YOHO MOBILE PTE. LTD. ("Yoho", "we", "us") operates the Yoho VPN application and website. This policy explains what we collect, why, the legal bases we rely on, and your choices. Our core principle is simple: we run a no-logs VPN — we do not monitor, record, or store the contents of your network traffic, the websites or apps you reach, your DNS queries, or the source IP address assigned to you while the VPN tunnel is connected.
Like any online service, the servers that run your account, sign-in, purchases, and this website may process the IP address your request arrives from, for security, fraud and abuse prevention, and rate-limiting, and for a short time in operational logs. This is the account/API layer and is separate from the VPN data plane, where we do not log your source IP or your traffic. The website uses a first-party session cookie to keep you signed in and a bot-protection challenge (Cloudflare Turnstile) on sign-in and payment forms; it uses privacy-preserving, aggregate analytics for conversion counts and does not use cross-site advertising trackers.
We do not log your browsing history, traffic contents, destination servers, hostnames, DNS lookups, or the source IP you connect from while the VPN is active. We do not sell personal data, and we do not use your data for advertising or behavioral profiling.
We use the data above to provide and secure the service, deliver sign-in and purchases, enforce plan limits, answer support, and meet legal obligations. Where the GDPR/UK GDPR applies, we rely on contract (to provide what you sign up for), legitimate interests (to keep the service secure and prevent abuse), consent (e.g. notifications, optional diagnostics), and legal obligation (tax/accounting). Under Singapore's PDPA we process data to provide the service and with your consent.
We are based in Singapore, and our VPN and service infrastructure is located in several countries. When you use a server location or when we process account data, your data may be handled outside your country. Where required, we rely on appropriate safeguards for such transfers.
Traffic is carried through an encrypted tunnel, credentials are not stored in plain text, and access to account systems is restricted. No method of transmission or storage is perfectly secure, but we take reasonable technical and organizational measures to protect your data.
Account and subscription records are kept while your account is active and for as long as required to meet legal, tax, and accounting obligations, then deleted. Data-usage counters reset each billing cycle. Operational security logs are kept for a short period and then rotated. You can delete your account at any time from the app ("我的" / Me → Delete account), which removes your account, device records, and subscription links from our systems and signs you out on all devices.
Subject to your local law, you may request access to, correction of, a copy of, or deletion of your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account in-app at any time. To make a request, contact [email protected]. If you are in the EEA/UK you may also complain to your data-protection supervisory authority; if you are in California, we do not sell or "share" your personal information and you may exercise your rights by contacting us. We do not respond to browser "Do Not Track" signals, as there is no common standard.
Yoho VPN is not directed to children under 13 (or the higher minimum age in your jurisdiction, such as 16 in parts of the EEA), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
We may update this policy; material changes will be reflected by the "Last updated" date above and, where appropriate, highlighted in the app or by email.
YOHO MOBILE PTE. LTD., Singapore — [email protected]. Please use this address for any privacy request or data-protection question.