ZaZa VPN ZaZa VPN

Privacy Policy

Last updated: 20 August 2026 · Effective for ZaZa VPN users

1. Who we are

This Privacy Policy describes how ZaZa VPN (“we”, “us”, or “our”) collects, uses, and shares information when you use our mobile application and related website (the “Service”). ZaZa VPN is a VPN service primarily intended for users in Myanmar.

Contact for privacy questions: thawah.ryan@gmail.com

2. Scope

This policy applies to information processed through the ZaZa VPN app (iOS and Android) and this website. It does not cover third-party websites, services, or apps that you may visit while using a VPN connection.

3. Important note about location

ZaZa VPN does not ask for or require access to your device’s GPS or precise location permission. We do not collect your physical geographic coordinates through the device location services. Any “location” labels you may see in the app (for example, a server region name) refer to VPN server choices, not your personal GPS position.

4. Information we collect

Depending on how you use the Service, we may collect:

  • Account information. If you create or sign in to an account (for example with email or Google Sign-In), we may process identifiers such as your email address, display name, profile photo URL provided by the sign-in provider, and a unique user ID.
  • Device information. Device-related details needed to run the Service and manage device limits, such as platform (iOS/Android), device name/model/manufacturer, system version, device type, and a device identifier we generate or associate with your account.
  • Push notification tokens. If you allow notifications, we may store a Firebase Cloud Messaging (FCM) token so we can send service-related messages (for example account, subscription, or device alerts).
  • Subscription and usage summaries. Plan or subscription status, referral-related account links where applicable, and aggregated usage counters (such as bandwidth used) needed to enforce plans and show you your account status.
  • VPN session metadata (limited). Technical data needed to provide and support the VPN, such as which server you last connected to and connection status. This is used to operate the product — not to build a browse history of the websites you visit.
  • Local preferences. Settings stored on your device (for example via on-device preferences) to remember app choices.
  • Website basics. Our website is a static site hosted on Cloudflare. Cloudflare may process standard technical logs (such as IP address, browser type, and request timestamps) for security, reliability, and performance.

5. Information we do not intentionally collect

  • We do not request GPS / precise device location permission.
  • We do not sell your personal information to data brokers.
  • We do not use the VPN to build advertising profiles from the content of your private browsing traffic for third-party ads.

6. How we use information

We use the information above to:

  • Provide, maintain, and improve the VPN Service;
  • Authenticate you and secure your account;
  • Manage devices linked to your account;
  • Process subscriptions, entitlements, and related support;
  • Send optional service notifications you have allowed;
  • Detect abuse, fraud, and technical issues;
  • Comply with legal obligations where applicable; and
  • Respond to your requests and support messages.

7. Legal bases (where applicable)

Where required by law, we process personal data based on one or more of the following: performance of a contract (providing the Service), your consent (for example notifications), our legitimate interests (security, product improvement, preventing abuse), and legal compliance.

8. How we share information

We may share information with service providers who help us operate ZaZa VPN, such as:

  • Google Firebase / Google Cloud — authentication, database, cloud functions, and push messaging;
  • Google Sign-In — if you choose to sign in with Google;
  • Cloudflare — website hosting, CDN, and security for this site;
  • App stores — Apple App Store / Google Play handle their own purchase and account data under their policies when you download or subscribe through them.

We may also disclose information if required by applicable law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of ZaZa VPN, our users, or the public.

9. International processing

Although ZaZa VPN targets users in Myanmar, our infrastructure providers may process data in other countries. Where we transfer personal data internationally, we take steps appropriate to the services we use and the nature of the data.

10. Data retention

We retain account and related service data for as long as your account remains active and as needed to provide the Service, resolve disputes, enforce agreements, and meet legal requirements. You may request deletion of your account data by contacting us (see Contact below). Some residual records may remain in backups for a limited period.

11. Security

We use industry-standard measures to protect information, including encrypted transport (HTTPS/TLS) for our website and app communications with our backends, and access controls on our systems. No method of transmission or storage is 100% secure; please use a strong account password and keep your devices updated.

12. Children’s privacy

ZaZa VPN is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

13. Your choices and rights

Depending on applicable law, you may have the right to:

  • Access the personal information we hold about you;
  • Correct inaccurate information;
  • Request deletion of your account or certain data;
  • Withdraw consent where processing is consent-based;
  • Object to or restrict certain processing.

To exercise these rights, email thawah.ryan@gmail.com. You can also manage notification permissions in your device settings, and sign out or remove devices from within the app where those controls are available.

14. Third-party links and services

The Service may link to third-party sites or rely on third-party sign-in. Their privacy practices are governed by their own policies. We encourage you to review them.

15. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Continued use of the Service after changes become effective constitutes acceptance of the updated policy, except where additional consent is required by law.

16. Contact

If you have questions about this Privacy Policy or ZaZa VPN’s privacy practices, contact:

ZaZa VPN
Email: thawah.ryan@gmail.com

This document is a standard privacy notice tailored to ZaZa VPN’s current features. It is not legal advice. Consider having a qualified lawyer review it for your specific business and jurisdiction before relying on it for store submissions or commercial launch.