Terms of Service

Effective 31 July 2026 · Version 2.0

These terms are the agreement between you and [LEGAL ENTITY NAME] for the Suphuzi VPN apps and service. They are written to be read. Where a number appears below — an allowance, a device count, a cap — it is the number the software actually enforces, not a rounded marketing figure.

Contents

1. The service
2. Eligibility
3. Your account
4. The free allowance
5. Rewarded ads
6. Paid plans
7. Billing, renewal, refunds
8. Fair use
9. Acceptable use
10. What a VPN cannot do
11. Availability and changes
12. Warranties
13. Liability
14. Termination
15. Governing law
16. Consumer rights
17. General
18. Contact

---

1. The service

Suphuzi VPN establishes an encrypted WireGuard tunnel between your device and an exit server you choose. Traffic sent through the tunnel reaches its destination carrying the exit server's IP address instead of yours, and is encrypted between your device and that server.

As of the effective date the service runs 9 exit servers in 6 countries — Germany, Finland, the United Kingdom, the United States, Singapore and Australia. Every server in the catalogue is available on every plan, including the free one. A paid plan does not unlock extra servers or extra regions, and we do not claim that it does. The catalogue changes as we add and retire capacity.

By using Suphuzi VPN you accept these terms and our Privacy Policy, which forms part of this agreement.

2. Eligibility

Suphuzi VPN is rated 18+ and is for adults. You must be at least 18 years old, and you must be legally permitted to use a VPN where you are. VPN use is restricted or illegal in some jurisdictions; checking that is your responsibility, not ours.

3. Your account

An account is created automatically the first time you open the app. It is anonymous: a random identifier, no username, no password, no email address. You do not sign up and there is nothing to remember.

You may optionally link an email address, which exists for exactly one purpose: letting a second device join the same subscription. We store only a keyed digest of the address, never the address itself, which means we cannot email you and will not try.

Device limits

Each account may register a limited number of devices, enforced by our server at the moment a device registers:

You can remove a device at any time in the app; doing so ends that device's tunnel immediately. You cannot remove your last remaining device, because that would lock you out of your own account — delete the account instead. Reinstalling the app produces a new device, because we deliberately derive device identity from a random number rather than from your hardware. If that fills your limit, remove the old entry from the device list.

If your subscription ends and your device count now exceeds the free limit, we do not silently delete your devices. The oldest devices up to the new limit keep working and the others are asked to choose which device to remove.

4. The free allowance

The free plan is metered. The exact rules:

How the meter works, and its limits

We measure your usage on your device, from the tunnel interface counters, and report the total to our server. We deliberately do not measure your traffic on the server, because a per-user byte counter on an exit server is exactly the kind of tunnel-linked metadata our privacy design exists to avoid. The consequence, stated plainly: the meter is approximate, it updates in steps rather than continuously, and it can lag by a few megabytes when your device is offline or the app has been suspended.

When the allowance runs out the tunnel is disconnected safely and you are shown your options. It does not silently keep running, and it does not drop you onto an unprotected connection without telling you. No charge is ever made for exceeding the free allowance.

If you believe the counter is wrong, contact us. We will review it from your account's allowance ledger and subscription records. We cannot review it from your traffic, because we do not have your traffic.

5. Rewarded ads

On the free plan you may choose to watch a rewarded video ad to add 100 MB. Ads are supplied by Google AdMob. The mechanics:

• Always optional. Nothing is shown unless you tap the button asking for extra data. No ad appears on launch, on connect, or anywhere in the connection flow. There are no banner and no interstitial ads.
• The reward is granted by our server, not by your device. After an ad completes, Google sends our server a cryptographically signed confirmation. We verify Google's signature before crediting anything. If that confirmation does not arrive, or its signature does not verify, no data is credited — even if the ad appeared to play. This is what stops modified apps from minting free data, and it is why credit can occasionally take a few seconds to appear.
• Each ad counts once. Google may resend the same confirmation; the reward is granted for the first one only.
• The amount is fixed by us at 100 MB per ad and is not taken from the value in Google's message.
• Ten per day. The counter resets at 00:00 UTC.
• Consent comes first. In the EEA, the UK and Switzerland, Google's consent form is shown before any ad is requested; if you decline, no ad is requested. On iOS the tracking prompt appears after that, and only at that moment. Declining either does not deny you the service — you simply get a non-personalised ad.
• Subscribers see no ads at all, and receive no tracking prompt.
• We do not guarantee an ad will always be available to show. Fill rates depend on Google's inventory, not on us.

Attempting to obtain rewards without genuinely viewing an ad — emulating the reward callback, automating playback, or tampering with the app — is a breach of these terms and of Google's policies, and may end your access.

6. Paid plans

Each item below corresponds to a code path in the app that changes behaviour. We do not list a feature we have not built.

Prices shown are reference figures in US dollars. The price you actually pay is the localised price shown by the App Store or Google Play at checkout, including any tax. Not every plan is offered in every store at every time; the store's own product list is authoritative.

What the paid features mean, precisely

• Unlimited fair-use traffic — the daily meter is switched off. Section 8 explains the limits that still apply.
• No ads — the advertising SDK is not initialised at all for subscribers.
• Custom DNS — you set the resolver written into the tunnel configuration. Whoever you point at then answers, and sees, your queries.
• Threat protection (filtered DNS) — the tunnel pins a filtering resolver, so blocking applies to every app on the device rather than to one browser. Three profiles are available: ads and trackers (AdGuard DNS), malware and phishing (Quad9), or ads, trackers and adult content (AdGuard DNS). Two honest limits: it blocks at the domain level only — it cannot inspect or strip content inside a page, and it will not block first-party ads such as those served by YouTube from its own domains; and while a profile is on, your DNS queries are answered by the named operator rather than by the default resolver. The app shows you which operator that is before you choose. Custom DNS and a filtering profile cannot both be active, because a WireGuard tunnel has exactly one DNS setting.
• Split tunnel — excluding chosen routes from the tunnel. Available on Android, Windows and Linux only. It is not available on iOS or iPadOS and never will be, because Apple does not permit per-app or per-route VPN control for consumer apps. It is not shown or sold in the iOS app. Traffic you exclude from the tunnel is not protected by it.
• Priority support — a commitment about response times, not a technical feature.
• Kill switch — available to everyone, free plans included; it is not a paid upsell. On iOS it is a switch inside the app (requires iOS 14.2 or later). On Android it is enabled through the system's own Always-on VPN and Block connections without VPN settings, which the app links you to; Android reserves that control for the operating system.

7. Billing, renewal and refunds

• Subscriptions are sold and billed by Apple or Google through your store account. We never see or handle your payment details.
• Subscriptions renew automatically until you cancel. Cancel at least 24 hours before the period ends to avoid the next charge.
• Manage or cancel in Settings → your name → Subscriptions on iOS, or Google Play → Payments & subscriptions on Android. We cannot cancel a store subscription on your behalf.
• Refunds are handled by the store under its own policy. Where the law where you live gives you a statutory right of withdrawal or a refund right, that right applies regardless of the store's policy — see section 16.
• Prices may change. A change affecting an existing subscription takes effect only after the store has given you notice and, where required, obtained your agreement.
• Deleting your account does not cancel your subscription and does not refund it. Cancel first, then delete.
• Your entitlement is confirmed by the store through our subscription provider. We never accept a paid tier claimed by the app alone. If a purchase does not appear, use Restore purchases.

8. Fair use

“Unlimited” on a paid plan means we do not meter your bytes. It does not mean the physical network is infinite. To keep the service usable for everyone:

• Plans are for personal use by one person and their own devices. Reselling, sharing an account beyond your household, or operating it as a service for others is not permitted.
• We may apply proportionate technical limits to a single account whose usage threatens the stability of a server — for example an account saturating a link continuously. We will tell you before doing so, unless the situation is urgent.
• We do not throttle by protocol, by destination, or by what you are doing. We could not, since we do not inspect your traffic.
• The per-day session cap in section 4 applies to free accounts only.

9. Acceptable use

You agree not to use Suphuzi VPN to:

• break the law that applies to you, or facilitate someone else doing so;
• send spam, run phishing or malware campaigns, or take part in denial-of-service attacks;
• scan, intrude on, or attack networks or systems without authorisation;
• distribute child sexual abuse material, or content that incites violence or terrorism;
• infringe intellectual property or other people's rights;
• circumvent the free allowance, the device limit or the reward system by tampering with the app, automating rewards, or creating accounts in bulk;
• interfere with the service, its infrastructure or other users;
• resell, sublicense or commercially redistribute access.

We enforce this from the outside, not from the inside. Because we hold no traffic logs and no browsing history, we cannot detect what you are doing through the tunnel and we do not try. We act on abuse reports, on legal orders addressed to us, and on infrastructure signals such as an exit server being blocklisted. Where we can act at all, our response is proportionate: a warning, a limit, suspension, or termination for serious or repeated breaches.

10. What a VPN cannot do

We would rather set this out here than let a marketing page imply otherwise.

• A VPN is not anonymity. It changes the IP address a destination sees. It does not stop a site recognising you when you log in, and it does not remove cookies, browser or device fingerprinting, advertising identifiers, or GPS.
• It does not protect what leaves outside the tunnel. If you use split tunnel, excluded traffic is unprotected by definition.
• It does not make you secure on a compromised device. Malware on your phone sees your traffic before it is encrypted.
• It does not guarantee access to any particular service. Streaming platforms, banks and games actively block VPN addresses. We make no promise that any specific site will work, and a site blocking our exit IP is not a service fault.
• It does not guarantee a speed. Throughput depends on your connection, the distance to the exit, and the load on it.
• The kill switch depends on your operating system. On Android it only works if you enable the system's Always-on VPN and lockdown settings, which only you can do.
• We are not a “no-log” or “zero-log” provider in the absolute sense those words are usually used in, and we do not describe ourselves that way. The Privacy Policy states exactly what exists, where, and for how long. No independent audit has been carried out; if and when one is, we will publish it.

11. Availability and changes

We aim for continuous availability but do not promise it, and we offer no uptime guarantee. Servers are added, moved and retired; maintenance happens. The service should not be your only safeguard for anything critical — emergency communication, medical, safety or financial operations.

We may change these terms. If a change materially affects you, we will give notice in the app and update the effective date above before it takes effect. Because we deliberately cannot email you, in-app and on-site notice is the channel we have. If you do not accept a change, stop using the service and delete your account.

12. Warranties

To the fullest extent permitted by law, the service is provided “as is” and “as available”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement. Some jurisdictions do not allow the exclusion of implied warranties; where that is the case, this section applies only so far as the law allows and your statutory rights are unaffected.

13. Liability

[LEGAL REVIEW REQUIRED — the cap and exclusions below must be checked against each market you sell in.] To the fullest extent permitted by law, we are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data. Our total liability arising out of or relating to the service is limited to the greater of the amount you paid us in the twelve months before the event giving rise to the claim, or [AMOUNT].

Nothing in these terms excludes or limits liability that cannot lawfully be excluded, including liability for death or personal injury caused by negligence, for fraud, or for a consumer's mandatory statutory rights.

14. Termination

You may stop using the service at any time and delete your account from the app or from this page. We may suspend or terminate access if you materially breach these terms, if we are legally required to, or if continuing would create a serious security or legal risk. Except where a breach is serious or repeated, we will give notice and an opportunity to fix the problem first. On termination, your right to use the service ends and your account data is deleted as described in the Privacy Policy.

15. Governing law and disputes

These terms are governed by the law of [JURISDICTION], and the courts of [COURTS] have jurisdiction, without depriving a consumer of the protection of the mandatory law of their country of residence. [LEGAL REVIEW REQUIRED. Consider whether an informal-resolution step or an EU/UK ODR reference is needed.]

16. Consumer rights

If you are a consumer in the European Union, the United Kingdom or another jurisdiction with equivalent protection, you keep every right that law gives you, including any statutory right to withdraw from a distance contract, and nothing here reduces it. In Türkiye, your rights under Law No. 6502 on Consumer Protection apply likewise. [CONFIRM THE WITHDRAWAL-RIGHT WORDING FOR DIGITAL SUBSCRIPTIONS SOLD THROUGH APP STORES.]

17. General

• These terms and the Privacy Policy are the whole agreement between us about the service.
• If a provision is found unenforceable, the rest continues to apply.
• Not enforcing a term once does not waive it.
• You may not transfer your rights under these terms. We may transfer ours as part of a merger or sale of the business, on notice, and your rights are unaffected.
• These terms are in English. A translation is provided for convenience; the English text governs.

18. Contact

[LEGAL ENTITY NAME]
[REGISTERED ADDRESS, COUNTRY]
Support: support@suphuzivpn.com
Privacy and data rights: privacy@suphuzivpn.com