevent deleted accounts from returning after a restore. Backup copies expire with their backups. A restored database must be checked against current deletion records before the service reopens.

Server-side account activity statistics

For internal service statistics and capacity planning, the server records successful account sign-ins, successful creation or recovery of a valid guest session, and valid device heartbeats, including guest accounts. Repeated activity from the same account and multiple devices counts once per Beijing calendar day. This is not a count of connected VPN users and does not record visited sites or communication content.

Activity facts contain a random statistical identifier, an activity date and the first successful activity time that day, not email addresses, device identifiers, IP addresses or sign-in credentials. While the account exists, the server keeps an account-to-statistical-identifier mapping for deduplication.

Exact-date facts are retained for the latest 90 Beijing calendar days, including today. Under normal operation, expired facts are physically removed within one hour. If cleanup is delayed by a fault, new collection stops while the backlog is handled. Account deletion immediately removes the mapping. Unlinked facts may remain and be linked across dates within that retention period; they are not fully anonymous. Daily totals without statistical identifiers are kept long term. This is a separate dataset from the operational and security logs subject to the 14-day limit above. Restricted backups still expire within 30 days and follow the restore deletion safeguards above.

This server-side operational statistic is separate from optional installation behavior analytics in clients that provide that feature. Turning off or clearing installation analytics does not disable this account activity statistic. We do not turn that switch back on or restore cleared installation events. We do not sell this activity data, disclose VPN user data to third parties, or use it for advertising profiles or browsing-content analysis.

Collection starts only when enabled, without backfilling earlier activity. Reports identify gaps rather than present incomplete observations as complete counts. You can use the privacy contact below for data-rights requests.

Your choices and contact

You can disconnect VPN, stop using the service, update your nickname or password, and delete your account. If you disagree with this policy, do not continue to use the service.

Use Account → Feedback or email okpay123@proton.me for support or privacy questions. Do not send passwords, verification codes or private browsing content.