VPN Service Policy

This document describes the Plan B VPN service operated by Impeltech LLC: what it does, what data the service holds, what use of it is not allowed, and how we meet the requirements Apple and Google set for VPN applications. It supplements the Privacy Policy and the Terms of Service.

What the service is

Plan B VPN is a private access service. It is not a consumer VPN marketplace: there is no public sign-up, no country picker and no advertising-funded free tier.

• An administrator creates a profile and issues a short access code.
• The application exchanges that code for a tunnel configuration over HTTPS.
• All traffic from the device is then routed through an encrypted tunnel to our gateway, unless you choose to exclude specific applications on your own device.

The application is free. There are no purchases, subscriptions or payments inside it.

How the tunnel works

• Protocol: AmneziaWG, a WireGuard-derived protocol with traffic obfuscation.
• Encryption: ChaCha20-Poly1305 for payload, Curve25519 for key exchange, BLAKE2s for hashing — as specified by WireGuard.
• Each profile has its own key pair. The private key never leaves your device in readable form and is generated per profile.
• Gateways run in Frankfurt, Germany.
• On Android the tunnel is built with the system VpnService API. On iOS it is built with Apple's Network Extension (NEPacketTunnelProvider) API. We use no private APIs and no root or jailbreak requirement.

What we log

We do not log VPN traffic. Our gateways are not configured to record the destinations you connect to, your DNS queries, the contents of your traffic, or a history of your connections.

What the service does hold is limited to what is required to run a tunnel:

We state this plainly rather than claiming an absolute "zero logs": a working WireGuard-based gateway necessarily knows the current endpoint address of a connected peer while the peer is connected. What we do not do is write that to disk, keep it as history, or link it to the sites you visit — because we do not record the sites you visit at all.

Your traffic is not inspected or monetised

• We do not inspect, modify, filter or proxy the contents of your traffic.
• We do not insert, replace or remove advertising, and we do not redirect affiliate traffic.
• We do not inject scripts, certificates or content into pages.
• We do not sell bandwidth, do not operate the service as a peer-to-peer or residential proxy network, and do not allow anyone else to route traffic through your device.
• We do not sell or share personal data with data brokers or advertisers.

Acceptable use

Access is issued to a named person by an administrator. You must not use the service to:

• break any law that applies to you, or help someone else break it;
• attack, scan, disrupt or gain unauthorised access to systems or networks, including denial-of-service attacks, port scanning of third-party hosts and credential stuffing;
• send spam or bulk unsolicited messages;
• distribute malware, phishing pages or other harmful software;
• infringe copyright, trademarks or other intellectual property rights;
• transmit material that sexually exploits or endangers children;
• harass, threaten, defame or stalk anyone;
• circumvent sanctions or export controls, or use the service from a jurisdiction where doing so would put us in breach of United States law;
• resell, rent or share your access code with people it was not issued to.

We may suspend or revoke a profile that is used this way. Because access codes are issued individually, a revocation affects only that profile.

Government and law enforcement requests

• We respond only to requests that are valid under the law of the jurisdiction that binds us, or that reach us through a recognised channel of mutual legal assistance.
• We do not give any government or third party direct, unsupervised access to our servers.
• We can only produce data we actually hold. For VPN use that means, at most, a profile record and short-lived server access logs — not browsing history, not DNS queries and not traffic contents, because those are never recorded.
• Where the law allows it, we will tell the affected person before responding.

Transparency statement. As of the date at the top of this page, Impeltech LLC has received no government or law enforcement requests for user data, and has never been required to modify the service to allow the interception of user traffic.

Availability and support

The service is provided on a best-effort basis; we do not offer a guaranteed uptime level. If the service is unavailable or the tunnel misbehaves, write to info@impeltech.us or use the details on the Support page. There is no charge for the service, and therefore no refunds.

How this service meets store requirements

This section is written for reviewers at Apple and Google and states plainly how the application complies with the rules that apply to VPN software.

Apple App Review Guideline 5.4 (VPN apps)

• The application is published by Impeltech LLC, an organisation enrolled in the Apple Developer Program — not by an individual.
• The tunnel is created with Apple's Network Extension framework (NEPacketTunnelProvider); no private API is used.
• No tunnel is established until the person enters an access code issued to them and grants the system VPN permission in Apple's own consent dialog.
• What data is handled, and what is not, is published in the Privacy Policy, which is linked from the App Store listing and from this site.
• The application does not sell, use or disclose data to third parties for any purpose, and contains no advertising, analytics SDK or third-party tracker.
• The application does not violate local laws; where it is offered, it is offered as a private access service to named users.

Google Play policies

• VPN Service policy. Creating a VPN tunnel is the application's core purpose, not a secondary feature. It uses the Android VpnService API and declares that use in Play Console.
• Consent. No VPN connection is established until the person enters an access code issued to them and confirms Android's own VpnService consent dialog. Data handling is disclosed in the store listing's Data safety section and in the Privacy Policy, both available before installation.
• User Data policy. Data handling is limited to the access code and a randomly generated installation identifier; both are declared in the Data safety form, both are encrypted in transit and neither is sold or shared.
• Permissions. The application requests only INTERNET, ACCESS_NETWORK_STATE, POST_NOTIFICATIONS, FOREGROUND_SERVICE and FOREGROUND_SERVICE_SYSTEM_EXEMPTED. It does not request QUERY_ALL_PACKAGES: the list used for per-application exclusions is obtained through the launcher-intent query and never leaves the device.
• Data deletion. A route to request deletion of the profile and associated data is published at impeltech.us/legal/data-deletion and is reachable without installing the application.
• Device and network abuse. The application does not interfere with other applications, does not route traffic of other users through the device, and does not manipulate advertising or affiliate identifiers.

Contact

Impeltech LLC — info@impeltech.us — +1 646 243 9036 — Cheyenne, Wyoming, USA.