Suioo Privacy Policy

Last Updated: June 01, 2026 Effective Date: June 01, 2026

Suioo ("we," "us," or "our") provides VPN client, subscription, account-management, and related support services (collectively, the "Services"). This Privacy Policy explains how we collect, use, share, retain, and protect information about you when you use the Suioo website, applications, and related Services, as well as the choices and rights available to you.

Please read this Privacy Policy before using the Services. If you do not agree with it, do not register an account, purchase a subscription, or use the VPN connection features.

1. Scope

This Privacy Policy applies to the websites, mobile applications, accounts, VPN connections, subscriptions, orders, dedicated IP selection, diagnostics, and customer-support features provided directly by Suioo.

Payment pages, app stores, third-party websites, networks, content, and services that you open or access through the Services are governed by the privacy policies of the relevant third parties. We encourage you to review those policies before using such services.

2. Information We Process

We process information only to the extent necessary to provide, maintain, secure, improve, or comply with legal obligations relating to the Services.

2.1 Account and Verification Information

When you register, sign in, verify your email address, or manage your account, we process:

• Email address, username, user identifier, and account status;
• Email verification codes and verification status;
• Authentication tokens and necessary session information; and
• Account information that you choose to provide.

We use this information to create and protect accounts, verify identity, maintain sessions, respond to security incidents, and provide customer support.

2.2 Subscription, Order, and Dedicated IP Information

When you browse, purchase, or manage plans, we process plan identifiers, names, terms, prices, currencies, order numbers, order status, subscription status, and related entitlement information.

For dedicated IP plans, we also process the selected region, displayed address value, and short-lived selection credential used to create an order. This credential is used only to complete the order selection for the current account and should not be treated as a long-term credential or shared with others.

2.3 VPN Connection Information

To establish a VPN connection that you request, the Service provides the application with server addresses and the usernames, passwords, or other configuration information required for the connection. The application passes this information to the native VPN component on your device to establish and maintain the connection.

This information is not used for targeted advertising and should not be sent to third parties through support channels or otherwise made public. The application does not store your sign-in password in Flutter preferences.

2.4 Support and Communications Information

When you contact us, we process the information you provide, such as your registered email address, subject, message content, attachments (if any), and account, order, or device information needed to address your request. Please do not send passwords, verification codes, full payment-card information, or other unnecessary sensitive information in support messages.

2.5 Technical, Diagnostic, and Stability Information

To provide, maintain, secure, and improve the Services, we may process limited technical and diagnostic information, such as application version, necessary device or operating-system information, connection status, error categories, and performance or stability information. This information is used to identify faults, maintain service security, improve compatibility, and optimize the service experience.

2.6 Payment Information

Payments are handled by the relevant payment provider on its payment page. We do not directly collect or store card numbers, payment-account passwords, or other complete payment credentials. We receive and process only limited information necessary to manage orders and subscriptions, such as payment results, order status, subscription type, activation or renewal dates, and information needed to handle disputes.

2.7 Apple In-App Purchase Information

When you purchase, restore, renew, or manage an Apple App Store subscription, Apple processes the payment through your Apple Account. We do not receive or store your Apple Account password or complete payment-card information. We process the Apple transaction identifiers, product identifier, transaction date, subscription expiration date, purchase environment, and limited transaction information necessary to verify the purchase, provide and restore subscription access, process renewals, investigate fraud or disputes, and comply with legal obligations.

3. Information Not Included in Application Diagnostics

The application's VPN diagnostic events do not include:

• The content of websites you visit or browsing history;
• VPN traffic payloads or communications content;
• DNS query content;
• VPN usernames or connection passwords;
• Screenshots; or
• Complete payment credentials.

This section describes only the fields included in Suioo application diagnostic events. Internet service providers, destination websites, payment institutions, app stores, device platforms, and other third parties may independently process information under their own rules.

3.1 VPN Data Commitment

We do not sell, use, or disclose VPN traffic, browsing history, DNS query content, communications content, or connection-destination data to third parties for any purpose. We do not use VPN activity for advertising, profiling, or sale. We use only the limited account, entitlement, operational, and diagnostic information described in this Privacy Policy to provide, secure, and support the Services.

4. How We Use Information

We use information to:

• Create, verify, and protect accounts;
• Provide, maintain, and manage VPN connections, nodes, plans, subscriptions, and dedicated IP features;
• Create orders, confirm payment status, handle refunds and disputes, and prevent fraud;
• Respond to support requests, send service notices, and process account requests;
• Identify faults and improve compatibility, stability, and performance;
• Prevent misuse and protect users, networks, and Service security; and
• Comply with applicable legal, accounting, tax, regulatory, or valid legal-process requirements.

We do not sell personal information or provide it to advertisers for targeted advertising based on your VPN activity.

5. Information Sharing and Service Providers

We share information only as necessary to provide the Services. Categories of recipients that may receive limited information include:

• Hosting, network, and VPN infrastructure providers, which provide servers, network, authentication, connection, and security capabilities;
• Payment service providers, which process payments, refunds, disputes, and fraud-prevention activities;
• Email service providers, which send registration-verification, account, and service notices;
• Firebase Analytics (Google), which processes the limited technical, diagnostic, and stability information described in this Privacy Policy; and
• Professional advisers and competent authorities, where necessary to resolve disputes, protect rights and security, or comply with applicable law or valid legal process.

We require service providers to process relevant information only in accordance with our instructions and applicable law and to implement safeguards appropriate for their services. Payment providers, app stores, and third-party websites that you choose to access may process information as independent controllers under their own policies.

6. Local Storage and Device Permissions

The application uses device secure storage to retain authentication tokens and the most recent user information for session restoration. The native VPN component may use security features provided by the device to retain connection configuration or credentials.

When you sign out, the application requests deletion of local authentication tokens and cached native connection secrets. You may also clear application data through your device settings; doing so does not delete information retained by our servers to provide Services, process transactions, protect security, or comply with legal obligations.

The VPN feature requires system VPN permission. This permission is used only to establish and manage VPN connections that you initiate.

7. Data Retention

We retain information for as long as necessary for the purposes described in this Privacy Policy:

• Local sign-in information is generally deleted when you sign out or clear application data;
• Account information is generally retained while an account remains active;
• Order, subscription, payment, and dispute information may be retained for the time necessary to provide Services, meet accounting, tax, fraud-prevention, dispute-resolution, and legal requirements;
• Support records and diagnostic information may be retained for as long as necessary to resolve issues, protect security, improve Services, or comply with law; and
• When information is no longer needed, we delete, anonymize, or otherwise securely handle it in accordance with applicable procedures.

8. Cross-Border Transfers

VPN services, payments, diagnostics, hosting, and support may involve servers, service providers, or network infrastructure located outside your country or region. Your information may therefore be transferred to, stored in, or processed in other jurisdictions.

Where required by applicable law, we take appropriate measures to protect information transferred across borders. Using VPN nodes in different regions does not change your obligation to comply with the laws applicable where you are located or access services.

9. Your Choices and Rights

Depending on applicable law, you may have the right to request:

• Access to, information about, or a copy of information we hold about you;
• Correction of inaccurate or incomplete information;
• Deletion of information or closure of your account;
• Restriction of, objection to, or withdrawal of consent for processing based on consent;
• A portable copy of your information; and
• The right to complain to an applicable data-protection authority about our processing of personal information.

You may use the account-deletion feature in the application or contact us from your registered email address to make privacy or account-deletion requests.

To protect accounts and the information of others, we may ask you to verify your identity through your registered email address or another reasonable method. Some requests may not be fulfilled immediately or in full because of incomplete transactions, active subscriptions, payment disputes, fraud prevention, security incidents, legal obligations, or other reasons permitted by applicable law. Where required by law, we will explain the reason.

10. Children

The Services are not intended for persons who are under the minimum age specified by applicable law. If you believe that a minor has provided us with personal information without appropriate authorization, please contact us. After verification, we will take appropriate action in accordance with applicable law.

11. Data Security

We use technical and organizational measures appropriate to the nature of the Services to protect information, including authentication and access controls, device secure storage, restricted-interface protection, minimized diagnostic fields, and deletion of local credentials on sign-out.

No network transmission, device, or online system is completely secure. Please protect your device, email account, password, verification codes, and authentication tokens, and contact us promptly if you discover unusual account activity, credential disclosure, or a suspected security incident.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to the Services, security, operations, or legal requirements. The updated version will be posted on this page with a revised "Last Updated" date. If a change materially affects your rights or how we process information, we will provide prominent notice through the website, application, or another appropriate method where reasonably practicable.

To the extent permitted by applicable law, your continued use of the Services after an update takes effect means that you accept the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy, our processing of personal information, your data rights, or security matters, or if you wish to make an access, correction, deletion, or account-closure request, please contact us from your registered email address:

• Email: [email protected]

Please state your account email address, the nature of your request, and relevant context. Do not send passwords, verification codes, or complete payment credentials.

This Privacy Policy is the privacy-policy text for the Suioo website and application. The Terms of Service, Acceptable Use Policy, and the privacy rules of payment providers and app stores may also apply.