Privacy policy
Effective 13 October 2026 · Standard Android edition
TengriVPN is operated under the Tengri Global Group name. For privacy or account requests, contact contact@tengriglobalgroup.com.
Information we process
- Account email, password verifier, plan, eligibility, creation time and account security settings.
- Device/public keys, device label, VPN address assignments, sessions and gateway selections needed to authenticate and provide the service. We do not save your plaintext account password.
- Operational security audit events such as sign-in, account/device changes, provisioning, and administrator actions. Port-forward allocation records include gateway endpoint, VPN address, protocol, public/local ports and expiration.
- Gateway health and aggregate traffic/handshake counters. WireGuard also uses the peer’s current network endpoint while communicating.
Purpose and retention
We use this information to provide VPN connections, manage subscriptions and devices, prevent abuse and investigate security incidents. Security audit records are retained for up to 1,095 days (three years). Account information is kept while the account exists, subject to the deletion process below. Expired sessions and forwarding leases are removed by service cleanup.
Daily encrypted database backup snapshots follow a separate 30-day retention policy. Historical or incident-related records may remain where required for security or legal obligations. Hashed deletion markers help prevent deleted accounts from being restored from old backups. Live deletion is not a guarantee of immediate forensic erasure from storage, backups or provider systems.
Traffic and DNS
The VPN application code does not log browsing URLs, packet contents, messages or call audio. This is not a zero-log or anonymity promise. A gateway can process destination traffic while forwarding it. Configured DNS providers receive domain queries; hosting and network providers process network metadata under their own policies. Custom DNS choices and split tunneling change which traffic travels through the VPN. The current IPv4 tunnel configuration blocks IPv6; apps excluded from the tunnel use their normal network, subject to Android settings.
On your Android device
Android Keystore protects local encryption and device keys. The encrypted app vault holds session and VPN configuration, preferences and server selections. Uninstalling may remove device keys and require a support reset. App discovery is used locally for split-tunneling choices. The standard edition does not register a notification listener or detect WhatsApp calls. Android’s VPN permission and the service status notification support regular VPN operation.
Optional local connection history stores at most 20 basic connection events; entries older than seven days are filtered and removed when a new event is recorded. It can be cleared or disabled. Support diagnostics are shared only when you choose to share them. A manual public-IP check contacts ipify and exposes the apparent public IP to that provider.
Service providers and website
Gateways use Vultr infrastructure and an existing operator-managed Windows server. API and VPN connections can involve cross-border processing. This website is hosted through OpenAI Sites infrastructure, and its hosting platform may process request metadata and apply its own cookies or access controls. We have added no marketing analytics or advertising trackers. Email requests are handled by the operator’s email provider.
Your choices and deletion
You can change routing/DNS preferences, disable optional history, revoke access through available account controls, or request account deletion. See Delete account. We verify ownership before resetting devices or acting on emailed requests. Do not send passwords or private keys. Contact us to request access or correction of your account information.
Security and updates
VPN transport is encrypted with WireGuard. Access restrictions and encrypted backups reduce risk, but no service can guarantee absolute security. We will update this page when our practices change. The service is not intended for children under 18.