Privacy policy

FableVPN is built to know as little about you as possible. This is what we collect, why, who helps us, and what you can do about it.

Last updated October 25, 2026

The short version

What this covers

This policy covers the FableVPN apps, the FableVPN service and this website, fablevpn.online. “FableVPN”, “we” and “us” mean the team that runs them. Our no-logs policy is part of this policy.

What we collect

When you first open the app

Your device gets an anonymous account: a random account ID, a support ID, and a random token that lets Apple tell us which account a purchase belongs to. For each device we keep its model, iOS version and app version; a public key from Apple’s App Attest, which proves requests come from the genuine app; and sign-in tokens, stored only as hashes. Apple’s DeviceCheck holds a mark on your device once it has used its free trial; Apple doesn’t tell us who you are.

While you use FableVPN

Your country, as a two-letter code, from Cloudflare’s view of your connection when the app talks to our API, so Smart mode knows which sites are local. We update it at most once an hour, along with when your device last checked in.
Your data usage: the number of bytes your account has used in the current period, so we can apply your plan’s allowance.
App events: what happens in the app, such as screens opened, the VPN connecting and disconnecting with the location, mode and duration, purchases started or finished, and errors shown. Each event carries your anonymous account ID, a session ID, the time, and your device model, iOS and app version. Events never include the sites you visit, IP addresses, or anything you type.
Crash reports: where in the app’s code a crash or an unexpected error happened, with your device model, iOS version and anonymous account ID.
Account history: changes to your account, such as your trial starting, a device joining or leaving, or extra data added.

When you buy something

Apple processes every payment. Apple sends us the transaction: its ID, the product, price and currency, the App Store country, its dates, and any renewal, refund or billing problem. We never receive your name, Apple ID, address or card.

When you contact support

Your email address, your message, and the support ID you include. Support may add notes to your account to keep track of what was done.

What we never collect

The sites and apps you use through the VPN, your DNS lookups, the content of your traffic, your IP address, your name, email address or phone number, your precise location, your contacts, or an advertising identifier.

How we use it

To run the service: connect you, apply your plan and data allowance, and keep Premium on all your devices.
To keep it safe: make sure requests come from the genuine app, give each device one free trial, and stop abuse.
To give you what you paid for, and to handle renewals and refunds.
To answer you when you ask for help.
To find and fix problems, and to understand which features people use so we can improve them.
To meet legal obligations, such as keeping records of purchases.

Legal bases

Where laws such as the GDPR apply, we rely on:

Our contract with you, to provide the service you asked for: your account, devices, country for Smart mode, data usage and purchases.
Our legitimate interests in keeping the service secure, preventing abuse, fixing crashes and improving the app, which we balance against your privacy by collecting no identity and no browsing activity.
Legal obligations, for purchase records.

Where it is kept

Our servers and the companies above may process information in countries other than yours, including the United States and countries in Europe. Where the law requires it, these transfers are covered by safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

Your account, devices, country and data usage: while your account is open. A device you remove is deleted.
App events: 400 days from when we receive them, or until you delete your data, whichever comes first.
Crash reports: as long as Firebase Crashlytics keeps them, currently 90 days.
Purchase records: as long as needed for refunds, accounting and tax law.
Support messages: as long as needed to help you.
Backups: 14 days.

Your choices and rights

You can delete your data at any time in the app: open Settings and tap Delete my data. It closes your account and removes your devices, app events and support notes, and resets the identifiers Google’s tools know your device by. Purchase records and the closed account’s ID and dates stay, as described above.

Depending on where you live, you may also have the right to see the information we hold about you, have it corrected, receive a copy, object to how we use it, or restrict it. Write to [email protected] and include your support ID from Settings, since it is the only way we can find your account. You may also complain to your local data protection authority.

Security

Traffic between your device and our VPN servers is encrypted, and so is every request to our API. Sign-in tokens are stored only as hashes. Requests that grant access must be signed by a key held in your device’s Secure Enclave. Staff access is limited to the people who run the service and support, each with their own key. No system is perfectly secure, but collecting so little means there is little to lose.

This website

fablevpn.online sets no cookies and runs no analytics, ads or third-party scripts. Its fonts and images come from our own server, which keeps no log of visits. Cloudflare delivers each page to you and handles your request under its own privacy policy.

Children

FableVPN isn’t directed at children under 13, and we don’t knowingly collect information from them.

Changes

If we change this policy, we’ll post the new version here, with the date at the top changed to match.

Contact

Questions about privacy go to [email protected].