Last updated 29 September 2026

Privacy policy

This policy explains what Shan Gyi VPN collects when you use our Android app or our browser extension, why we need it, who processes it for us, and how to have it deleted.

Who we are

Shan Gyi VPN is an independent service. The Android app is distributed from this website, not through an app store. The browser extension for Chrome, Edge and Brave is distributed through the Chrome Web Store. You can reach us at support@shangyivpn.com.

What we collect

• Your account: your email address, the display name you choose, and an account ID. If you sign in with a password, it is handled by our sign-in provider and stored only in hashed form; we never see it.
• If you sign in with Google: the email address and name on your Google account, which Google shares with us when you choose to sign in.
• If you sign in with Telegram or use our Telegram bot: your Telegram user ID, username and name, and the chat you use with our bot. If you buy a plan through the bot, the payment screenshot you send stays in Telegram; we keep only Telegram’s reference to it, to show it to our team.
• Your plan: plan type, status, start and expiry dates, and a history of changes to it, including notes our team adds when activating a plan, such as a payment reference.
• Your devices: for each phone or browser that connects, a random identifier the app or extension creates when it is installed, a device name (the Android version, or the browser and operating system, such as “Chrome · Windows”), when the device was first and last used, and a VPN credential issued to that device.
• Support messages: anything you send us by email, Telegram or Messenger.

Your language, motion preference, and the speed and data totals shown in the app stay on your device and are not sent to us.

What we don’t collect

We don’t record the websites or apps you use through the VPN, your DNS requests, or the content of your traffic. The app and the extension contain no advertising or analytics SDKs, and the extension does not read or change the pages you visit.

Your VPN connection

On Android, traffic is encrypted between your phone and our server. In the browser extension, only that browser’s traffic goes through an encrypted (HTTPS) proxy on our server; other apps on your computer connect directly. Our servers do not keep access logs. When a connection fails, server error logs can contain technical details such as an IP address; we use these only to keep the service working.

The browser extension

The extension keeps your sign-in session, your chosen server and its install identifier in the browser’s extension storage on your computer. While you are connected it sets the browser’s proxy to our server, answers only our own server’s login request, and turns on the browser’s WebRTC protection so websites can’t see your real IP address; disconnecting or signing out removes these settings. Every few minutes it checks with us that your plan is still active. The use of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.

How we use your information

To sign you in, check whether your account has an active plan, enforce the device limit, give each of your devices its own access, answer support requests, and prevent abuse. We don’t sell your information, transfer it for purposes unrelated to the service, or use it for advertising or credit decisions.

Service providers

• Supabase hosts sign-in, our database and server functions, in its Tokyo region.
• Cloudflare hosts this website, relays the app’s and extension’s requests to Supabase through api.shangyivpn.com (it does not store them), and routes email sent to our support address.
• DigitalOcean runs our VPN servers in the United States and Singapore.
• Resend sends our sign-in and password-reset emails.
• Google and Telegram provide sign-in when you choose them, and Telegram carries messages with our bot.
• GitHub hosts the Android app files you download from this website.

How long we keep it

Account, plan and device information is kept while your account exists. Removing a device from your account deletes its record and its VPN credential. When you delete your account, its information is removed from our database immediately; copies in our providers’ backups can remain for a limited period until those backups are overwritten. Removing the extension from your browser deletes what it stored there.

Deleting your data

Delete your account in the app under Account → Profile → Delete account, or follow the steps on our account deletion page if you no longer have the app.

Security

Connections to our services are encrypted. Each account can read only its own records, and VPN credentials are held server-side and never exposed to other users.

Children

Shan Gyi VPN is not intended for children under 13, and we don’t knowingly collect their information.

Changes

If this policy changes, we’ll update this page and its date above.

Questions about this page? Email support@shangyivpn.com.