Privacy Policy

This Privacy Policy explains how Lemonode LLC (“Lemonode”, “we”, “us”, or “our”) collects, uses, and protects information when you use the LemoNode VPN app and website (the “Service”). We built LemoNode around a simple idea: no account, no activity logs, and as little data as the Service can run on.

1.What We Do Not Collect

You do not create an account. We do not ask for your name, email address, phone number, or any identity document to use the app. Our VPN servers are configured not to record your activity: we do not log the websites or services you access, your DNS queries, the content of your traffic, your originating IP address, or your browsing history. Because these records do not exist, they cannot be shared, leaked, or handed over.

2.Information We Collect

Created on your device

• A random device identifier, generated by the app on first launch. It is not derived from your identity or from Apple identifiers. It lets us remember your free period and your paid access on that device, and it is the only thing that ties a payment to a device.
• App and device basics — app version, device model, system language and region, and whether notifications are enabled. Used to run the Service, localise messages, and diagnose problems.
• A push notification token, if you allow notifications, so we can tell you when your free period or paid access is about to end, or when the Service has a problem.

Technical and diagnostic data

• Connection diagnostics — whether a connection succeeded, error codes, latency to our servers, and, if you run the in-app network test, which of our endpoints were reachable from your network. These describe the link between you and us, not what you do through it.
• Crash reports and usage events collected through Firebase (Crashlytics and Analytics), such as “connected” or “paywall shown”, associated with the device identifier above. We use them to fix bugs and understand how the app is used; we do not build advertising profiles.
• Server operations — our servers keep aggregate load and health metrics and the temporary state needed to forward packets. No per-user activity is written to disk.

Payments

• When you buy a paid period, the payment is handled by a third-party payment provider. We receive a confirmation containing the order reference, the chosen plan, the amount, and the device identifier it belongs to. We never receive or store your card number.

Support and website

• If you contact support (by Telegram or email), we keep the messages you send us and the device identifier the app attaches to the conversation, so we can help you.
• The website uses only the cookies strictly necessary for it to function and basic, privacy-respecting page metrics.

3.How We Use Information

• To provide the VPN connection and choose the fastest server for you;
• To grant and keep track of your free period and paid access;
• To process payments and confirm them in the app;
• To secure the Service, detect abuse and account sharing, and troubleshoot problems;
• To send service notifications you have allowed, and to answer your support requests;
• To comply with legal obligations.

4.How We Share Information

We share information only as needed to run the Service:

• Service providers — payment processors, hosting and server providers, and Google Firebase (push notifications, crash reporting, analytics, remote configuration), who process data on our behalf under confidentiality obligations;
• Legal reasons — where required by applicable law, or to protect the rights, safety, and property of Lemonode or others. Because we keep no activity logs, we have no record of what you did through the Service to produce.

We do not sell or rent personal information to anyone, and we do not share it with advertisers or data brokers.

5.Data Retention

The device record (identifier, access dates, push token, app basics) is kept while the app is in use and for a limited period afterwards, then deleted or anonymised. Diagnostic and crash data are kept for a limited period and then deleted or aggregated. Payment confirmations are kept as long as accounting and legal requirements demand. Deleting the app removes the identifier from your device; you can also ask us to delete the record on our side (see section 7).

6.Security

Traffic between your device and our servers is encrypted end to end. Credentials are stored in the iOS Keychain. Communication between the app and our backend uses TLS. We use reasonable technical and organisational measures to protect information against unauthorised access, loss, or misuse, and we work to limit how much of it exists in the first place.

7.Your Rights

Depending on where you live, you may have the right to access, correct, or delete personal information we hold about you, or to object to certain processing. To make a request, contact us using the details below; to identify your device record, tap “Contact Support” in the app so the identifier is included. We will respond within a reasonable time and in accordance with applicable law.

8.International Users

Lemonode LLC is based in the United States, and information may be processed in the United States or other countries where we or our providers operate. By using the Service, you understand that your information may be transferred to and processed in these locations.

9.Children

The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.

10.Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be highlighted on this page.

11.Contact

Questions or privacy requests? Reach us at hello@lemonode.tech, or by mail: