Skip to content
StarVPN

StarVPN documents

Privacy Policy

How StarVPN handles account, subscription, support, diagnostic, and service-security data.

StarVPN's privacy policy, written to meet Apple App Review Guideline 5.4 and common VPN privacy expectations.

  • Effective date: 2026-06-18
  • Last updated: 2026-08-28
  • Provider / data controller: DMD GROUP, MMC — "DMD GROUP" Məhdud Məsuliyyətli Cəmiyyəti, a limited liability company registered in Azerbaijan on 19.12.2024 (VÖEN 2008939081, D-U-N-S 933893438) ("StarVPN", "we", "us")
  • Director / authorized representative: Dadashov Rovshan Eldar oglu
  • Registered address: AZ1123, Baku, Khatai District, Xudu Mammadov St. 3, Apt. 70, Azerbaijan
  • Privacy / data-protection contact: legal@dmdmmc.com · +994 99 738 83 38 · https://dmdmmc.com/

1. Summary

StarVPN is a consumer VPN. We sell access to encrypted VPN servers through our website and supported app platforms. We do not log your browsing. We collect the minimum needed to run your account, deliver the service, keep it reliable, and bill you. We do not sell, rent, or share your VPN data with third parties for any purpose.

2. Our no-logs commitment

While connected to StarVPN we do not record:

  • the websites, domains, or services you visit;
  • your DNS queries;
  • destination IP addresses or SNIs of your traffic;
  • the contents of your traffic;
  • a history that maps your account to the sites/apps you used.

Our servers process this traffic in transit only to deliver it; it is not written to logs or retained.

3. Information we do collect

Account data. Email address (for email-code sign-in), account identifiers, and your subscription/entitlement state.

Device & connection data (operational). A per-device install identifier, device slot, platform (for example, Android or iOS), app version, chosen server location/protocol, and connection diagnostics: connect/disconnect events, latency and success/failure of connection attempts, and the node selected. These are used to operate, secure, and improve reliability — not to profile your activity. Where available and with your consent, coarse network context (e.g., ASN/ISP, client country) for regional quality. The app does not request GPS or precise coordinates. In the mobile apps, automatic connection-quality reports can be disabled in Settings without disabling local recovery behavior.

Subscription and payment data. We process the product and term, payment method, amount, currency, status, our order identifier, and the provider's transaction identifier. For website SBP payments, we send RollyPay the order and account identifiers, subscription description, amount, and return URLs. We do not receive or store bank-account details. For Apple in-app purchases, we receive the receipt/entitlement and renewal status, not the payment details of the Apple Account. For Google Play subscriptions, we receive the product, purchase token, order and subscription state needed to verify access, process refunds, and stop renewals. The Play purchase token is encrypted at rest. We do not receive payment-card or bank-account details from the user's Google Account.

Support data. Messages, metadata, screenshots you select, and full diagnostic reports you explicitly attach or send for support. StarVPN does not read your full photo library; the mobile operating system presents a picker for individual images.

4. How we use information and legal bases

  • Provide and operate the service, your account, and devices — *performance of a contract*.
  • Keep the service reliable and secure (admission, fair-use, quality, abuse prevention) — *legitimate interests / contract*.
  • Process subscriptions, referral rewards, and support — *contract / legitimate interests*.
  • Comply with law — *legal obligation*.
  • Automatic connection-quality reports — *consent*, withdrawable in the app's Settings. Full diagnostic reports, support messages, and screenshots are sent only after your explicit action.

5. Mobile VPN commitment

In line with mobile-store requirements for VPN apps, we do not sell, use, or disclose to third parties any data collected through the VPN for any purpose, and we make this commitment in this policy. Before the first connection, the mobile app explains that Android or iOS will route internet traffic through the selected StarVPN server and shows a data and privacy disclosure describing what we collect and why.

6. Sharing and subprocessors

We share personal data only with service providers ("subprocessors") that help us run StarVPN, under contract and only as needed:

  • cloud/edge server providers (the VPN infrastructure);
  • Apple (in-app purchase and app distribution);
  • Google (Google Play distribution, billing, and subscription-state verification);
  • RollyPay (website SBP payment creation and confirmation);
  • providers for transactional email and error monitoring.

We do not sell personal data. We may disclose data if required by valid legal process, but we cannot disclose traffic logs we do not keep.

7. International transfers

We operate servers in multiple countries. Where data is transferred across borders, we rely on appropriate safeguards (such as Standard Contractual Clauses or an adequacy decision).

8. Retention

We keep account and billing data while your account is active and as required for legal/accounting, refund, and fraud-prevention purposes, then delete or anonymize it. Automatic connection-quality events are retained for no more than 7 days; full diagnostic logs explicitly sent by a user are retained for no more than 30 days; and user-selected support screenshots are retained for no more than 180 days or deleted earlier with the account. We do not retain traffic logs because we do not create them.

9. Your rights and account deletion

Subject to your jurisdiction, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent. You can delete your account and personal data directly in the app (Settings → Delete account) or the account portal (Account → Delete account). Public instructions are available at https://starvpn.tech/legal/en/account-deletion. If you have an active Apple subscription, cancel it in iOS Settings because Apple billing continues independently. Before deleting an account with a known auto-renewing Google Play subscription, StarVPN asks Google to stop the next renewal; deletion does not complete if that request cannot be confirmed. Account deletion does not automatically refund a completed payment. To exercise other rights, contact legal@dmdmmc.com. You may also complain to your local data protection authority.

10. Security

We use encryption in transit, access controls, pinned credentials, and operational hardening. No system is perfectly secure, but we work to protect your data.

11. Children

StarVPN is not directed to children under 16, and we do not knowingly collect their data.

12. Changes

We may update this policy; material changes will be notified in-app or by email, and the "Last updated" date will change.

13. Contact

legal@dmdmmc.com · DMD GROUP, MMC, AZ1123, Baku, Khatai District, Xudu Mammadov St. 3, Apt. 70, Azerbaijan.