Last updated: 3 September 2026 · Operated by CARWAN AI SOLUTIONS ULUSLARARASI TICARET LIMITED SIRKETI
PRS VPN is a virtual private network. This policy describes exactly what the service stores, what it deliberately does not store, and how long anything is kept. It describes the system as it is actually built, not as an aspiration.
We do not log the websites you visit, the DNS queries you make, or the contents of your traffic. We do not sell VPN-service data, use it for any purpose other than providing the service, or disclose it to third parties for any purpose.
| Data | Why | Kept for |
|---|---|---|
| Random account identifier | Identifies your account without a name, email address, or phone number. | Until you delete the account. |
| Recovery code hash (SHA-256) | Lets you recover a private-start account. The recovery code is generated on your device and stored in the app-only Keychain. It is transmitted over HTTPS only when creating, recovering, or deleting an account. The raw code is never persisted on our servers — only its hash. | Until you delete the account. |
| Username, email address, password hash (Argon2) | Only for accounts created with sign-in credentials. Your raw password is never stored. | Until you delete the account. |
| Device record: random device ID, a generic device label, platform and app version, your VPN public key, the internal tunnel address assigned to you, and which node you were assigned. | Required to establish the encrypted tunnel and to enforce the per-account device limit. | Until you delete the account or remove the device. |
| Monthly byte totals (sent and received) | Enforces the free plan's monthly data allowance. This is an aggregate count only; it carries no information about destinations or content. | Until you delete the account. |
Your source IP address is processed transiently, in memory, for two purposes: delivering your network traffic, and rate-limiting abuse. It is not written to our application database and not written to persistent access logs. Our web servers have access logging disabled, and the client IP address is deliberately not forwarded to the application.
Diagnostic information stays on your device. It leaves your device only if you explicitly choose to share it.
You can delete your account from the app at Settings → Delete Account. For a private-start account you confirm with your recovery code. Deletion physically removes the account's records from the live application database. Removal of the corresponding tunnel peer on the VPN node completes separately, shortly afterwards.
Today we keep no separate database backups, so deleting your account removes those records from the only copy we hold. This is a statement of our current setup, not a permanent guarantee: if we introduce backups, we will update this policy to say how long deleted records survive in them.
Because the service is designed to work without them, we do not ask for and do not hold: your real name, your phone number, your postal address, or your payment details. The private-start flow requires no email address at all.
This is pseudonymous, not anonymous: a random account identifier, a recovery code hash, and the device and tunnel records listed above do exist while your account exists.
Questions about this policy: privacy@prsapp.ai
CARWAN AI SOLUTIONS ULUSLARARASI TICARET LIMITED SIRKETI, Istanbul, Türkiye