Account and devices
Yolka operates Yolka VPN for Android, iOS and macOS. This notice covers the apps, account service and VPN service.
We process your email address, an internal account identifier, verification status and account dates to create and secure your account. When you use a password, we store a password hash rather than the password itself. Verification and reset codes, login sessions and request limits help protect access and prevent abuse.
If you choose Sign in with Apple or Google, we process the provider’s account identifier and verified email information. Apple may supply a private relay email. We retain an encrypted Apple authorization grant so that the link can be revoked when you delete your account.
We record an app installation identifier, device name, operating platform, registration dates and device status. These records let you manage access and enforce the limit of three registered devices. Each device receives separate protected VPN credentials and short-lived access permissions.
For purchases, we process the store, product, transaction or purchase-token information, account ownership and subscription status and expiry. We use this information to verify access, restore purchases and prevent a purchase being claimed by another account. Apple or Google handles checkout; Yolka does not receive your payment card details.
Your VPN connection
When you connect, the app routes device network traffic through your selected VPN server. The app and VPN infrastructure process network traffic, source and destination IP addresses, DNS requests, connection information and traffic totals as needed to route your connection, measure usage, enforce access and operate the service.
Your IP address is also processed when your device contacts the account service, including for security and request limits. A VPN does not make all activity anonymous. Destination services can still receive the information you send them, and their own accounts, cookies and policies continue to apply.
VPN transport protects traffic between your device and the selected VPN server. Encryption beyond that server depends on the service you contact, such as whether a website uses HTTPS. We do not claim that no network information is processed or logged, or that deleting an account instantly closes every existing connection.
The current apps contain no advertising SDK or analytics SDK. These pages use no analytics scripts, advertising trackers or cookies. This does not prevent the operating system, app store or other services you choose from processing information under their own policies.
Other services involved
Infrastructure and network providers support the account service and VPN servers. DNS requests are sent to configured resolvers; the current app configuration uses Cloudflare and Quad9. Your traffic is forwarded to the destination services you request. These parties necessarily process the information needed to provide their part of the connection.
Apple and Google process sign-in or purchase information when you use those features. Email delivery providers process verification, reset and support messages. If you contact info@yolka.net, we receive your email address and the contents of your message to handle your request.
Data processing locations depend on your selected VPN server and the providers involved.
Deletion and retention
You can use Account → Delete account in Yolka VPN, or request deletion without the app through our account deletion support page. We may need to verify that the request comes from the account holder.
When account deletion is accepted, the service replaces your email and device names with removed-account labels, clears your password hash and purchase credentials, removes email verification challenges, revokes login sessions and disables account access. Other sign-in identities are removed; Apple authorization revocation is queued and retried until Apple confirms it.
Deletion of the associated VPN records is also queued. Device VPN credentials, subscription secrets and the installation identifier remain protected while this operation is pending and are cleared or replaced after successful removal. Outages can delay these steps. Server synchronization and existing connections mean deletion is not an instant-disconnection guarantee.
Some limited records remain: a keyed digest of the email and the original trial expiry to prevent repeated free trials; purchase ownership fingerprints, product and expiry information to prevent receipt reuse; and internal account, device and revoked-session records such as identifiers, platform and timestamps. These records are reduced rather than all erased. These retained records do not have an automatic deletion deadline.
Encrypted service backups retain the most recent 14 snapshots. This is a snapshot count, not a promise that every copy disappears within 14 days. Older data may remain in backups until those snapshots are replaced. Backup copies and any restoration must be handled consistently with deletion requests.
Account information is otherwise kept while needed to operate the account and its access. Short-lived verification and security records expire and are cleaned up by the service. We have not set a fixed retention period for support correspondence, infrastructure diagnostics or retained anti-abuse records. Contact us with questions about your information.
Manage renewal separately in the store that billed you. Find cancellation and refund help.
Your choices and questions
You can disconnect the VPN, remove registered devices, manage your subscription in its store, or request account deletion. For questions about your information, access, correction or a privacy request, contact info@yolka.net. Rights available to you depend on applicable law.
Do not email passwords, verification codes, VPN subscription links, private keys or purchase tokens. Support can explain what limited information is needed to verify and handle a request.