←

Privacy Policy

CloudEx Inc. ("we", "us") provides the Android app "Firewall Pro" (the "Service"). This Privacy Policy explains what information we collect, how we use it, and what choices you have. By using the Service you agree to the practices described here.

1. Our position

The Service is a firewall that judges each app's traffic entirely on your device. The content of your traffic never leaves it. In particular, we do not collect, store or transmit any of the following:

  • The content of the traffic passing through your device
  • Which app connected to which site or server
  • The DNS queries the Service reads in order to filter
  • Browsing or behavioural history in any personally identifiable form

2. About the "VPN"

On Android, the VPN permission (VpnService) is the only way to allow or block traffic per app, and a key icon appears in the status bar while it is active. Unlike an ordinary VPN service, the Service never connects to an external VPN server. The tunnel is closed inside your device: no traffic passes through our servers or is relayed anywhere else. Your IP address and destinations do not change, and encrypted traffic is never decrypted.

3. Information we collect

3.1 Collected automatically

  • Anonymous crash reports — through Firebase Crashlytics, and only while the setting is left on. A crash sends the stack trace, device model, OS version and app version. It never includes personally identifying information, the connection log, or your per-app rules.
  • App usage statistics — through Google Analytics for Firebase. Anonymous usage events (a first launch, for example) together with device information and the device advertising ID (AAID). We use this only to understand overall usage and to measure our own advertising campaigns (install conversions). The Service shows no ads, and we share no data with ad networks for any other purpose.
  • Purchase and licence information — the purchase token issued by Google Play, used to confirm your entitlement to the paid version. We never receive card numbers or other payment details.

3.2 Stored on your device only

  • The connection log — which app reached which domain or IP, and whether it was allowed or blocked. It is kept in a database on your device, rows older than 30 days are deleted automatically, and it is never sent to our servers. You can erase all of it from inside the app at any time. Exporting it as CSV is your own action, to a location you choose.
  • Traffic statistics — bytes sent and received per app, and the daily blocked/allowed counters.
  • Settings and rules — your per-app allow and block rules, the enabled filter lists, custom rules, whitelists, DNS settings.
  • The filter lists themselves — the downloaded domain lists.

All of it exists only on your device and is erased when you uninstall the app or clear its data. A settings backup file you export stays under your control and is never sent to us.

3.3 Information we specifically do not collect

  • The sites you visit, the destinations you connect to, or the contents of the connection log
  • The list of apps installed on your device
  • Location data such as GPS coordinates
  • Phone number, contacts, calendar, photos, microphone or camera
  • Account details — the Service needs no account at all

3.4 Permissions the app requests, and why

  • VPN service (BIND_VPN_SERVICE) — required by the OS in order to judge each app's traffic. As stated in section 2, no external VPN server is involved.
  • Query all packages (QUERY_ALL_PACKAGES) — needed to list every app that can reach the network, including services and system components with no launcher icon. The list is used on the device only and is never transmitted.
  • Notifications (POST_NOTIFICATIONS) — for the ongoing status notification, data-usage alerts and new-connection alerts.
  • Boot completed (RECEIVE_BOOT_COMPLETED) — to bring the firewall back automatically after a restart.
  • Network state (ACCESS_NETWORK_STATE) — to tell whether you are on Wi-Fi, on mobile data or roaming. The per-network rules depend on it.
  • Request package deletion (REQUEST_DELETE_PACKAGES) — used only to open the uninstall screen for another app when that app holds the VPN permission and some devices offer no other way to release it. We never remove an app on our own.

4. Filter-list updates

Filter lists are downloaded directly from their public third-party publishers (AdGuard, abuse.ch URLhaus, Hagezi, StevenBlack and ngosang). We operate no mirror. These requests fetch a list and nothing more — no identifying information and no browsing data is sent — but, as with opening any website, the publisher you connect to receives your IP address. Only the lists you have enabled are downloaded.

5. How we use information

  • Operating and maintaining the Service
  • Confirming your entitlement to the paid version
  • Understanding overall usage and improving the app (analytics)
  • Measuring our own advertising campaigns (install conversions)
  • Diagnosing and fixing crashes (only for users who leave crash reporting on)
  • Replying to support enquiries
  • Complying with applicable law

6. Third-party services

  • Firebase Crashlytics (Google LLC) — anonymous crash diagnostics
  • Google Analytics for Firebase (Google LLC) — anonymous usage statistics and campaign measurement
  • Google Play Billing (Google LLC) — purchases and entitlement checks. Payment is completed on Google Play's side.
  • Filter-list publishers — contacted only when a list is downloaded, as described in section 4.

7. Retention

  • Crash reports: deleted after 90 days.
  • Analytics data: deleted by Google Analytics after at most 14 months.
  • The connection log on your device: deleted automatically after 30 days, or all at once when you choose.
  • Settings and statistics on your device: erased when you uninstall the app or clear its data.

8. International transfers

We are based in Japan. The infrastructure used for crash diagnostics and analytics may be located in various countries. When you use the Service, the minimal information described above may be processed outside your country of residence under standard contractual protections.

9. Your rights

Depending on where you live (the EEA, the UK, California or Japan, among others) you may have the right to access, correct or delete the limited information we hold. You can:

  • Turn "Send crash reports" off in the app's settings
  • Reset or delete the advertising ID in your device settings (Settings → Google → Ads)
  • Erase the whole connection log from inside the app
  • Uninstall the app or clear its data to remove everything stored on the device
  • Contact us at the address below with a request about the information we hold

10. Children's privacy

The Service is not directed at children under 13 (or the minimum age applicable where you live). If we have unintentionally collected information from such a child, contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published at this URL together with its effective date.

12. Contact

For privacy questions, data requests or concerns, e-mail us at .

CloudEx Inc. (Japan)

Effective date: September 8, 2026