Legal
Privacy Policy
In force from 20 October 2026
This policy covers the Runvord VPN app for iPhone (the “app”), the VPN service it connects to and this website. All three are run by K.D.E.P. INVESTMENT LTD, a company of the Republic of Cyprus (address: 17 Megalou Alexandrou, Aglantzia, Nicosia 2121, Cyprus), which decides how the information below is used and is its controller under the EU General Data Protection Regulation (“GDPR”) and Cyprus Law 125(I)/2018.
On record
| What | Kept |
|---|---|
| Device registration | While the registration exists; erased on request |
| Private address inside the VPN | While your access lasts, then 30 days |
| Connection reports | 30 days |
| E-mails you send us | Up to 24 months after the matter is closed |
Never on record
- your name, e-mail or phone number, unless you write to us
- your Apple Account or payment details
- your IP address
- the sites you visit, your DNS lookups or the contents of your traffic
- contacts, photos, location or advertising identifier
1. Registering your iPhone
On first launch the app creates two key pairs on your iPhone: one to sign its requests, one to build the tunnel. The private keys stay in your iPhone’s Keychain and never leave it. The app sends the public keys, the platform (iOS), the iOS version and the app version to our central server in Frankfurt, Germany. The server answers with a random device ID that is not linked to your name, e-mail or Apple Account.
When you connect, our server gives your device a temporary private address inside the VPN. Your public IP address is not stored with it.
2. Connection reports
After each connection attempt the app sends a short technical report to our central server: whether the connection worked, the server, port and protocol it used, how long each step took, any error code, the app and iOS version and the network type (Wi-Fi or mobile data). Reports carry the device ID only. The public address your iPhone sends them from is discarded on arrival. We use the reports solely to find and fix connection problems, and delete them after 30 days.
3. While you are connected
Your traffic leaves through the VPN server you chose. That server has to see the IP address your iPhone uses in order to carry the traffic, but it does not record it, and it keeps nothing about the sites you open or what you send. DNS lookups are passed on by the VPN server to the public resolvers of Cloudflare (1.1.1.1) and Quad9 (9.9.9.9), so they arrive from the server, not from you.
4. Writing to us
If you e-mail us, we receive your address and whatever you include, and use it only to deal with your message. Our e-mail runs on Google Workspace.
5. This website
The website sets no cookies and has no analytics or advertising. It is hosted by Hetzner Online GmbH on a server in Helsinki, Finland, and delivered through Cloudflare.
6. Legal grounds
Registering your iPhone, connecting it and fixing connection problems are needed to provide the service you asked for (Article 6(1)(b) GDPR). Answering e-mails falls under the same ground, or our legitimate interest for business contacts (Article 6(1)(f)). We do not sell personal data, profile you or use your data for advertising.
7. Who helps us
DigitalOcean operates the cloud machines behind our central server and VPN servers (the Netherlands, Germany, the United Kingdom, the United States, Canada, Singapore and Australia). Hetzner hosts this website, Cloudflare provides DNS for our domains, and Google provides our e-mail. They act on our instructions. Where data reaches a country without an EU adequacy decision, we rely on the European Commission’s standard contractual clauses. Apple distributes the app under its own privacy policy.
8. Your rights
You may ask us for a copy of your data, to correct or erase it, to restrict or object to its use, or to receive it in a portable form. Since we do not know who you are, tell us roughly when you started using the app so we can find your device’s records. Deleting the app does not erase the registration on our server — write to us for that. We reply within one month. You may also complain to the Commissioner for Personal Data Protection in Cyprus or to the authority in your own EU country.
9. Changes
If a later version of the app handles data differently, we will update this page before that version is released. The date at the top shows when the current text took effect.
10. Contact
K.D.E.P. INVESTMENT LTD
Address: 17 Megalou Alexandrou, Aglantzia
Nicosia 2121, Cyprus
support@kdep-investment.com