Summary
We never record the websites you visit, your DNS queries or the content of your traffic. We do keep connection records — when a device connected, from which IP address, to which server and how much data it used — to run the service, prevent abuse and comply with the law.
- No account, name, email address or phone number is needed to use Quantis.
- Your WireGuard® private key is created on your phone and is never sent to us.
- Payments are processed by Apple or Google. We never see your card details.
- We don't sell your data. Your VPN traffic and browsing are never used for analytics or advertising.
Who we are
Quantis VPN ("Quantis", "we", "us") provides the Quantis mobile application and the VPN service behind it. We are the data controller for the personal data described in this policy. You can reach us at any time at [email protected].
What we collect
We collect only what is needed to provide the VPN, manage your subscription, keep the network safe and meet our legal obligations.
| Data | What it is | Why we need it |
|---|---|---|
| Device ID | A random identifier created by the app on first launch. It is not your phone's hardware ID or advertising ID. | To recognise your device, link it to your subscription and handle support tickets. |
| Subscription status | Your plan (weekly, monthly or yearly), start and expiry dates. | To unlock Pro features for the period you paid for. |
| WireGuard® public key | The public half of the key pair your phone generates, plus the private tunnel address we assign to it. | To let your device connect to our servers. The public key cannot be used to decrypt anything. |
| Connection records | Your real IP address and source port when you connect, the VPN server used, the tunnel address and port range assigned to your device, connection start and end times (in UTC) and the amount of data transferred. | To operate and balance the network, prevent abuse, and comply with legal obligations and valid requests from authorities. |
| App request records | When the app talks to our API: IP address, approximate country (derived from the IP address), time (UTC), app version, platform, device language and the type of request (for example "list servers"). | Security, fraud prevention and troubleshooting. |
| Support messages | The subject and messages you send through the in-app support center, with the time, IP address and app version of each message — or the emails you send us. | To answer you and keep a history of the conversation. |
| Technical error reports | App version, device model, operating system and error messages when something goes wrong. | To fix bugs. These never contain your traffic or browsing data. |
| App usage events | In-app events such as "app opened", "subscription screen shown", "trial started" or "connected" (with the server country), plus app version, device type, OS and approximate country. See Analytics & ads. | To understand how the app is used, improve it and measure which ads bring new users. |
| Notification token | A push token issued by Apple or Google if you allow notifications. | To send you connection alerts and, if you agreed, offers. See Notifications. |
What we never collect
- The websites, apps or services you use through the VPN.
- Your DNS queries (the domain names your device looks up).
- The content of your traffic — messages, files, pages or streams.
- Your WireGuard® private key.
- Your name, email address or phone number (unless you choose to email us).
- Your contacts, photos or precise location.
- Your payment card details — these stay with Apple or Google.
DNS & DNS shield
While connected, the domain-name lookups your device makes travel through the encrypted tunnel and are answered by public DNS resolvers — by default Google Public DNS (8.8.8.8) and Cloudflare (1.1.1.1). If you turn on DNS shield, lookups are sent to AdGuard DNS instead, which blocks known ad and tracker domains.
Because these lookups leave the tunnel from our server, the resolver sees our server's IP address, not yours. We do not run or log these DNS services. Each provider processes queries under its own privacy policy.
Analytics & ads
The app uses Google Firebase Analytics and the Meta (Facebook) SDK to count app events — for example that the app was opened, the subscription screen was shown or a trial was started — and to measure which advertising campaigns lead people to install Quantis.
- What is never sent: the websites or apps you use through the VPN, your DNS queries, your traffic, your VPN IP address or your WireGuard® keys.
- Advertising identifier: on iOS we only use your device's advertising identifier (IDFA) if you tap "Allow" in Apple's "Allow to track" prompt. If you choose "Ask App Not to Track", events are sent without it and are not used to track you across other companies' apps or websites. On Android, your device's ad-ID settings apply.
- Your choice: you can change tracking at any time in iOS Settings → Privacy & Security → Tracking, or reset or delete your advertising ID in Android settings.
Google and Meta process this data under their own privacy policies: Google and Meta.
Notifications
If you allow notifications, Apple or Google gives the app a push token, which we store with your device ID so we can send you connection and security alerts and occasional offers. Messages are delivered through Apple Push Notification service (iPhone) or Google Firebase Cloud Messaging (Android). You can turn notifications off at any time in your phone's settings; the token then stops working.
How we use data
- To provide, maintain and improve the VPN service.
- To verify your subscription and unlock Pro features.
- To detect and stop abuse, attacks, spam and fraud on our network.
- To answer your support requests.
- To send notifications you agreed to receive.
- To measure app usage and the performance of our ads, as described in Analytics & ads.
- To comply with applicable laws and respond to valid legal requests.
We do not sell personal data, and we never use your VPN traffic or browsing for advertising.
Legal bases
Where data protection laws such as the EU/UK GDPR or Turkey's Law No. 6698 on the Protection of Personal Data (KVKK) apply, we rely on:
- Performance of a contract — to provide the service you subscribed to.
- Legal obligation — to keep connection records and respond to lawful requests.
- Legitimate interests — to secure our network and prevent abuse, balanced against your rights.
- Consent — for notifications and for advertising measurement using your advertising identifier, which you can withdraw at any time.
How long we keep it
| Data | Retention |
|---|---|
| Connection records and app request records | At least two (2) years from the date they were created, and longer where required by law or by an ongoing legal request. |
| Device ID and subscription status | While you use the service, then for the same period as connection records so that those records remain meaningful. |
| Support conversations | For as long as needed to help you and for the same period as connection records. |
| Technical error reports | Only as long as needed to fix the problem. |
| App usage events | Up to 14 months in Firebase Analytics; Meta keeps app events under its own retention rules. |
| Notification token | Until it stops working, you turn notifications off or your device record is deleted. |
Uninstalling the app or asking us to delete your data stops new records from being created, but records we are legally required to keep are retained in restricted storage until the retention period ends.
Where data is stored
Our servers are located in several countries, currently including the United States, the Netherlands, the United Kingdom and South Korea. When data is transferred across borders we use appropriate safeguards required by applicable law.
Security
Traffic between your device and our servers is encrypted with WireGuard® (ChaCha20-Poly1305). Your private key lives in your phone's secure storage. Our API is served only over HTTPS, server access is restricted to authorised staff using key-based authentication, and the admin panel is protected by login limits. No system is perfectly secure, but we work hard to protect your data.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to object to or restrict certain processing, to data portability and to complain to a data protection authority (for example the Turkish Personal Data Protection Authority or your local EU supervisory authority).
The easiest way to make a request is through the app under Settings → Support center: tickets are automatically linked to your device, so we can find your data without asking for anything else. You can also email [email protected], or remove your account yourself under Settings → Delete account. We will reply within 30 days. Some data may be kept where the law requires it, as described above.
Children
Quantis is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data. If you believe a child has used the service, contact us and we will help.
This website
quantisvpn.com does not use analytics, advertising or tracking cookies, and our fonts are hosted on our own server. Cloudflare may set strictly necessary security cookies to protect the site from attacks. Pages that show live prices and locations load them from our own API. (The analytics described above apply to the mobile app only.)
Changes to this policy
If we change this policy we will update the effective date above, and for significant changes we will let you know in the app before they take effect.
Contact
Questions about privacy? Email [email protected] or open a ticket in the app under Settings → Support center.