LENA VPN Privacy Policy

LENA VPN is operated by LENA LLC ("LENA", "we", "our", or "us"). Your privacy is fundamental to the design of LENA VPN. This Privacy Policy explains what information LENA collects, what information it does not collect, how information is used, and the choices available to you when using the LENA VPN application and related services.

By using LENA VPN, you acknowledge this Privacy Policy.

1. Our VPN Privacy Commitment

LENA VPN is designed according to a data-minimization principle.

We do not monitor, record, or store the content of your internet traffic while you are connected to the VPN.

We do not intentionally collect or retain:

• Your browsing history;
• The websites or domains you visit;
• The content of your internet communications;
• DNS queries made through the VPN;
• The destination IP addresses of websites or services you access;
• The content of files transmitted through the VPN;
• The applications or services you use while connected to the VPN;
• Your VPN traffic content;
• A permanent record of the websites or online services accessed through the VPN.

LENA does not use VPN traffic data for advertising, profiling, marketing, or behavioral tracking.

2. Information We May Process

Device and Application Information

The application may process technical information such as:

• Device type and operating system version;
• Application version;
• Language and regional settings;
• Application configuration;
• A randomly generated application or installation identifier;
• Technical information required to establish and maintain a VPN connection.

These identifiers are used for service operation, security, diagnostics, and abuse prevention and are not intended to identify you personally.

Account or Service Information

If an account or authentication mechanism is used, LENA may process information necessary to associate your application with the appropriate service entitlement.

• A service or account identifier;
• Subscription or service status;
• Account-related technical information;
• Information you voluntarily provide when contacting support.

Customer Support

If you contact LENA support, we may receive information that you voluntarily provide, such as:

• Your email address;
• Your name, if you provide it;
• The content of your support request;
• Attachments or other information that you voluntarily send to us.

We use this information only to respond to your request, troubleshoot problems, and provide customer support.

Notifications

If you allow notifications, they are delivered through Google Firebase Cloud Messaging. You can turn them off anytime in your device settings.

3. VPN Connection Information

LENA is committed to minimizing VPN connection information.

LENA does not intentionally maintain logs containing:

• The websites or domains accessed through the VPN;
• DNS queries;
• VPN traffic content;
• Destination addresses associated with your browsing activity;
• The content of communications transmitted through the VPN;
• Detailed browsing activity.

Technical information that is temporarily required to establish, maintain, secure, or troubleshoot a VPN connection may be processed as necessary for the operation of the service.

Where technical information is retained for operational or security purposes, it is limited to what is reasonably necessary and is not used to reconstruct a user's browsing history.

4. Analytics and Crash Diagnostics

LENA may use technical analytics and crash-diagnostic services to understand application errors, improve reliability, and identify technical problems.

Where such services are enabled, they are configured to minimize the information transmitted and are not used by LENA to monitor or record VPN traffic, browsing history, DNS queries, or the content of communications.

Analytics and diagnostic information may include:

• Application version;
• Operating system version;
• Device model;
• Crash information;
• Diagnostic information;
• General application usage information;
• A technical installation or application identifier.

Analytics and crash information is not used by LENA to determine which websites or online services you access through the VPN.

5. Advertising

LENA VPN may display advertising in versions of the application that include advertising.

Advertising is separate from the operation of the VPN tunnel.

LENA does not provide advertisers with:

• VPN traffic;
• Browsing history;
• DNS queries;
• Destination websites;
• VPN traffic content;
• Information about the websites or services accessed through the VPN.

We use Google AdMob to show ads. Learn how Google uses information: https://policies.google.com/technologies/partner-sites

Where advertising services are used, the application may use advertising technology provided by third-party advertising providers. Any such technology is subject to the applicable configuration, platform privacy controls, and the provider's own privacy documentation.

LENA does not use VPN traffic information to create advertising profiles.

For iOS, LENA intends to use privacy-preserving advertising configurations where supported and appropriate.

6. Information We Do Not Sell

LENA does not sell personal information.

LENA does not sell:

• VPN traffic information;
• Browsing history;
• DNS queries;
• Destination information;
• VPN traffic content;
• Account information for advertising purposes;
• Personal information for data-broker purposes.

We do not operate a business model based on selling users' VPN activity or browsing information.

7. Third-Party Service Providers

LENA may use limited third-party infrastructure and technology providers to operate the application and related services.

Examples may include:

• Cloud and hosting infrastructure;
• Authentication and backend infrastructure;
• Crash reporting and diagnostics;
• Application analytics;
• Advertising technology, where applicable;
• Email or customer-support infrastructure.

These providers receive only the information necessary for the specific service they provide and are not authorized by LENA to use VPN traffic data for their own purposes.

LENA does not sell, rent, or disclose VPN traffic data, browsing activity, DNS queries, or the content of VPN communications to third parties.

Where a third-party technology provider independently processes technical information through its SDK or service, that processing is limited to the purposes for which the technology is integrated and is subject to the provider's applicable privacy terms.

8. Data Security

LENA uses reasonable technical and organizational measures to protect information processed through its services.

• Encryption of communications;
• Access controls;
• Restricted access to service infrastructure;
• Secure authentication mechanisms;
• Monitoring for unauthorized access and abuse;
• Security updates and infrastructure maintenance.

No internet service can guarantee absolute security. However, LENA takes reasonable steps to protect the information it processes.

9. Data Retention

LENA follows data minimization and retention principles.

Information is retained only for as long as reasonably necessary for the purpose for which it was collected, including:

• Operating the service;
• Providing customer support;
• Maintaining security;
• Diagnosing technical problems;
• Complying with applicable legal obligations.

VPN traffic and browsing activity are not retained for the purpose of creating a historical record of a user's internet activity.

10. Legal Requests

LENA may be required to respond to valid legal obligations, such as legally binding requests from competent authorities.

LENA can only provide information that it actually possesses and is legally permitted or required to disclose.

Because LENA does not intentionally maintain records of users' VPN browsing activity, traffic content, or DNS queries, such information is not available to us as a historical activity record.

11. International Data Processing

LENA and its infrastructure providers may operate systems in multiple countries.

Where information is processed internationally, LENA takes reasonable steps to protect that information in accordance with applicable privacy and data-protection requirements.

12. Children's Privacy

LENA VPN is not specifically directed toward children.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe that a child has provided personal information to LENA without appropriate authorization, please contact us so that we can review and take appropriate action.

13. Your Privacy Choices

Depending on your jurisdiction, you may have rights regarding your personal information, including rights to:

• Request access to information associated with you;
• Request correction of inaccurate information;
• Request deletion where applicable;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent;
• Request information about our data practices.

To make a privacy request, contact us using the information below.

14. Advertising and Tracking Choices on iOS

LENA respects Apple's privacy controls.

Where applicable, LENA will follow Apple's requirements concerning advertising identifiers, tracking permissions, and privacy choices.

You may also control certain advertising and tracking permissions through your iOS device settings.

LENA does not require tracking permission in order to establish or operate the VPN connection unless a particular feature explicitly requires such permission and the appropriate consent is obtained.

15. Changes to This Privacy Policy

We may update this Privacy Policy when necessary to reflect changes to our services, technology, legal requirements, or privacy practices.

When we make material changes, we will update the "Last Updated" date at the top of this policy and, where appropriate, provide additional notice.

Your continued use of LENA VPN after an updated Privacy Policy becomes effective constitutes acknowledgment of the updated policy.

16. Contact Us

17. Our Commitment

LENA VPN is built around the principle that a VPN should not become a source of surveillance of its users.

We therefore commit to:

• Minimize the information necessary to operate LENA VPN;
• Not monitor or record users' VPN traffic;
• Not sell users' VPN data;
• Not use VPN activity to build advertising profiles;
• Not disclose VPN traffic data to third parties for advertising or profiling;
• Protect information that we are required to process to operate the service;
• Be transparent about changes to our privacy practices.

LENA LLC
Last Updated: September 26, 2026