D

Delay Vilay VPN

homesupport

privacy

~ effective 2026-05-06

Effective date

This Privacy Policy is effective as of May 6, 2026, and governs the collection, use, and protection of personal data within the Delay Vilay VPN application. We are committed to maintaining transparent practices regarding user information. This policy was last updated on May 6, 2026. Any future changes will be communicated through in-app notifications and on our website at delayvilayvpn.com.

Who we are

Delay Vilay VPN is a mobile application developed and operated by Kestrel Technologies, headquartered in the United States. We provide a comprehensive platform combining VPN connectivity, an endless memory match gaming experience through the Match Signals feature, and travel planning utilities including packing list management. Our mission is to deliver secure, private internet access alongside entertainment and productivity tools in a single, cohesive application. We respect your privacy and adhere to applicable data protection regulations across all jurisdictions where our app operates. This Privacy Policy applies to all users of Delay Vilay VPN regardless of geographic location or device.

Data we collect

Delay Vilay VPN collects the following types of data to deliver our services effectively. Game Data includes MatchEndlessRun records containing gridSize, startedAt, endedAt, and elapsedSeconds for performance tracking. Travel Planning Data includes PackingList records with tripType and durationDays, PackingItem entries identified by category and name, PackingTemplate selections, and ForgottenItem reports logging tripName and reportedDate. VPN connectivity data includes your selected server location and connection timestamps, though we do not log your browsing activity or IP address during VPN sessions. Achievement Data records PackAchievement unlocks with unlockedAt timestamps. Optional data includes your device identifier and app version for crash reporting and analytics. All data collection is performed on-device unless explicitly transmitted for cloud backup.

How we use it

We use collected data exclusively to enhance your experience within Delay Vilay VPN. Game Data from the Match Signals killer feature—your endless memory match clearance times and grid configurations—helps us optimize game difficulty and track your personal bests. Travel Planning Data enables PackingList customization, PackingTemplate suggestions based on your tripType, and ForgottenItem tracking to improve future packing. VPN data allows us to maintain server performance, detect and prevent abuse, and ensure network stability. PackAchievement records let us recognize your accomplishments and suggest new gaming challenges. Device and crash analytics help us identify and fix bugs. We never use this data for marketing purposes, behavior tracking for third parties, or any commercial gain beyond operating the app itself.

Data handling commitment

Your privacy is our top priority. Delay Vilay VPN implements industry-standard security practices to protect your personal information from unauthorized access, alteration, disclosure, or destruction. Data is stored securely on your device by default; any transmission to our servers occurs only when you explicitly enable cloud features. We do not sell, use, or disclose user data to third parties for any purpose. Our encryption standards meet or exceed NIST guidelines. We audit our security practices quarterly and maintain records of all access to user data. User consent is required before any data is collected beyond what is necessary for core app functionality. Your trust is fundamental to our operations.

Third-party processors

To deliver our services, we partner with the following third-party processors: Apple (iOS framework services and crash reporting via Sentry)—provides infrastructure and diagnostic tooling. Firebase Analytics (Google subsidiary)—helps us understand app usage patterns and identify performance bottlenecks. Amazon Web Services (AWS)—hosts our optional cloud backup servers for PackingList and MatchEndlessRun data. OpenAI API—powers optional AI-driven PackingTemplate suggestions. Each processor is contractually obligated to maintain your data confidentially and securely. Processors receive only the minimum data necessary for their specific function. We do not grant them permission to use your data for their own purposes. We confirm these third parties provide the same or equal protection for user data as outlined in this policy. All third-party agreements include data protection clauses aligned with GDPR and CCPA standards.

Retention schedule

Data retention varies by category to balance user benefit with privacy protection. MatchEndlessRun data is retained for 24 months to allow historical game performance analysis and personal records. PackingList, PackingItem, and PackingTemplate data are retained indefinitely until you manually delete them, enabling persistent travel planning across multiple trips. ForgottenItem data is retained for 12 months following your reported date to help identify patterns in forgotten items. PackAchievement records are retained for 36 months to celebrate your accomplishments and milestones. VPN connection logs are retained for 7 days for security and abuse prevention only, then permanently deleted. Device identifiers and crash reports are retained for 90 days, then automatically purged. You may request deletion of any data category at any time through the Settings tab.

International data transfers

If you are located outside the United States, your data may be transferred to and stored in the United States where Delay Vilay VPN operates primary servers. We ensure such transfers comply with applicable international frameworks, including Standard Contractual Clauses under GDPR and similar mechanisms recognized by other jurisdictions. Users in the European Economic Area have the right to object to such transfers and request data remain within EU boundaries. We maintain data processing agreements with all service providers ensuring adequate safeguards during international transmission. Transfers occur only when necessary for service delivery or user consent. You may contact us regarding your data's geographic location and processing.

Your GDPR rights

If you are subject to the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data. Right of Access allows you to request a copy of all data we hold about you. Right of Rectification enables you to correct inaccurate or incomplete information. Right of Erasure permits you to request deletion of your data, except where legal obligations require retention. Right of Data Portability allows you to receive your data in a structured format and transmit it to another service. Right to Object lets you oppose specific processing, including analytics and optional cloud features. Right to Restrict Processing allows you to limit how your data is used. We honor all GDPR requests within 30 days of receipt. Submit requests via [email protected] with your full name, app account identifier, and specific request details.

California privacy rights

Residents of California have rights under the California Consumer Privacy Act (CCPA). The Right to Know allows you to request what personal information we collect, the categories of sources, and purposes. The Right to Delete permits you to request erasure of data we have collected, subject to legal exceptions. The Right to Correct enables you to request amendment of inaccurate information. The Right to Opt-Out of Sale or Sharing allows you to direct us not to sell or share your data—though Delay Vilay VPN does not engage in these practices. The Right to Non-Discrimination ensures you will not face unfavorable treatment for exercising CCPA rights. California residents may submit requests through the Settings app or by emailing [email protected]. We respond within 45 days.

Security and breach notification

Delay Vilay VPN employs end-to-end encryption, secure key management, and regular penetration testing to protect your data against unauthorized access. We maintain incident response protocols and conduct security audits quarterly. Despite our efforts, no system is completely secure; thus we cannot guarantee absolute protection. In the unlikely event of a data breach, we will investigate immediately and notify affected users within 72 hours of discovery through in-app notification and email. Breach notifications will include the nature of the breach, types of data affected, recommended protective actions, and contact information for further questions. We will cooperate fully with regulatory authorities and provide required disclosures to government agencies as mandated by law. Users are encouraged to enable multi-factor authentication where available and keep their app updated for security patches.

Contact and complaints

For privacy inquiries, complaints, or to exercise your rights, contact our dedicated privacy team at [email protected]. We aim to respond to all inquiries within 7 business days. If you believe our privacy practices violate applicable law, you may file a complaint with your local data protection authority. In the European Union, contact your national Data Protection Authority. In California, you may contact the California Attorney General. Keep records of your correspondence for reference. Your feedback helps us improve our privacy practices. You may also reach us through the Settings tab in the app or visit our website at delayvilayvpn.com for additional resources and FAQ. We are committed to resolving any privacy concerns transparently and promptly.