POLICIES
Privacy
How service information is handled, including the data-use scope for different distribution channels.
Privacy Policy
Last updated: September 11, 2026
This Privacy Policy explains how Nexbridge Global Inc. handles information associated with Global Villager VPN.
Information We Collect
We may collect account information such as your name, email address, subscription status, transaction references, and information necessary to operate and secure the service.
Payments
Payments are processed by third-party payment providers. We do not directly store complete payment card details submitted through their checkout systems.
How We Use Information
Information may be used to provide the service, manage subscriptions, provide customer support, prevent abuse and fraud, maintain security, and comply with legal obligations.
Data Sharing
For the Mac App Store version, the Mac App Store VPN data-use section below governs data sharing instead of this general section.
We may share information with service providers when necessary to operate the service, process payments, maintain infrastructure, provide support, or comply with applicable law.
Security
We use reasonable administrative and technical safeguards designed to protect information under our control.
Your Choices
You may contact us regarding questions about your personal information or this Privacy Policy.
iPhone and iPad VPN data use
Updated: October 16, 2026. This section explains data handling for the iOS App Store version.
Information and purposes
We process your GV account name and bound email, protected login credentials, installation identifier and device name, device registration and last-online status, subscription status and service dates. These records support sign-in, account recovery, VPN access, your three-device allowance and consistent access across devices.
For Apple subscriptions, we process transaction and original-transaction identifiers, product, purchase and expiry dates, transaction environment, verification and revocation status, and a GV account-binding token. These records verify purchases, restore access, reconcile service time and prevent duplicate or incorrect grants. Apple handles payment authorization; GV does not receive your Apple ID password or full payment-card details.
Limited operational and security information can include connection state, selected region, timing, error categories, and server access metadata such as source IP address, request path, timestamp and user agent. We use this information to operate the service, diagnose failures, protect accounts and prevent abuse. Support information is provided when you contact us or choose to submit feedback.
VPN traffic and essential services
Destination addresses, DNS requests and network packets are processed transiently to route connections you request. The iOS client uses Cloudflare encrypted DNS (1.1.1.1 / 1.0.0.1) and connectivity checks to our API and a Google generate_204 endpoint. These services receive the relevant DNS or connectivity request and network metadata; GV account credentials and Apple transaction records are not included in those requests. We do not use VPN data for advertising or profiling, and do not sell user data or supply collected account or service records to advertisers, data brokers or other parties for their independent use.
Storage and service providers
Account, device and subscription records are stored in our controlled service database on Vultr-hosted infrastructure in the United States. The public website is hosted in Singapore. VPN traffic is routed through the region selected for the connection. Infrastructure providers supply hosting and storage; bound-email verification and recovery messages are sent through Private Email (mail.privateemail.com). Apple processes App Store purchases. These providers are used only for the corresponding service functions, not for advertising or resale of GV records. External DNS, email, hosting and payment services process the requests necessary for their respective functions under their applicable terms and privacy policies.
Protected local credentials and settings are kept in the app's local storage and the operating system's protected credential storage. Service records, security logs and protected backups are retained as needed for service continuity, verification, security and applicable obligations. We do not promise that all operational logs are immediately deleted or that every record has a fixed short retention period. Contact us through the official support page for access, correction, account deletion or privacy questions.
You can read this policy from the website and the privacy link in the iPhone/iPad app. The available app version and installation channel are shown on the download page.
Account deletion and retained records
In updated iPhone/iPad versions that include this feature, open Settings > Delete account, enter your current account password and explicitly confirm permanent deletion. You do not need to contact support to complete that in-app flow. Versions without the feature can use the official support page for an ownership-verified request.
Acceptance of a deletion request immediately revokes login sessions. Processing can continue while registered devices and VPN credentials are cleared from the service nodes. The app distinguishes pending processing from completion. After those prerequisites complete, personal account, device and operational service records are erased.
Original financial records and the minimum inactive internal references needed for accounting, disputes, fraud prevention or legal obligations can be retained. Deletion does not reset the one-time trial: its one-way device hash and original claim/expiry times remain without an account association to prevent repeated trial claims. The retained trial record can recognise a repeated trial claim but is no longer linked to the deleted account. Existing security logs and protected backups follow the retention explanation above; we do not promise a fixed short deletion period for these records.
Deleting a GV account does not cancel an Apple auto-renewable subscription. You can open Apple's subscription management from the deletion confirmation page, and permanent account deletion remains available. Manage Apple billing separately at https://apps.apple.com/account/subscriptions.
For access, correction, earlier-version account-deletion requests or privacy questions, use our official support page. You can read this policy from the website and from the privacy link in the iPhone/iPad app.
Mac App Store VPN data use
2026-10-09
To provide connections, manage subscriptions and your three-device allowance, Global Villager processes account information, device identifiers, subscription status, Apple transaction verification records and information needed to provide and protect the service. We use this information to provide the service, manage subscriptions, respond to support requests and prevent abuse.
We do not sell VPN user data, use it for advertising or profiling, or provide it to third parties for any purpose. Apple processes payments for the Mac App Store version; Global Villager does not receive or store your full payment card information.
Android VPN data use and account deletion
Updated October 11, 2026. This section applies to Global Villager VPN for Android, including its Google Play edition.
Information and purposes
We process your GV username or account identifier, protected authentication credentials, optional verified email, subscription and purchase-entitlement references, a hashed Android installation identifier, device name, registration and last-online status, and connection/provisioning operations. These support authentication, account recovery, VPN operation, the three-device allowance, subscription access, support, and prevention of abuse. You can register with a username without providing an email. The Google Play edition uses existing account entitlements and does not start an external checkout.
The Android client does not request GPS/location, contacts, camera, microphone, SMS or phone permissions, and does not use an advertising identifier or advertising SDK. A VPN does not disable other apps’ location permissions, account identification, browser cookies or operating-system telemetry.
VPN traffic, DNS and service providers
The user-authorized Android VPN service processes network packets, destination addresses and domain-resolution requests to route the connection. Global mode routes supported traffic through the selected node; smart mode directly routes the traffic selected by its rules. The app explains this before VPN consent. Closing its interface does not itself disconnect the foreground VPN service; manual disconnect, Android permission changes, force-stop and system resource controls can stop it.
Android uses Cloudflare (1.1.1.1) and Google Public DNS (8.8.8.8) over encrypted DNS through the tunnel. These resolvers receive DNS queries and network metadata and process them under their own public resolver policies, including operational/security logs and aggregate records. DNS encryption does not make the resolver unable to see a query. See the provider policies linked below.
Our account service and VPN nodes use Vultr hosting infrastructure. Payment providers process payment authorizations outside the Google Play client; GV receives service-entitlement and transaction references rather than your full payment-card details. Optional email verification/recovery is delivered through Private Email. Infrastructure providers process service data to supply their corresponding services. We do not sell VPN user data or use it for advertising or user profiling.
Retention and deletion
Account and operational device records are retained to operate the account until an ownership-verified deletion request is fulfilled. Fulfillment revokes access and sessions, waits for registered VPN credentials to be removed from the four active nodes, and removes or erases the account profile and associated operational device/service records. Original financial transaction records and the minimum inactive internal references needed for accounting, disputes, fraud prevention or legal obligations may be retained; account deletion does not itself cancel a payment-provider subscription.
To enforce one two-hour introductory experience per recognized device identifier, we retain a one-way device-claim hash and its original claim/expiry times for as long as that anti-abuse rule is operated. On account deletion it is detached from the deleted account. Deleting an account, removing a device, reinstalling, or changing accounts does not reset that claim. The identifier is not a GPS location or a hardware serial number.
Operational and security logs may contain source IP, request path, time, user agent and error metadata. Nginx log rotation is configured where verified; other infrastructure logs currently have no uniform guaranteed short retention limit. We do not claim zero logging, immediate erasure of all logs, or a fixed deletion deadline for every financial, security or provider-held record. These records are retained for their operational, security or applicable legal purposes. Contact us for a data-access/deletion request and an explanation of any necessary retained records.
Your controls
In the app open Account settings → Request account deletion, or use the account-deletion page below without reinstalling the app. Email from your bound address or provide your GV username; support verifies ownership before fulfillment. Do not send a password, verification code or full payment-card information. You can leave an email request at any time; there are no fixed support hours. We respond after receipt and verification and explain any additional steps or necessary retention.
Website help assistant and OpenAI
The website assistant offers local FAQ answers. For an AI answer, you must separately select the checkbox allowing your non-sensitive question to be sent to OpenAI. Do not enter passwords, verification codes, account emails, full payment details or private keys.
When you enable the AI option, the website sends your question and selected language to our server. The server may send the question with public GV support instructions to OpenAI's API to generate a reply. AI questions may therefore be processed outside your country of residence. OpenAI processes API data under its applicable terms and data controls. Choosing not to consent keeps the reply on the FAQ route; the browser may still send the question to GV to look up an answer, but it is not authorised for an OpenAI reply.
The chat text displayed in the page lasts for the current page session. Closing or reloading the page does not itself delete any server, security or provider records. The assistant cannot access your account, approve a payment or refund, grant a plan, or delete your account. Use authenticated account tools or email support for those tasks.