AegisterVPN Privacy Statement
for Apple App Store

1. Introduction

AegisterVPN for iOS extends Aegister’s secure access services to Apple mobile devices. We collect only the data that is necessary to authenticate your workforce, deliver resilient encrypted tunnels, and diagnose performance issues. By using the application you accept the practices outlined below.

2. Information We Collect

• Activation metadata such as licence keys or organisation IDs so we can verify entitlement and apply the correct security policies.
• Session telemetry (connection status, timestamps, protocol, bandwidth usage, and anonymised diagnostic codes). These insights help us maintain performance without storing browsing destinations or payload contents.
• Support correspondence shared voluntarily via in-app feedback or with our service desk. Records are retained securely for ticket resolution and compliance.

3. iOS Permissions & Frameworks

The app requests the minimum set of permissions needed for secure tunnelling:

• Network Extension & Packet Tunnel Provider – establishes the VPN tunnel at the system level so all device traffic benefits from Aegister’s encrypted transport and threat intelligence.
• Local Network Usage – required by iOS to inspect on-device routes and route packets through the VPN interface while respecting corporate split-tunnelling rules.
• App Transport Security (ATS) exceptions – specific endpoints use strong cryptography but may not conform to ATS defaults. We declare targeted exceptions to preserve interoperability while keeping TLS enforcement in place.

4. VPN Operation on iOS

AegisterVPN leverages Apple’s NEPacketTunnelProvider to build a secure overlay. Traffic is encrypted on-device, inspected by Aegister’s cloud for malicious signatures, anomalies, and IP reputation matches, then delivered to its destination. The application automatically reconnects after network changes to minimise downtime for mobile users.

5. Data Security & Retention

Diagnostic events are encrypted during transmission and at rest. Access to operational systems is restricted to authorised personnel following multi-factor authentication and least-privilege principles. Retention periods are aligned with contractual requirements and erased when no longer necessary for support or compliance.

6. Children’s Privacy

AegisterVPN is an enterprise product and is not directed at children under 13. We do not knowingly collect data from minors. If we learn that such data has been submitted, we will delete it without delay.

7. Updates to This Policy

We update this notice when releasing new capabilities or to reflect changes in law. The “Last updated” date below records the latest revision. Material changes will be highlighted within the App Store listing and, where relevant, via in-app notifications.

8. Exercising Your Rights

To request access, correction, deletion, or restriction of your data, contact [email protected]. Include the organisation identifier or licence reference so we can validate the request securely. For product support write to [email protected].