Privacy Policy
A VPN only makes sense if you can trust it. This policy explains, in plain language, what data Tolle does and does not handle. If anything here is unclear, email help@tolle.io and we will explain it.
The short version
| Question | Answer |
|---|---|
| Do you log my browsing activity? | No. We do not record the websites you visit, your DNS queries, or the content of your traffic. |
| Do I have an account with you? | No. Tolle has no registration, so we hold no name, email, or password for you. |
| Do you sell my data? | No. We do not sell personal data. |
| How is the app free? | Ads shown inside the app. Ad networks operate under their own privacy policies, described below. |
| Where are you based? | The Netherlands, so EU data-protection law (GDPR) applies to us. |
1. Who we are
Tolle ("we", "us") is the developer of the Tolle VPN app, based in Amstelveen, the Netherlands. For anything in this policy, contact us at help@tolle.io. We are the data controller for the limited processing described here.
2. Our no-logs commitment
When you connect through Tolle, your internet traffic passes through our servers. We do not keep records of:
- the websites, apps, or services you access through the VPN;
- your DNS queries;
- the content of any data you send or receive;
- your activity tied to your identity — we don't know who you are, because there are no accounts.
Our servers necessarily handle your traffic in real time in order to route it — that is what a VPN does — but this traffic is not stored, inspected, or associated with you.
3. Data needed to run the service
To keep the network working, we process a minimal amount of technical information:
- Aggregate performance data — server load, total bandwidth, and connection success rates, measured per server rather than per person, so we can add capacity where it's needed.
- Crash and diagnostic reports — if the app crashes, standard diagnostic information (device model, Android version, error details) may be reported so we can fix the bug. These reports are not used to identify you.
4. Advertising
Tolle is free because it shows ads inside the app. Advertising is provided by third-party networks, which may process certain device data under their own privacy policies in order to serve and measure ads — typically your device's advertising ID, coarse (IP-based) location, and basic device information.
- Ad networks receive this data when an ad is requested inside the app; they do not receive your VPN browsing activity.
- Where required by law, the app will ask for your consent before personalized ads are shown.
- You can reset your advertising ID or opt out of ad personalization at any time in Android settings under Privacy → Ads.
5. App permissions
Tolle requests the standard Android VPN service permission, which is required for any VPN app to create the encrypted tunnel. Android shows you a system dialog before this permission is granted and displays a key icon whenever the tunnel is active. We do not request access to your contacts, photos, microphone, camera, or precise location.
6. Legal bases (GDPR)
For users in the European Economic Area and the UK, we rely on:
- Performance of a contract — routing your traffic when you tap Connect;
- Legitimate interests — keeping the service secure, stable, and free of abuse, using the aggregate data described in section 3;
- Consent — for personalized advertising, where consent is required.
7. Data retention
Because we don't log activity or hold accounts, there is very little to retain. Aggregate performance statistics are kept only as long as needed for capacity planning. Crash reports are retained only as long as needed to diagnose and fix the underlying issue. Support emails you send us are kept for as long as needed to resolve your request.
8. Sharing
We do not sell personal data. We share data only with: (a) the advertising partners described in section 4, in connection with ads served inside the app; (b) infrastructure providers that host our servers, who process traffic solely on our behalf; and (c) authorities, if we are legally compelled — noting that we cannot hand over browsing logs we do not keep.
9. International transfers
Our VPN servers are located in many countries — that is the point of the service, and you choose which location to connect to. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as standard contractual clauses.
10. Children
Tolle is not directed at children, and we do not knowingly collect personal data from children. Because the app has no registration, we hold no age information; if you believe a child has provided us personal data by emailing support, contact us and we will delete it.
11. Your rights
Depending on where you live, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to processing or withdraw consent. Because we hold almost no personal data about you, most requests will be simple. Email help@tolle.io to exercise any right. If you are in the EEA, you may also lodge a complaint with your data-protection authority; in the Netherlands, that is the Autoriteit Persoonsgegevens.
12. Security
Traffic through the VPN is protected with strong encryption in transit. Our servers are hardened, access to infrastructure is restricted, and we minimize data collection in the first place — the data we never collect is the data that can never leak.
13. Changes to this policy
If we change this policy, we will update the effective date above and, for material changes, notify you inside the app. Continued use of Tolle after a change means you accept the updated policy.
14. Contact
Questions, requests, or complaints: help@tolle.io — Tolle, Amstelveen, the Netherlands.