Last updated: September 3, 2026
Welcome to Novol VPN ("Novol", "we", "our", or "us"). This Privacy Policy explains how we collect, use, store, and protect information when you use the Novol VPN mobile application, website, backend, VPN servers, and related services (collectively, the "Service").
By using Novol VPN, you agree to the practices described in this Privacy Policy and our Terms of Use.
Novol VPN is designed with privacy and security as core principles. Our goal is to provide secure, encrypted internet access while minimizing data collection wherever possible. The app does not require account registration for its core VPN features.
Novol VPN does not require an email address, username, or password to use the core VPN service. The app creates and stores technical identifiers needed to operate the Service, including:
We use this information to:
To operate the VPN tunnel and enforce the free daily quota, we may process limited connection metadata, including:
VPN servers necessarily receive your device's source IP address to establish a network connection. We do not use this information to create browsing profiles. We do not log browsing activity: we do not log visited domains, DNS queries, websites or apps accessed through the VPN, or the contents of your traffic.
Payments and subscriptions are processed by third-party providers, including:
We do not store full credit card numbers, Apple or Google payment credentials, or card security codes on our servers. Card details for YooKassa payments are processed by YooKassa; we may receive payment amount, payment status, and transaction identifiers as needed. We may also store payment provider identifiers, product period, entitlement expiration time, and related metadata needed to activate Premium access, prevent duplicate processing, handle refunds, and provide support.
To maintain service reliability and prevent abuse, we may collect limited technical data, including:
This data is used strictly for:
Novol VPN is built to minimize logging. We do not log browsing activity. We do not collect or store:
We do not monitor, inspect, or analyze the content of your encrypted VPN traffic, DNS queries, or visited domains.
All VPN traffic is encrypted in transit using industry-standard protocols (including WireGuard). We implement technical and organizational safeguards designed to protect your information, including:
No method of transmission or storage is 100% secure, but we continuously work to maintain strong security standards.
We may use crash reporting and diagnostic tools (including Sentry) to improve the Service and investigate failures. Personally identifiable information (PII) is disabled for diagnostics and is not sent to the diagnostics provider. Diagnostics may include:
Diagnostics are used to improve reliability and service quality. They are not used to record browsing history, visited domains, DNS queries, or the contents of VPN traffic.
If Novol VPN provides a website or web dashboard, we may use cookies or similar technologies for:
You may control cookies through your browser settings.
The Service may integrate with third-party providers, including:
These providers process limited information necessary to deliver their respective services. We do not share browsing history, visited domains, DNS queries, or VPN traffic contents with these providers because we do not collect that information.
We retain operational and personal information only for as long as necessary to:
Free quota records and VPN session duration records are retained only as needed for quota enforcement, abuse prevention, support, and service reliability. Users may request deletion of associated personal information where legally permitted.
Your information may be processed or stored in countries outside your place of residence. By using the Service, you acknowledge that your information may be transferred to jurisdictions with different data protection laws. We take reasonable measures to ensure appropriate protection of personal data.
Novol VPN is not intended for children under the age of 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that information from a child has been collected without appropriate consent, we will delete it promptly.
Depending on your jurisdiction, you may have rights to:
To exercise these rights, contact us using the information in Section 16 below.
If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, processing of personal data is based on:
You may also lodge complaints with your local data protection authority.
If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including rights to know what personal information is collected, request deletion, correct inaccurate information, and limit certain uses of data. Novol VPN does not sell personal information.
While Novol VPN maintains a strict privacy-focused approach, we may process limited operational data when necessary to detect abuse or fraud, enforce Terms of Service, protect infrastructure, and comply with applicable legal obligations. We only disclose information when legally required to do so or when necessary to protect the Service, users, or third parties.
We may update this Privacy Policy from time to time. If material changes are made, we may notify users through:
Continued use of the Service after updates constitutes acceptance of the revised Privacy Policy.
For privacy-related questions, data requests, or support, contact us at support@fitspace.app.
This document is hosted on the FitSpace website for stable access via a permanent link.