Orbyn VPN for Android

Legal · Privacy

Privacy, explained plainly.

This Privacy Policy explains how Orbyn VPN processes data, including the limited technical data used to operate the app and the network data handled when you connect.

Effective: August 21, 2026 Last updated: August 21, 2026 Package: com.orbyn.vpn
No account required Orbyn VPN does not require your name, email address, or a user profile.
No activity logs We do not store browsing history, DNS queries, traffic content, or destinations.
Encrypted tunnel Eligible traffic is encrypted from the device to the VPN endpoint.
Deletion requests A public request pathway is available even though the app has no account.

1. Scope and data controller

This Privacy Policy applies to the Orbyn VPN Android application, package name com.orbyn.vpn, its VPN service, website, and support communications (together, the “Service”).

Orbyn VPN is developed and operated by BF Fastigheter AB, Mejerivägen 21, 972 51 Luleå, Sweden (“Orbyn VPN,” “we,” “us,” or “our”). BF Fastigheter AB is the data controller for personal data we determine how and why to process.

Important: Orbyn VPN does not require account registration. We do not ask for your name, telephone number, physical address, or email address to use the VPN. We receive an email address only if you choose to contact support or submit a privacy request.

2. Data we process

The Service processes the minimum categories of data described below. Some information is processed only briefly to deliver a connection, while limited diagnostic or advertising data may be collected by us or our service providers.

Category Examples Purpose Retention
VPN network data Source IP address, IP packets, and DNS requests required to route traffic through the tunnel. Processed ephemerally to establish and provide the VPN connection. Not retained by us in browsing or activity logs.
Device and app information Device model or category, operating-system version, app version, language, network type, and coarse country derived from IP address. Compatibility, service reliability, security, and capacity planning. Identifiable diagnostic records are kept for up to 90 days, then deleted or aggregated.
Connection and diagnostics Connection success or failure, selected server region, session duration, crash logs, and technical error details. Troubleshooting, preventing abuse, and improving performance. Up to 90 days, unless a longer period is required for a security investigation or law.
Advertising data Advertising ID, IP address, device information, and ad impressions or interactions processed by Google Mobile Ads. Display and measure ads, apply consent choices, limit frequency, and prevent ad fraud. Controlled by the advertising provider under its published policies and your device or consent settings.
Support and privacy requests Email address, message content, and attachments you voluntarily send. Respond to requests, troubleshoot issues, and document resolution. Normally up to 24 months after resolution, unless law requires longer retention.

Information we do not collect or retain

We do not collect your precise GPS location, contacts, photos, microphone recordings, SMS content, financial information, or health information to provide Orbyn VPN. We do not retain browsing history, DNS queries, traffic content, or a list of websites and online services you access through the tunnel.

3. VPN network processing and Android VpnService

Orbyn VPN uses Android's VpnService because creating a device-level VPN tunnel is the app's core and user-facing purpose. When you choose to connect and approve Android's VPN permission, eligible network traffic is routed through an encrypted tunnel from your device to the selected VPN endpoint.

The VPN endpoint necessarily processes your source IP address and network packets in real time to route responses back to your device. This is ephemeral processing: we do not retain the content of your traffic, browsing history, DNS queries, or destination history in activity logs.

No traffic monetization: We do not sell VPN traffic data and do not use VpnService to redirect or manipulate traffic from other apps for monetization, including altering ad traffic or changing its apparent country for advertising purposes.

Orbyn VPN encrypts data between the device and the VPN tunnel endpoint. Once traffic leaves that endpoint, protection also depends on the destination service's own encryption, such as HTTPS. A VPN does not make every activity anonymous or remove risks outside the encrypted tunnel.

4. Purposes and legal bases

Where the EU General Data Protection Regulation (“GDPR”) or similar law applies, we rely on the following legal bases:

  • Performance of a contract: to establish, maintain, and deliver the VPN connection you request.
  • Legitimate interests: to secure the Service, prevent fraud and abuse, diagnose failures, plan capacity, and improve reliability, balanced against your privacy rights.
  • Consent: for personalized advertising, optional analytics, or similar processing where consent is legally required. You may withdraw consent through the in-app privacy controls or device settings.
  • Legal obligation: to respond to valid legal requests and comply with applicable law.

We do not use VPN browsing activity or traffic content to build advertising profiles.

5. Sharing and service providers

We do not sell your personal data. We disclose limited data only as necessary for the purposes below:

  • VPN and hosting infrastructure providers process network traffic on our behalf to deliver the encrypted tunnel and maintain service availability.
  • Google Mobile Ads may process advertising and device data to deliver, measure, and secure ads. Learn more in Google's Privacy Policy and AdMob privacy guidance.
  • Firebase Crashlytics may process crash and diagnostic data so we can identify and fix reliability problems. Learn more from Firebase Privacy and Security.
  • Professional advisers and authorities may receive information when reasonably necessary to protect rights, investigate fraud or security incidents, comply with law, or respond to lawful government requests.
  • A corporate successor may receive relevant information as part of a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality and notice requirements.

Third-party SDK behavior is included in the app's Google Play Data safety disclosure. Their independent processing is governed by their own privacy terms.

6. Data retention and deletion

We keep personal data only for as long as needed for the stated purpose:

  • VPN traffic content, browsing history, DNS query history, and destination history are not retained by us in activity logs.
  • Identifiable app diagnostic and connection reliability records are normally deleted or aggregated within 90 days.
  • Support messages and privacy requests are normally kept for up to 24 months after resolution.
  • Data needed for security, fraud prevention, disputes, or legal compliance may be retained longer only for that purpose.
  • Deleted data may remain in restricted backups for up to 30 additional days before being overwritten.

Orbyn VPN has no user accounts. You may still ask us to delete personal data under our control by following the steps on the Orbyn VPN Data Deletion page. Because diagnostic data is not linked to a name or account, we may be unable to identify a particular record without sufficient information from you. We will explain the outcome of your request.

7. Security

We use technical and organizational safeguards appropriate to the type of data processed. These include encryption between the app and VPN endpoint, access controls, restricted administrative access, service monitoring, and data minimization.

No internet transmission or storage system can be guaranteed completely secure. You are responsible for keeping your device, operating system, and app version up to date and for disconnecting the VPN when you no longer want it active.

8. International data transfers

BF Fastigheter AB is based in Sweden. VPN endpoints and service providers may operate in other countries. When personal data is transferred outside the European Economic Area, we use an approved transfer mechanism where required, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with appropriate safeguards.

9. Your rights and choices

Depending on your location, you may have the right to request access, correction, deletion, restriction, portability, or an objection to processing. Where processing is based on consent, you may withdraw consent at any time without affecting earlier lawful processing.

  • VPN permission: Disconnect in the app or revoke the VPN configuration through Android settings.
  • Advertising choices: Use the app's consent or privacy controls where shown, and manage your Android advertising settings.
  • Delete app-local data: Clear the app's storage or uninstall Orbyn VPN through Android settings.
  • Contact us: Email the privacy contact below or use our Data Deletion page.

We may need to verify a request before acting on it. You also have the right to complain to your local data-protection authority. In Sweden, the supervisory authority is the Swedish Authority for Privacy Protection (IMY).

10. Children's privacy

Orbyn VPN is not directed to children under 13, and we do not knowingly collect personal data from children under 13. Where local law sets a higher minimum age for independent consent, that age applies. If you believe a child has provided personal data to us, contact us so we can investigate and delete it where required.

11. Changes to this policy

We may update this Privacy Policy when the Service, legal requirements, or data practices change. We will revise the “Last updated” date and, when changes are material, provide an additional in-app notice or obtain consent where required. The current policy will remain publicly available on this page.

12. Contact us

For privacy questions, rights requests, or complaints, contact:

BF Fastigheter AB

Privacy contact for Orbyn VPN

Mejerivägen 21, 972 51 Luleå, Sweden

Email: [email protected]

Application: Orbyn VPN (com.orbyn.vpn)