Privacy Policy

Last updated: July 2026

Hawk VPN ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, which third-party services we rely on, and what device permissions the Hawk VPN application requests. It applies to the Hawk VPN Android application and our website (hawkvpn.app).

The app is built with the Flutter framework. Below we disclose, in plain terms, every category of data and every third-party SDK involved so you can make an informed decision before using the service.

1. Information We Collect

1.1 Information you provide:

Account & invite data — if you bind contact details for invite rewards, or use an invite code, we process the associated account ID, subscription ID, invite code, and registration time.
Feedback content — when you submit feedback, we collect the issue type, your description, any contact method you choose to provide, and screenshots you voluntarily attach.
Files & images you select — files or images are only accessed when you actively pick them (for example, to import a configuration or attach a screenshot to feedback).

1.2 Information collected automatically:

Installation identifier — we use the Google Play App Set ID (and a locally generated ID) for account registration, login, and abuse prevention. We do not collect your real device serial number or IMEI.
Device & app information — device model, manufacturer, operating system version, app version, and package name, used for compatibility, troubleshooting, and analytics.
Network status — network type, connectivity/VPN state, and (where the system permits) the current Wi-Fi name (SSID) for connection diagnostics. Detecting the Wi-Fi name may require a location permission imposed by the operating system; we do not use it to determine your geographic location.
Connection metadata — connection timestamps, selected server/proxy node, subscription configuration, and traffic usage (in bytes) for quota management.
Diagnostic & crash data — crash stack traces, device model, OS version, app version, and runtime state collected when the app encounters an error.

1.3 Information we do NOT collect:

We do NOT log your browsing history, DNS queries, or destination IP addresses.
We do NOT monitor, record, or store the content of your internet traffic.
We do NOT collect your real name, or sell your personal data to third parties.

2. How We Use Your Information

Provide the VPN service — establish and maintain the VPN/proxy connection, manage your traffic quota, and keep the service running reliably via a foreground service and status notification.
Account & rewards — register and identify your account, verify invite codes, and distribute rewards to both inviter and invitee.
Service improvement & stability — analyze aggregated usage events and crash reports to improve performance and fix bugs.
Support — respond to feedback and resolve technical issues.
Advertising — when ad services are enabled, display banner and rewarded ads.

3. Third-Party SDKs

Hawk VPN integrates the following third-party SDKs. Each may process the data listed below in line with its own privacy policy.

SDK	Purpose	Data involved
Google AdMob / Mobile Ads	Banner and rewarded video ads	Advertising ID, device info, IP address, ad interaction events, diagnostic data
Firebase Analytics	Usage analytics	Device info, app usage events, country/region, crash context
Firebase Crashlytics (NDK)	Crash reporting	Crash stack traces, device model, OS version, app version, runtime state
Google Play services / App Set ID	Device & install identification for account registration and login	App Set ID, device-related identifiers
Flutter / Dart runtime	Core app framework	Base technical framework; not used on its own to collect data

Advertising is controlled by an in-app switch. When ads are disabled in a release build, the Google AdMob SDK does not serve ads or collect advertising data. When ads are enabled, Google AdMob may collect the advertising data described above.

For more information, see Google's Privacy Policy and Firebase Privacy and Security.

4. App Capabilities & Plugins

The app uses the following Flutter plugins and platform capabilities, which may access the data shown:

Capability	Purpose	Data involved
VPN Service	Establish the VPN / proxy connection	Connection status, proxy & node configuration, traffic statistics
Foreground service & notification	Keep the VPN running and show connection status	Runtime state, notification display
Boot receiver	Restore service/state after device restart	Startup event
App list query	Per-app proxy / access control (split tunneling)	List of installed applications
device_info_plus	Read device information	Device model, OS version, manufacturer
package_info_plus	Read app version	App version, package name
connectivity_plus	Detect network status	Network type, connectivity/VPN state
wifi_ssid	Detect current Wi-Fi name	Wi-Fi SSID (may require location permission)
shared_preferences	Local configuration storage	User settings, login token, local state
file_picker / image_picker	Select files or images for feedback/config	Files or images you actively choose
url_launcher	Open external links	Redirects to browser/store
app_links	Handle deep links	Link parameters used to open the app
dio	Network requests	Server API calls, feedback image upload, subscription fetch

5. Android Permissions

The app declares the following permissions. We request only what the features above require:

Permission	Why it is used
INTERNET	Connect to our servers and the VPN tunnel
ACCESS_NETWORK_STATE / ACCESS_WIFI_STATE / CHANGE_NETWORK_STATE	Detect and manage network connectivity
FOREGROUND_SERVICE / FOREGROUND_SERVICE_SPECIAL_USE	Keep the VPN connection running in the background
RECEIVE_BOOT_COMPLETED	Restore service/state after restart
QUERY_ALL_PACKAGES	Per-app proxy / split tunneling selection
POST_NOTIFICATIONS / POST_PROMOTED_NOTIFICATIONS	Show connection status notifications
REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	Prevent the system from killing the VPN service
BIND_VPN_SERVICE	Create and operate the VPN connection
MANAGE_DOCUMENTS	Access configuration/files you choose to manage

6. Data Storage & Security

Data is encrypted in transit using TLS and at rest where applicable.
VPN traffic is encrypted between your device and the configured VPN/proxy server using the selected tunneling protocol.
We retain connection metadata for a maximum of 30 days, after which it is automatically deleted.
Account and contact data are stored securely and used solely for the purposes described above.

7. Your Rights

Access — you can view your account ID, subscription, and invite statistics in the Profile page.
Deletion — you can request deletion of your account and all associated data by contacting us at @HawkVPN_Support on Telegram.
Opt-out — binding contact details and watching rewarded videos are optional. You can reset your advertising ID or limit ad personalization in your device settings.

8. Children's Privacy

Hawk VPN is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 13, we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Telegram Support: @HawkVPN_Support
Telegram Group: @HawkVPN_Group
Telegram Channel: @HawkVPN_official
Email: dev@cashcatapi.com