This policy describes OpenHalo VPN Lab (“OpenHalo” or the “App”), an educational Android application developed and published by Academy4Tech. It explains how information is handled when the App is used.
OpenHalo does not require an Academy4Tech account. Academy4Tech does not operate or audit the volunteer VPN relays offered through the App.
At a glance
- App preferences, relay records, and connection state are stored locally in app-private storage and are not intentionally uploaded to Academy4Tech.
- OpenHalo obtains public relay information from the VPN Gate Academic Experiment Project.
- VPN connections use volunteer-operated relays. A relay and VPN Gate can process and log connection and traffic metadata under their own policies.
- OpenHalo is not an anonymity or no-log service. Continue using HTTPS or another end-to-end protection for sensitive activity.
- The App uses Google Mobile Ads and Google’s User Messaging Platform (UMP) for advertising and applicable privacy choices.
- Academy4Tech does not operate a central account or VPN-traffic database for the App and does not inspect or modify tunneled traffic to target advertisements.
1. Information stored on the device
OpenHalo stores the following in app-private storage so the App can operate:
- a temporary cache of validated public-relay records and OpenVPN profiles;
- relay-connection failures, temporary retry times, and the selected relay;
- whether the current connection disclosure was accepted; and
- display preferences, such as dynamic color.
These items are not intentionally uploaded to Academy4Tech. The App excludes its relay cache and private preferences from Android cloud backup.
Local App data can be removed through Android Settings > Apps > OpenHalo VPN Lab > Storage > Clear storage, or by uninstalling the App.
2. Advertising and consent
OpenHalo uses Google AdMob through the Google Mobile Ads SDK to display a native advertisement at the end of the Home screen. It also uses Google’s UMP SDK to request and record advertising privacy choices where required.
Google states that the Mobile Ads SDK automatically collects and shares information including:
- IP address, which can be used to estimate general location;
- product interactions, including App launches and ad interactions;
- diagnostic and performance information; and
- advertising, App-set, device, or account-related identifiers available to the SDK.
Google states that it uses this information for advertising, analytics, and fraud prevention, and that SDK data is encrypted in transit using TLS. Processing and advertising personalization can vary according to the user’s device, region, choices, Google services, and Academy4Tech’s advertising configuration.
Academy4Tech does not receive the contents of VPN traffic from the Mobile Ads SDK and does not inspect or modify tunneled traffic to target advertisements.
Where UMP indicates that privacy options are required, the App provides an Advertising privacy choices control under About > App preferences. Hiding the ad removes it for the current App session; it does not withdraw or change a consent choice. Users can also manage the Android advertising identifier and other available privacy controls in device settings.
Learn more in Google’s Privacy Policy, Safety Centre, and Mobile Ads Play data-disclosure guide.
3. Public relay service and VPN traffic
OpenHalo downloads relay information from the VPN Gate Academic Experiment Project. When a user connects, network traffic is routed through a volunteer-operated relay that is not operated or audited by Academy4Tech.
The relay service and relay operator receive technical information needed to establish and operate the connection. This can include the source IP address and hostname, connection and disconnection times, selected server, VPN protocol, traffic volumes, communication errors, and destination hostnames, IP addresses, and ports. A relay can potentially observe traffic that is not independently protected with end-to-end encryption such as HTTPS.
VPN Gate’s published anti-abuse policy states that:
- its centralized system retains VPN connection logs for at least three months; and
- each volunteer relay retains packet-header logs for at least two weeks.
Those logs can be disclosed as described in VPN Gate’s policy and applicable law. Logging practices can also depend on the selected volunteer relay. Review VPN Gate’s current Anti-Abuse Policy and Frequently Asked Questions before connecting.
4. Network requests and third parties
The App can communicate with:
- VPN Gate and a selected volunteer relay, to obtain public-relay information and establish a VPN connection requested by the user;
- Google AdMob and UMP, to gather applicable privacy choices and request advertising; and
- websites or email applications, when the user chooses to open them from the About screen.
These third parties process information under their own terms and privacy policies. Academy4Tech does not sell the local relay cache or App preferences described in this policy.
5. Retention and deletion
Local relay data is replaced during refreshes and otherwise remains until it is replaced, App data is cleared through Android settings, or the App is uninstalled. Academy4Tech does not maintain a central account or VPN-traffic database for OpenHalo.
Google, VPN Gate, volunteer relay operators, and linked services determine how long they retain information under their own policies. Academy4Tech cannot delete information controlled by those third parties. Requests concerning their records should be directed to the relevant provider.
6. Security and limitations
OpenHalo uses HTTPS for its relay-list request, validates downloaded profiles, and stores its cache in app-private storage. No transmission method, public relay, advertising service, or software product can be guaranteed completely secure.
Users should continue using HTTPS and other end-to-end protection for sensitive activity. A VPN relay changes the network path; it does not make all traffic anonymous, private, trustworthy, or immune from logging.
7. Children
OpenHalo is not directed to children under 13 or the minimum digital-consent age in their jurisdiction. A parent or guardian should supervise any educational use by a minor. The App should not be used by someone who is not legally able to accept the applicable terms and privacy choices.
8. Choices and privacy rights
Depending on location, users may have rights concerning access, correction, deletion, objection, restriction, or withdrawal of consent. Academy4Tech can address information it controls. Requests concerning Google, VPN Gate, or a volunteer relay may need to be directed to that provider.
Users can:
- decline an optional advertising-consent choice when offered;
- reopen Advertising privacy choices when the option is required and available;
- hide the native advertisement for the current App session;
- disconnect the VPN at any time; and
- clear local App data or uninstall the App.
9. Changes to this policy
Academy4Tech may update this policy when App features, service providers, data practices, or legal requirements change. The published effective date identifies the current version. Material changes will be communicated through the App or store listing where required.
10. Contact
Privacy questions or complaints may be sent to:
Academy4Tech
Website: academy4tech.com
Privacy: [email protected]
Alternative: [email protected]
LinkedIn · GitHub · YouTube