Privacy Policy

YFamily · Effective 31 August 2026

YFamily is a private VPN service for a closed group of family and friends. This policy explains the data processed by the YFamily app, enrollment API, administrator Dashboard, and VPN infrastructure.

Data we process

• During activation, the app sends a signed, short-lived, one-time access key and a device public key generated on your device.
• The service stores a public Device ID, an administrator-supplied internal name, platform, app version and supported VPN capabilities.
• The service stores the assigned and confirmed VPN configuration, enrollment and revocation state, and the latest VPN handshake time.
• Network infrastructure inevitably processes source and destination IP addresses while delivering API requests and routing VPN traffic. Operating-system, reverse-proxy, container, and VPN service logs may contain IP addresses, timestamps, request paths, response status, and technical errors.

Data that stays on your device

The device private key, preshared keys, device credential, and received VPN configuration are kept in protected local storage. They are sent only where technically required to establish or authenticate the VPN connection. The language choice on this page is stored only in your browser.

How we use data

We use these data only to enroll and authenticate devices, provision and revoke VPN peers, deliver the selected configuration, operate and secure the service, diagnose failures, prevent abuse, and show device status to the administrator.

VPN traffic

YFamily does not intentionally keep a history of websites visited, DNS queries, or traffic contents. The VPN servers must process packets in transit to provide the connection. Temporary technical logs or hosting-provider network records may still contain connection metadata such as IP addresses and times.

Sharing, sales, advertising, and analytics

We do not sell personal data. YFamily contains no advertising, third-party analytics, or third-party tracking. Data is processed by the servers and network/hosting providers needed to operate YFamily, and may be disclosed when required by applicable law.

Storage and retention

Enrollment records, device metadata, configuration assignments, invitation status, revocation state, and administrator records are stored in the private YFamily database. Active device records remain while access is provided. Revoked device and invitation history is retained for security, integrity, and administration; no fixed automatic deletion period is currently guaranteed. Infrastructure logs are retained according to the operational settings of the relevant host, container, VPN component, and hosting provider.

Replacement, revocation, and deletion

Using Replace keeps the existing access working until a new access key has been accepted and provisioned. After a successful replacement, the previous device credential is revoked and its active VPN peers are removed. Administrative revocation remains available separately and does not automatically erase retained administrative history. To request access to, correction of, or deletion of data, contact us. We will verify the request and remove data when technically possible and not required for security or legal obligations.

Security and changes

Device secrets are generated locally and stored using platform-protected storage. Communications with the control service use HTTPS, and VPN traffic uses the configured encrypted tunnel. No system can guarantee absolute security. We may update this policy when the service or its data practices change; the effective date above will be updated.

Contact

Questions and privacy requests: yurowm@gmail.com.