Privacy Policy – SC Tunnel

App: SC Tunnel  |  Package: com.sctunnel.vpn  |  Effective date: 25 May 2026  |  Last updated: 25 May 2026

This Privacy Policy describes how SC Tunnel ("the app", "we", "us", or "our") collects, uses, and protects information when you use our Android application available on Google Play. By installing or using SC Tunnel, you agree to the practices described below. If you do not agree, please do not use the app.

1. About the app and its functionality

SC Tunnel is an Android VPN / tunnel client that helps users route their device traffic through a remote server using one of several supported tunneling methods. The app provides the following features:

• V2Ray / Xray VPN mode — establishes a TUN-based VPN connection with VLESS over WebSocket / TLS, including split-tunnel variants.
• HTTP Custom / SSH mode — connects through SSH dynamic forwarding (using JSch) with optional custom HTTP payloads.
• SSH-over-TLS mode — tunnels SSH inside a TLS connection.
• Server list — fetches a list of available public servers from our backend and caches it locally so you can browse and pick a server.
• Custom Connection — lets you create, edit, and save your own user-defined server profiles on your device.
• Time credits / rewarded ads — you can earn additional connection time by watching rewarded ads, or use the time provided by other ad formats. Time balance is stored locally on your device only.
• Connection logs — a diagnostic log screen that displays internal connection events on your device. Logs stay on your device unless you choose to share them.
• About / Privacy / Share Net auxiliary screens.
• Notifications — required to keep the VPN service running in the foreground and to inform you about the connection state.
• In-app updates — uses Google Play In-App Updates to notify you when a new version of the app is available.

2. Information we collect

2.1 Information you provide directly

• Custom connection details you enter (host, port, SSH user / password, SNI, payload, etc.). This information is stored locally on your device using Android SharedPreferences. It is used only to establish the VPN connection and is not transmitted to us.
• Selected server — your last selected server is stored locally so the app can restore your last session.

2.2 Information collected automatically

Data	Why we collect it	Where it goes
Device IP address	Required to establish a network/VPN connection. Servers can see the IP of incoming connections.	Used in transit only. Not stored by the app for analytics.
Network state & Wi-Fi state	To detect if you have internet, to start/stop the tunnel, and to show connection quality.	Stays on your device.
Mobile carrier name (optional)	If you grant the READ_PHONE_STATE permission, the app reads your active SIM carrier name to recommend matching servers in the "For You" tab. The app works without this permission.	Stays on your device.
Play Integrity token	Used to verify that the request comes from a genuine, untampered installation of the app. This protects our service and ad inventory from abuse and fraud.	Sent as a request header (X-Integrity-Token) to our servers when fetching the public server list. Verified, then discarded.
Crash / diagnostic events (in-app log only)	To help you and us understand connection failures.	Stored locally; not automatically uploaded.
Advertising identifier (AAID)	Used by Google AdMob and Google's User Messaging Platform (UMP) to serve ads and measure ad performance.	Processed by Google. See section 4.

2.3 Information we explicitly do NOT collect

• We do not collect your name, email, phone number, address, or any government ID.
• We do not log the websites you visit, the apps you open, your DNS queries, or your traffic contents through the VPN.
• We do not access your contacts, photos, files, microphone, camera, calendar, location, or SMS.
• We do not sell user data to third parties.

3. How we use the information

• To establish, maintain, and terminate your VPN / tunnel connection.
• To display the list of available servers and your remaining time credits.
• To verify app integrity and prevent abuse via Google Play Integrity.
• To show ads and reward time credits when you choose to watch them.
• To deliver in-app updates and security messages.
• To respond to support requests if you contact us directly.

4. Third-party services

SC Tunnel relies on the following Google and Android services. Each one has its own privacy policy. By using SC Tunnel, you also agree to those policies where applicable.

• Google AdMob (banner, interstitial, rewarded, rewarded interstitial, app-open, and native ads).
  Privacy policy: https://policies.google.com/technologies/ads
• Google User Messaging Platform (UMP) — GDPR / CCPA consent. The app shows a consent form where applicable so you can choose between personalized and non-personalized ads. You can change your choice later from inside the app.
• Google Play Integrity API — verifies that the app and device are genuine.
  https://developer.android.com/google/play/integrity
• Google Play In-App Updates — used to deliver updates from Google Play.
• Google Play Services — required by AdMob and Play Integrity.
  Privacy policy: https://policies.google.com/privacy

Beyond these services, the app's traffic is routed through user-selected VPN servers. Those servers may see standard network-level information (your IP address, destination addresses, ports). We do not operate logging on those servers and do not aggregate that data.

5. Permissions used by the app and why

Android permission	Purpose
INTERNET	Required for any network connection.
ACCESS_NETWORK_STATE	Detect online/offline state and current connection type.
ACCESS_WIFI_STATE	Detect Wi-Fi state for connection diagnostics.
FOREGROUND_SERVICE & FOREGROUND_SERVICE_SPECIAL_USE	Required by Android to keep the VPN running while you use other apps. The service type is "specialUse / vpn" as required for Android 14+.
POST_NOTIFICATIONS	Required on Android 13+ to display the VPN connection notification.
READ_PHONE_STATE (optional)	Used only to read the active mobile carrier name so the app can suggest carrier-matching servers. The app works without this permission and never reads your phone number, IMEI, or SIM serial.
BIND_VPN_SERVICE	Standard Android permission required by any app that establishes a VPN connection. Android always asks for your explicit confirmation before any VPN session starts.

6. Data storage and security

• App preferences and your custom server profiles are stored locally on your device using Android SharedPreferences.
• Network requests to our backend use HTTPS; cleartext traffic is disabled by default in the app's network security configuration.
• The app does not include user accounts, passwords for SC Tunnel itself, or cloud sync.
• You can clear all locally stored data at any time by clearing the app's storage from Android Settings, or by uninstalling the app.

7. Children's privacy

SC Tunnel is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us so we can delete it.

8. Your rights

Depending on where you live, you may have the right to:

• Access the data we hold about you.
• Request deletion of your data.
• Opt out of personalized ads (via the in-app consent screen / your device settings).
• Withdraw consent previously given to ad-personalization.

Because the app does not require an account and does not store personally identifying information on our servers, the simplest way to exercise these rights is to clear app data or uninstall the app. For requests related to advertising, please use the consent options inside the app or your device's privacy settings.

9. Data retention

• Local data (preferences, custom servers, time credits, logs) is kept on your device until you clear it or uninstall the app.
• Play Integrity tokens are short-lived (typically valid for ~1 hour) and are not retained after verification.
• Ad-related data is retained according to Google's policies linked in section 4.

10. International users

The app may be used worldwide. By using the app, you understand that information processed by third-party services such as Google AdMob and Google Play Integrity may be transferred to and processed in countries other than yours, including the United States.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, if the changes are significant, we will notify you inside the app. Your continued use of the app after a change becomes effective means you accept the updated policy.

12. Contact

If you have any questions or concerns about this Privacy Policy or our practices, contact:

• Email: Contact us