1. Our Privacy Commitment
At 101Sutra, we design NebulaVPN as a zero-knowledge, privacy-first tunneling utility. We believe that your online activities belong to you alone.
🔒 Zero-Logs Guarantee: We do NOT monitor, record, store, log, or share your browsing history, traffic destinations, DNS queries, data payloads, or connection timestamps.
2. Data We Do NOT Collect
NebulaVPN operates strictly on your local device without external tracking servers. The app does NOT:
- Create or require user accounts (no emails, passwords, or personal profiles required to use the VPN).
- Embed analytics SDKs (no Google Firebase Analytics, AppsFlyer, or telemetry trackers).
- Embed advertising networks (no AdMob, Unity Ads, or behavioral tracking SDKs).
- Log your real IP address or geographical GPS coordinates.
- Access your contacts, media library, camera, microphone, or external storage.
3. Local On-Device Data Storage
All data used by the app remains stored locally on your device:
- Server Configurations: Imported server profiles (VLESS, VMess, Trojan, Shadowsocks, WireGuard, SSH) are stored locally in an encrypted Room SQLite database. Sensitive SSH credentials and exported
.nvc configurations are encrypted at rest using AES-256-GCM.
- Preferences: User settings (routing mode, kill-switch, DNS servers, per-app split tunneling rules) are stored in Jetpack DataStore on your device.
- Bandwidth & Data Usage: Statistics are aggregated per-day on your device to display your personal data consumption. These counters are never uploaded.
4. Operating System Permissions & VpnService Disclosure
NebulaVPN requests only the minimal permissions necessary to provide secure proxy tunneling:
- Android VpnService: NebulaVPN utilizes Android's
VpnService framework to establish a local TUN virtual network interface. This interface routes device network packets through the user-configured secure proxy or SSH tunnel. No user traffic is inspected or logged by 101Sutra.
- Foreground Service & Notifications (
POST_NOTIFICATIONS): Used solely to maintain the VPN process in the background and display real-time connection status with a quick "Disconnect" action.
- Internet & Network State: Required to establish outbound proxy handshakes and monitor Wi-Fi/cellular connectivity transitions.
5. Network Connections Made by the App
- To Your Configured Servers: The application connects directly to the proxy or SSH server endpoints you import. Traffic handling is managed exclusively by the destination server you select.
- To Subscription URLs: If you add a subscription link, the app fetches the server list directly from the provider's HTTPS endpoint over standard Android HTTP client. 101Sutra does not proxy or observe these requests.
6. Security Measures
- Kill Switch: Blocks network traffic if the tunnel drops to prevent unencrypted IP/DNS leaks.
- Memory Isolation: Native core binaries (Xray-core and hev-socks5-tunnel) execute within sandboxed memory spaces with 16 KB page-size compatibility.
- Anti-Tamper & Keystore: Config exports utilize hardware-backed Android KeyStore protection.
- OS Backup Exclusion: App data backups are disabled at the Android OS manifest level (
android:allowBackup="false") to prevent unauthorized extraction.
7. GDPR / CCPA Data Rights & Deletion
Because NebulaVPN stores no personal data or server-side accounts, you retain complete sovereignty over your data. You can erase all application data at any time by clearing the app data in Android Settings or uninstalling the app.