← Back to portfolio

// Privacy Policy

IRIY

App: Iriy Last updated: July 31, 2026 Effective: July 31, 2026
This Privacy Policy describes how the Iriy application ("we", "our", or "the app") handles information when you use it. Iriy is a client application: it connects to servers you provide by importing your own configuration. We do not operate any VPN servers and have no access to your traffic. This document explains what data the app accesses, where it is stored, and your rights.

01 Information We Do Not Collect

Iriy does not collect, store, or transmit any personally identifiable information to us or to any server under our control. Specifically:

  • No account, name, email address, or credentials — the app has no registration and no backend of its own
  • No device identifiers (IMEI, advertising ID, etc.)
  • No location data
  • No browsing history, DNS queries, visited domains, or traffic contents
  • No contacts, calendar, photos, or files beyond a configuration file you explicitly select
  • No usage analytics or crash reporting sent to us

02 Your Traffic

When the tunnel is active, your network traffic is routed to the server specified in the configuration you imported. We do not own, operate, or have access to those servers, and we do not log, store, inspect, or analyse your traffic in any way.

The operator of the server you use may be able to observe traffic passing through it. Please refer to the policy of whoever provides your configuration.

Iriy does not include, sell, or grant access to any servers. It only reads configurations you already have.

03 Data Stored Locally on Your Device

The app stores the following data exclusively on your device, in its private application storage:

  • Configurations you import — server addresses, ports, protocol parameters and keys or passwords contained in your config file, link, or QR code. Stored in a local Room database.
  • Per-app routing rules — package names and labels of the apps for which you have chosen a routing mode (VPN / direct / auto). Only apps you explicitly change are saved.
  • Traffic counters — aggregate byte totals and speed samples shown in the app's statistics.
  • App settings — theme, language, and similar preferences, saved via Android DataStore.
  • Server country cache — the country code resolved for a server host, kept locally to avoid repeated lookups.

None of this data is uploaded anywhere. It is removed when you delete the relevant profile or uninstall the app.

You can clear all local data at any time through your device's app settings:
Settings → Apps → Iriy → Clear Data

04 Network Requests & Third-Party Services

Apart from your own tunnel traffic, the app makes only the following requests:

  • Subscription updates — if you add a subscription link, the app periodically fetches the configuration list from that URL, which you supplied. No other data is sent with the request.
  • Server country lookup (ipwho.is) — used only to display a country flag for a server. The request contains only the server's address, is made while the tunnel is active (so the service sees the server's IP, not yours), and the result is cached locally. No user traffic, app list, or routing rules are ever sent.
  • Connectivity check — after connecting, the app sends a small request through the tunnel to well-known connectivity-check endpoints to verify the connection actually works. It carries no personal data.

Your IP address may be visible to these services as part of standard internet communication; please refer to their own privacy policies for details.

05 Android Permissions

The app requests only the permissions it needs to function:

  • VPN service (BIND_VPN_SERVICE) — required to create the local tunnel interface. Granted by you through the system dialog and revocable at any time in Android settings.
  • Internet & network state — to establish the connection and detect network changes.
  • Foreground service — to keep the tunnel alive while the app is in the background, with a persistent status notification.
  • Notifications — connection status only. No promotional messages.
  • Camera — used solely to scan a configuration QR code, on the QR screen. No images are saved, stored, or transmitted.
  • Installed apps list — read locally to display the per-app routing screen. This list never leaves your device and is not transmitted anywhere.

06 No Third-Party Advertising or Analytics

Iriy does not integrate any advertising networks, analytics SDKs (e.g., Firebase, Google Analytics, Crashlytics), or social media trackers. No data is shared with any third party beyond the network requests described in Section 04.

07 Open Source Components

Iriy uses the sing-box engine, distributed under the GNU General Public License v3. The corresponding source code and attribution are available in the app and in the project repository. Third-party components process data only on your device.

08 Children's Privacy

Iriy does not knowingly collect any information from children under the age of 13. The app contains no content directed at children and collects no personal data from any user.

09 Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by an updated "Last updated" date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of those changes.

10 Contact

If you have any questions or concerns about this Privacy Policy, please contact us:

Timur Ivanov · Tivan Game Studio
review4coolgames@gmail.com