Privacy Policy

The “FlyFly VPN” app is provided and operated by Moonscape Exploration Technologies Inc. (hereinafter referred to as “we,” “us,” or “our”).

Last Updated Date: September 10, 2026
Effective Date: September 10, 2026

We respect user privacy and protect information security. We process information only as necessary to provide the core services of FlyFly VPN and support the actual operation of its features. This Policy explains the scope, method, and purpose of each category of information processing so that you can understand how your information is handled.
We follow the principles of lawfulness, fairness, necessity, good faith, and data minimization. We will not refuse to provide basic services merely because you decline to provide non-essential information or permissions, although features that depend on that information or permission may be unavailable. When the App directs you to a third-party page, app store, external browser, or system settings page, the third party may process your personal information under its own privacy policy. Please review and confirm that policy separately.

Basic Startup and Device Identification
FlyFly VPN currently provides its services through a guest mode and does not require you to register with a name, phone number, or email address. To recognize the same device and maintain a guest identity and related service settings, the App generates a device UID and displays it as the account identifier within the App. Different devices generate different UIDs. A UID on the same device may remain unchanged after the App is restarted or reinstalled. The UID is used to maintain the guest identity, troubleshoot service issues, and prevent misuse. It is not used for advertising tracking.
Device and App Information
To support App startup, version compatibility, configuration loading, compatibility management, and troubleshooting, we may process necessary technical information such as device type and model, operating system and version, App version, language, time zone, network status, App status, crash information, error information, and connection success rates.
Network Services and Request Information
When you use network services, request server lists, load configurations, establish a VPN connection, or submit diagnostic information, our servers may receive your IP address, network type, request status, and necessary device-environment and error information. We use this information to provide the service, protect security, troubleshoot failures, and improve performance.
Country or Region Information
The App may determine your country or region to evaluate service availability, configure session duration, display region-appropriate banners, and provide relevant servers and service settings. Where permitted and available through the operating system, the App first uses the base-station country or mobile-network country. If that information is unavailable, the App uses the current network IP address to determine the country or region. We do not request precise GPS location for these purposes or use this information to build a precise movement history.
VPN Permission and Connection Information
When you use the connection feature, FlyFly VPN uses VPN capabilities provided by operating systems such as iOS and Android to create and manage a VPN connection. To establish, maintain, and terminate a connection, the App may process the server selected by you or automatically selected by the system, connection status, connection result, reason for failure, session duration, remaining countdown time, server availability, server load, connection performance, and temporary network information necessary to provide the connection.
VPN Traffic and No-Logs Principle
Other than real-time processing necessary to transmit VPN traffic, we do not record, retain, or analyze your browsing history, lists of websites visited or apps used, online activity content, or the content of communications or files transmitted through the VPN for the purpose of identifying a particular user. We do not use VPN traffic content for advertising or profiling. To maintain network security, block attacks, troubleshoot failures, or comply with applicable law, we may process aggregated data, de-identified data, or security-incident data to the extent and for the period reasonably necessary.
Server, Configuration, and Banner Data
The App retrieves server lists, server groups, server load information, session-duration rules, update policies, banner settings, and other service configurations from our servers. To improve loading speed, certain banners and settings may be cached locally and updated when new cloud configuration becomes available. Selecting a banner may launch an external browser and open the configured web address.
Feedback Information
When you select “Feedback,” the App may open your device’s email application and prefill the recipient address. We receive your email address, message, attachments, and other information you voluntarily provide only if you choose to send the email. We use that information only to respond to inquiries, address issues, improve the product, and maintain necessary communication records.
Cookies and Local Storage
If you visit the official FlyFly VPN website, we may use cookies or similar technologies necessary to maintain website functionality. The App may also use local storage for server selections, banner caches, App configuration, and other necessary status information. If the website uses non-essential analytics or advertising cookies, we will provide additional notice and choices as required by applicable law.

We process information only for the following purposes:
To provide, establish, maintain, and terminate VPN connections.
To select available servers automatically or manually and display server load and connection status.
To recognize a guest identity and maintain its UID and related service settings.
To configure service availability, connection duration, servers, and page content based on country or region.
To load server lists, banners, update policies, and other service configurations.
To diagnose crashes, connection failures, performance problems, and compatibility issues.
To protect our servers, network nodes, App, and users and prevent fraud, attacks, and misuse.
To respond to feedback and user requests.
To comply with applicable law and respond to valid government, regulatory, or judicial requests.
If we wish to use information for a new purpose that is incompatible with those described above, we will provide additional notice and obtain consent again where required.

Android Permissions
VPN Permission: Used to create, manage, and terminate VPN connections. If you decline this permission, the VPN connection feature will be unavailable. You can manage the permission through your system settings.
Network Status: Used to determine network availability, request servers and configurations, establish connections, and recover or terminate a connection when the network changes.
External Browser and Email Launch: Used to open a corresponding webpage or email application when you select a banner, User Agreement, Privacy Policy, or Feedback option.
iOS Permissions
VPN Configuration Permission: Used to create, manage, and terminate system VPN configurations. If you decline this permission, the VPN connection feature will be unavailable. You can manage the permission through your system settings.
Network Status: Used to determine network availability, request servers and configurations, establish connections, and recover or terminate a connection when the network changes.
External Browser and Email Launch: Used to open a corresponding webpage or email application when you select a banner, User Agreement, Privacy Policy, or Feedback option.
Collection and Processing Frequency
Device and App Information: Generally processed as needed when the App starts or is updated, or when a crash, network abnormality, or connection failure occurs. We reduce privacy impact through frequency limits, de-identification, and log minimization.
Country or Region Information: Generally determined as needed when the App starts, checks service availability, configures session duration, or updates server or banner settings. We do not continuously collect precise location for these purposes.
VPN Connection Information: Processed only as needed when you initiate a connection, switch servers, experience a change in connection status, end a connection, or encounter a failure.
Local Cache and Configuration: Read or updated when the App starts, you refresh it manually, or cloud settings change. You can clear relevant data through the App-data controls provided by your operating system.

Depending on the law that applies in your country or region, a device UID, IP address, country or region result, connection information, or security-incident information may be considered personal information or sensitive personal information when combined with other data. Improper processing may affect your privacy or other lawful rights. We therefore process this information only where necessary to provide VPN connections, maintain a guest identity, configure the service, protect security, and troubleshoot failures.
FlyFly VPN does not request precise GPS location to determine a country or region and does not build a precise movement history for that feature. Where system authorization or separate consent is required by law, we process information only after obtaining the applicable permission or consent. You may decline or withdraw permission. Doing so will not affect features that do not depend on that permission, but VPN connections or related features may become unavailable.

We protect your personal information and share, disclose, or entrust its processing only in the following necessary circumstances and in accordance with the principle of minimum necessity:
Entrusted Third-Party Service Providers: Cloud infrastructure, servers, CDNs, network infrastructure, crash analytics, performance monitoring, security protection, application distribution, email, and user-support providers process only the information necessary to provide the relevant feature. We require them to comply with confidentiality and security obligations and not use information for purposes outside the agreed scope.
Compliance Requirements: We may provide necessary information as required by applicable law, regulatory requirements, or valid requests from judicial or government authorities. We will protect your information to the extent permitted by law.
Your Explicit Consent: We may use or share information within the agreed scope after receiving your active and clear authorization.
Merger, Division, Dissolution, Bankruptcy, Asset Transfer, or Similar Transaction: If personal information is transferred, we will require the new holder to remain bound by this Policy or provide no less protection. If the new holder changes the purpose, method, or scope of processing, it will provide additional notice and obtain any consent required by law.
We do not provide your personal information to third parties solely for the purpose of selling it.

Operating-System VPN Capabilities
FlyFly VPN uses VPN frameworks or system interfaces provided by operating systems such as iOS and Android to create and manage connections. The operating system and device manufacturer may process system diagnostics or permission-status information under their own privacy policies.
Cloud and Network Infrastructure
We may use cloud infrastructure, servers, CDNs, and network services to provide server lists, configuration loading, connections, content distribution, security protection, and operations. Relevant providers should process information only to the extent necessary to provide their services.
Diagnostics and Security Services
We may use diagnostics, performance-monitoring, or security services to investigate crashes, connection failures, performance problems, and security incidents. Depending on the services actually integrated, they may process device type, system version, App version, network status, error logs, exception stacks, and necessary session information.
Email and External Pages
When you voluntarily send a feedback email or open an external page, the email provider, browser, and destination website may process information under their own privacy policies.
If we add a third-party SDK or service that independently collects personal information, we will update this Policy as required by law, identify its name, provider, processing purpose, and information scope, and obtain your consent where required.

We implement reasonable technical and organizational measures appropriate to the service, including encryption in transit, access controls, authentication, audit logging, vulnerability remediation, data minimization, and confidentiality requirements, to protect information against unauthorized access, disclosure, alteration, loss, or misuse.
No method of transmission over the internet or electronic storage is completely secure. If an information-security incident occurs or may occur and affects users’ rights, we will take prompt remedial action and notify affected users or the relevant authorities where required by applicable law.

Subject to applicable law, you may have the following rights:
Right to Know and Access: Learn about and request access to the personal information we process.
Right to Correction: Request correction of inaccurate or incomplete information.
Right to Deletion: Request deletion of personal information, except where retention is required by law or another lawful basis applies.
Right to Restrict or Object to Processing: Request restriction of or object to certain processing as permitted by law.
Right to Withdraw Consent: Withdraw consent previously given. Withdrawal does not affect processing completed before the withdrawal.
Right to Data Portability: Request a portable copy of information where the conditions under applicable law are met
Right to Complain: Lodge a complaint with a competent supervisory authority.
Request Processing Mechanism: You may submit a request by emailing flyflyglobal@gmail.com. To protect information security, we may need to verify the relationship between the requester and the relevant UID or information. We will respond within the period required by applicable law. If the UID or other necessary information is deleted, the guest identity, previous settings, or certain features may no longer be available.

FlyFly VPN is not directed to children below the minimum legal age in their country or region. We do not knowingly collect personal information from children who do not meet the applicable age requirement.
If a parent or guardian believes that a child has provided personal information without appropriate authorization, please contact us at flyflyglobal@gmail.com. After verification, we will delete the information or take other appropriate action as required by law.
XI. VPN Service Use and Allocation of Responsibility
FlyFly VPN is a network-connection utility. VPN connection speed, stability, server availability, and access to external webpages may be affected by the user’s network, device operating system, carrier, server load, third-party services, and other external factors. We therefore cannot guarantee that a connection will be uninterrupted or free of delay at all times or in every environment.
You are responsible for complying with applicable law in your location and using the App appropriately. FlyFly VPN does not change your responsibility for your online activities or their legality. Nothing in this section limits any right or responsibility that cannot be excluded or restricted under applicable law.

Storage Method
We may process information using servers, network nodes, and service providers located in different countries or regions. We use encryption, access controls, and other reasonable measures to protect information security.
Storage Duration
A device UID is retained while necessary to maintain a guest identity and provide related services. A country or region result is retained while needed to provide region-based configurations and is deleted, overwritten, or de-identified when settings are updated or it is no longer needed. Technical and diagnostic data is generally retained for no longer than 30 days unless a longer period is necessary for a security investigation or required by law. Feedback and communication records are retained for as long as necessary to resolve the issue, maintain reasonable records, or comply with legal obligations.
Deletion and Service Termination
Following a valid deletion request or termination of the service, we will delete or de-identify relevant personal information within a reasonable period unless continued retention is required by applicable law. After a UID is deleted, the guest identity and related settings may not be recoverable.
Local Storage
The App may store a UID, server selections, banner caches, App configurations, and necessary status information on your device. You can manage local data using the application-data, clearing, or uninstall controls provided by your operating system. Whether the UID is removed when the App is uninstalled depends on how it is generated and stored.
International Processing
When information is processed outside your country or region, we implement reasonable safeguards required by applicable law, such as entering into data-protection agreements, using applicable standard contractual clauses, conducting security assessments, or relying on other lawful transfer mechanisms.

We may update this Policy to reflect changes in law, product features, information-processing practices, third-party services, or operational needs. The updated Policy will be published through the App, website, or another appropriate channel and will state the latest revision date.
If an update materially affects user rights or our information-processing practices, we will provide notice through an in-App prompt, announcement, or another prominent method and obtain consent again where required by law. If we discontinue the App or related services, we will stop collecting information and delete or de-identify information we hold as required by law, except where continued retention is legally required.

VPN services may be affected by the network environment, system permissions, device status, carrier policies, server load, third-party services, and unforeseen events. This may result in connection delays, interruptions, unavailable servers, or an inability to access external pages.
When you voluntarily open a third-party page, app store, external browser, system settings page, or email application through the App, the relevant third party processes information under its own rules. Please protect your device UID, feedback email content, and other information, and confirm the recipient and destination address before submitting information.

If you have questions, suggestions, or complaints concerning this Privacy Policy, our processing of personal information, permission use, third-party services, or your rights, you can contact us as follows:
Operating Entity: Moonscape Exploration Technologies Inc.
Recipient: FlyFly VPN Team
Address: 1500 N GRANT ST, STE R, DENVER CO 80203, US
Postal Code: 80203
Contact Email: flyflyglobal@gmail.com
After receiving your request and completing any necessary identity verification, we will process and respond within the period required by applicable law.

This Privacy Policy will be interpreted and applied according to the principles of fairness, reasonableness, lawfulness, necessity, and good faith. Matters not addressed in this Policy will be handled in accordance with applicable law and the principles of respecting users’ rights and processing only the minimum information necessary.