Carrot VPN — Fast Secure Proxy (iOS)
Developer: Vinnorokom IT
Operated by: Md Arifur Rahman
Contact: [email protected]
App Bundle ID: com.vinnorokom.carrotvpn
1. Introduction
This Privacy Policy explains how Carrot VPN — Fast Secure Proxy for iOS ("Carrot VPN", "we", "our", or "us") handles information when you use the application.
Carrot VPN is operated by Vinnorokom IT and provides a VPN service using Apple's Network Extension framework. This policy applies specifically to the current iOS version of Carrot VPN.
The current iOS version is provided as a free VPN service. It does not currently display advertisements and does not provide in-app purchases or subscriptions.
2. Information We Collect
We designed Carrot VPN to collect as little information as reasonably necessary to operate the VPN service.
2.1 Random account identifier
When Carrot VPN is launched for the first time, the app communicates with our backend server to obtain a randomly generated account identifier. This identifier:
- Is randomly generated by our server.
- Is not derived from your name, email address, phone number, or device identifier.
- Is stored locally on your device.
- Is used to authenticate requests made by the application to our backend services.
- Is not intended to identify you personally.
We do not require you to create an account using your name, email address, phone number, or social-media account.
2.2 IP address
When Carrot VPN communicates with our API servers, the originating IP address is technically visible to our servers as part of the normal operation of Internet communications. We do not use the IP address to build a profile of you or to track your browsing activity. In accordance with our No-Logs Policy described below, we do not intentionally retain connection information as a record of your VPN browsing activity.
2.3 Information we do not intentionally collect
The current iOS version of Carrot VPN does not intentionally collect or store:
- Browsing history
- Websites you visit
- DNS queries or DNS history
- Traffic destinations
- Contents of your Internet traffic or VPN traffic
- Names or contact information, email addresses, or phone numbers
- Contacts
- Photos or personal files
- Advertising identifiers for advertising purposes
- Payment or subscription information
- User analytics or behavioral profiles
3. VPN Service and No-Logs Policy
Carrot VPN uses Apple's Network Extension framework to establish an encrypted VPN connection between your iOS device and our VPN infrastructure. The purpose of the VPN is to help protect your Internet traffic while connected to the VPN.
No-Logs Policy. Carrot VPN does not intentionally monitor, record, or store: websites you visit, browsing history, DNS queries, destination IP addresses associated with your browsing activity, contents of your Internet traffic, or files or communications transmitted through the VPN.
We do not maintain a browsing-history database or sell VPN browsing information. Some technical network information, such as an IP address associated with an API request, may be temporarily visible to our infrastructure as a normal part of network communication. Such information is not intentionally retained as a record of your online activity.
4. Advertising
Current iOS version: no advertising. The current iOS version of Carrot VPN does not display advertisements. No advertisements are requested or displayed by the current iOS user interface. Advertising functionality contained in our shared cross-platform codebase is not part of the active user experience of this iOS version. The application does not intentionally use advertising identifiers to provide personalized advertising in the current iOS version.
Third-party advertising-related SDK components may nevertheless be included in the application package because Carrot VPN uses a shared cross-platform codebase. Their presence in the application package does not by itself mean that Carrot VPN actively requests or displays advertisements. If advertising is introduced in a future iOS version, we will update this Privacy Policy and the applicable App Store privacy disclosures before the feature becomes available.
5. In-App Purchases and Subscriptions
The current iOS version of Carrot VPN does not offer in-app purchases, premium subscriptions, or paid VPN plans. No payment or billing information is collected by Carrot VPN in the current version. An in-app purchase framework may be included in the shared application codebase, but the purchase functionality is not enabled or available to users in the current iOS version. If subscriptions or other paid features are introduced in a future version, this Privacy Policy will be updated before those features become available.
6. Third-Party SDKs and Privacy
Carrot VPN is built using a shared cross-platform application architecture. As a result, certain third-party software components may be bundled within the application even when their corresponding functionality is not enabled or exposed to users in the current iOS version. These components may include:
- Google Mobile Ads / advertising-related components
- User Messaging Platform components
- StoreKit / in-app purchase-related components
The inclusion of an SDK in the application package does not necessarily mean that Carrot VPN actively collects or shares the categories of information that the SDK is capable of processing. For the current iOS version, Carrot VPN does not intentionally activate advertising, analytics, or in-app purchase functionality. We will update this Privacy Policy and our App Store privacy disclosures if these services are activated in a future version.
7. Device Identifiers and Tracking
Carrot VPN does not intentionally use your device identifier to identify you personally. The current iOS version does not intentionally use IDFA for advertising or cross-app tracking. Carrot VPN does not create advertising profiles based on your activity.
Where Apple or third-party SDK privacy manifests describe potential data practices of bundled SDK components, those declarations may appear in Xcode-generated privacy reports even when a particular SDK capability is not actively used by the current Carrot VPN functionality.
8. Location Information
Carrot VPN does not request access to your device's precise location. The current VPN service does not require your GPS location to establish a VPN connection. We do not use your precise physical location to operate the VPN service.
Some bundled third-party SDK components may declare potential support for coarse location in their privacy manifests. Such declarations describe SDK capabilities and do not necessarily mean that Carrot VPN actively requests or collects your location.
9. Diagnostics and Performance Information
The current version of Carrot VPN does not intentionally operate a separate analytics or crash-reporting service for profiling individual users. Third-party SDKs included in the application package may contain privacy declarations relating to diagnostic or performance information. These declarations are associated with the SDK components and do not necessarily mean that Carrot VPN actively collects such information for its own purposes. If diagnostic or analytics services are activated in a future release, this Privacy Policy will be updated accordingly.
10. Data Sharing
We do not sell your personal information. We do not sell your VPN browsing history or Internet traffic information. The current iOS version does not intentionally share your VPN browsing activity with advertising networks, analytics companies, or other third parties. Information may be processed by our infrastructure when technically necessary to provide the VPN and API services, such as handling network requests and authenticating the application.
11. Data Security
We use reasonable technical and organizational measures designed to protect information processed by Carrot VPN. Communication between the application and our API services uses encrypted HTTPS connections. VPN traffic is transmitted through an encrypted VPN connection using the VPN technology implemented by the application and our VPN servers. However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.
12. Data Retention
We follow a data-minimization approach. We do not intentionally maintain logs of your browsing activity, DNS requests, or VPN traffic. Technical information required to operate our services may exist temporarily as part of normal server operation, security, networking, or troubleshooting. Such information is not intentionally maintained as a history of your VPN activity.
13. Children's Privacy
Carrot VPN is not specifically directed toward children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe that a child has provided personal information to us, please contact us at [email protected].
14. Changes to This Privacy Policy
We may update this Privacy Policy when our services, application functionality, legal requirements, or data practices change. If we introduce features such as advertising, personalized advertising, analytics, premium subscriptions, in-app purchases, additional account functionality, or additional data collection, we will update this Privacy Policy and the relevant App Store privacy disclosures as appropriate. The latest version will always be published at this page's URL.
15. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or Carrot VPN's privacy practices, please contact us:
- Vinnorokom IT — Operated by Md Arifur Rahman
- Email: [email protected]
- Website: www.vinnorokom.com
Privacy Policy Version 1.0. Last updated on September 9, 2026.