This Privacy Policy explains how the HostPika Proxy VPN Android app ("the App") handles information when you use it. It applies only to the App itself. Your HostPika account, orders, and billing are covered separately by HostPika's main Privacy Policy.
The App is a connection client for HostPika's own paid proxy service (residential, datacenter, and mobile plans). It requires an active HostPika proxy plan, purchased through our Telegram bot (@hostpika_bot) or at hostpika.com, before it can connect to anything.
When you add a profile in the App — by pasting the credentials HostPika sent you, typing them in manually, or scanning a QR code — the App stores the following directly on your device, in Android's encrypted app storage:
This information stays on your device. The App does not send it to any HostPika server of its own for the purpose of storing it — it is used only to open a direct connection from your device to the proxy server address in that profile. (See "Device Registration" below for the one case where your username is sent to HostPika's server — to enforce your plan's device limit, not to store your credentials.)
Each HostPika proxy plan allows a limited number of devices to connect at once. To enforce this, right before the App connects (and periodically while connected), it sends the following to HostPika's own server:
HostPika stores this on our server against your subscription — device identifier, phone model, OS/App version, most recent IP, how many times you've connected, and when you were last seen — so we can show you (and, where relevant, an admin reviewing abuse/fraud reports) which devices are using your plan, and so we can block a device if your plan's device limit is reached or a device is identified as abusive. This is required for the App's device-limit feature to work and cannot be turned off independently while the feature is enabled on your plan.
The App gives you tools to move your own data off the device, entirely at your own choice — none of these run automatically or send anything to a HostPika server:
When you're connected, the App can show you the IP address, city, region, ISP, and timezone your traffic is currently exiting through. To do this, the App connects directly through your proxy to ipinfo.io, a third-party IP-lookup service, and displays the result back to you. Because this request is made through your proxy connection, ipinfo.io sees the proxy's exit IP, not your device's own IP. HostPika does not control ipinfo.io's own data practices; you can review ipinfo.io's privacy policy on their website. No HostPika account information is included in this request.
If you use the QR scanner to import a profile, the App accesses your camera only while the scanner screen is open, to read the QR code shown to you. No photo or video is stored, saved to your device, or transmitted anywhere — the camera feed is processed on-device purely to decode the QR code's text.
The App uses Android's standard VPN framework (VpnService) to route your device's traffic to the proxy server in your active profile. The App itself does not read, log, or store the content of that traffic. However, because a proxy server must know where to send your traffic, the proxy/relay infrastructure that HostPika operates — which is a separate system from the App — necessarily sees:
HostPika's proxy servers do not decrypt or inspect the contents of encrypted (HTTPS/TLS) traffic passing through them. This data handling is the same as any proxy or VPN service requires to function and to bill usage accurately, and it is governed by HostPika's main Privacy Policy and Terms of Service.
Some purely UDP-based traffic patterns may not be supported by every plan; this is a network capability limitation of the upstream proxy pool, not a data-collection matter.
The App may show banner advertisements, served through Google AdMob, and occasionally a HostPika-selected sponsor banner. This can be turned off entirely from our side for any build; when it's on:
The App may use OneSignal to deliver push notifications (for example, about your subscription or offers). If enabled, OneSignal's SDK registers your device for push delivery and, as part of standard push-notification delivery, receives a device push token and basic device information (OS version, app version, locale, timezone) under OneSignal's own privacy policy. You can disable notifications for the App at any time from your phone's system settings.
The App does not request broad storage access (no "manage all files" permission) — exporting, importing, and saving a QR image all use Android's own Share sheet, document picker, and Photos APIs, which don't require it.
Uninstalling the App removes all profiles and settings stored on your device immediately. You can also delete individual saved profiles at any time from within the App. To request deletion of your HostPika account, billing data, or device-registration records held on our servers, contact us through the Telegram bot (@hostpika_bot) or by email below.
The App is not directed at children under 13, and we do not knowingly collect information from children under 13.
We may update this policy as the App changes. Material changes will be reflected by updating the date at the top of this page. Continued use of the App after changes take effect means you accept the updated policy.
Questions about this policy or your data? Email support@hostpika.com or message our Telegram bot @hostpika_bot.
Questions about this document? Contact our legal team →
