FastConnect Download

Privacy policy

1. Who we are

FastConnect is a VPN service for Android, with a website at fastconnect.cc. FastConnect is a product of BANCO LTD. The data controller is BANCO LTD. Privacy questions: [email protected].

2. What this policy covers

  • The FastConnect Android app.
  • Our VPN servers that the app connects to.
  • The fastconnect.cc website, including the contact form and the staff tools that run the site.

It does not cover websites you visit through the VPN. Those sites have their own policies.

3. What we collect, and why

3.1 Guest accounts (no sign-up)

What Details Why
Device identifier The Android ID of your phone (a random number Android creates for each device and user profile). Stored as a guest account key, prefixed android-. To create your guest account and keep your usage history and free-plan limits tied to your device. Reinstalling keeps it; a factory reset creates a new one.
Guest VPN PIN and password Generated by the server for your guest account. Shown to you in the app. To sign in to the VPN and to let you use the pin portal if you need it.

No name, email, phone number or payment details are needed for a guest account.

3.2 Paid and account users

What Details Why
VPN PIN and password Chosen or issued for your account, stored on our servers so it can be checked each time you sign in. To check sign-in and to link your plan and usage.
Account details Plan (free, monthly, yearly), plan start and end dates, and — once billing is live — records of purchases made through Google Play. To apply the right limits and bandwidth, and to show your expiry date.
Google sign-in (planned) When it launches, we will store your Google account identifier (the stable sub value) and, if you choose, your email address. We will say so here before it goes live. To let you keep the same account across devices.

3.3 Login session on your device

  • After you sign in, the app stores a login token on your device in the app's private storage (Android SharedPreferences). It is used to prove to our servers that requests come from your app.
  • Our servers keep only a SHA-256 hash of that token, and each token expires after 7 days. We do not store the token itself.
  • Signing out in the app stops the VPN first, then clears the token from your device.

3.4 Usage data

While you are connected, the app sends a usage report about every 60 seconds, and once more when you disconnect. Each report contains:

  • the number of megabytes you downloaded and uploaded since the last report (rounded to fractions of a megabyte);
  • the number of seconds you were connected since the last report;
  • your VPN account identifier and the time the report was received.

We use these records to:

  • enforce the free plan's daily connected-time limit and your plan's bandwidth allowance;
  • show you your usage history and how much time or data you have left;
  • detect and stop abuse, and keep the service running.

We do not record which websites or services you visit, the content of your traffic, or DNS queries. The VPN server forwards packets and does not write them to logs.

3.5 Connection logs on our servers

Our tunnel servers write operational log lines when:

  • a connection starts (the client's IP address and the TLS version);
  • a sign-in check passes or fails (the IP address and the result, including the account identifier when a sign-in succeeds);
  • the assigned tunnel address is given out, and when a connection ends.

These logs contain IP addresses. We use them to diagnose faults, investigate abuse, and respond to lawful requests. We keep them for 30 days and then delete them, on the same servers that run the VPN tunnel.

3.6 Choices you make in the app

  • The server or port you select (or Auto, which picks a server for you based on response time measured from your device).
  • Local preferences, which are kept on your device.

3.7 Website (fastconnect.cc)

  • Contact form: your name (optional), email address, message, and the page you sent it from. We store a salted hash of your IP address, not the address itself, to limit abuse. Messages are kept until we close the enquiry, and for 12 months afterwards in case you follow up, then deleted.
  • Cookies: the website sets one strictly necessary session cookie. It stores the verification code for the contact form and keeps staff signed in. We set no advertising cookies, and no analytics cookies, on the public website at the time of writing.
  • Hosting and protection: the website sits behind Cloudflare, which sees your IP address and provides security and performance services. Cloudflare's own privacy policy applies to its processing.

3.8 Staff and the content management system

Staff accounts store an email address, a display name, a password hash, a role and login history. Staff actions are recorded in an audit log that includes the staff email, the action and the item affected. This data is used only to run and secure the site.

3.9 Android permissions the app asks for

  • Internet access: to reach our servers.
  • VPN service: so Android can route your traffic through the FastConnect tunnel. You confirm this in the system prompt.
  • Notifications: to show that the VPN is connected, the server, the time connected, and a Stop button. You can turn notifications off in Android settings; the VPN still works.
  • Foreground service: keeps the VPN running while the app is in the background.

3.10 What we do not collect today

  • No advertising identifier, and no advertising SDK in the app.
  • No analytics or crash-reporting SDK in the app.
  • No contacts, location, camera, microphone or photos.
  • Payment card details are not processed by FastConnect. When paid plans launch, payment will be handled entirely by Google Play — we never see or store your card details.

4. Legal bases (EEA and UK users)

  • Contract: running the VPN, your account, usage limits and support.
  • Legitimate interests: keeping the service secure, preventing abuse, and improving reliability. You can object to this processing.
  • Legal obligation: keeping records tax, accounting and consumer-protection law requires, and responding to valid requests from authorities.
  • Consent: only where we ask for it, such as optional marketing. We do not currently ask for marketing consent.

5. Who we share data with

  • Hosting and network providers that run our servers and website.
  • Cloudflare, for website protection and delivery.
  • Google Play, once billing is live, to process payments.
  • Authorities, only when the law requires it or to protect people from serious harm, and only on a valid request.

We do not sell your personal data, and we do not share it for advertising.

6. International transfers

Our VPN servers are in the countries listed on the Servers page. Your traffic and account data may be processed in those countries and in the country where our systems are hosted. Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses or an equivalent legal safeguard.

7. How long we keep data

Data Kept for
Guest account and device identifier 24 months after the last sign-in
Usage reports (bytes and connected seconds) 12 months, then deleted
Connection logs with IP addresses 30 days
Login token hashes Until they expire (7 days) or you sign out
Contact form messages Until the enquiry is closed, plus 12 months
Staff audit log 24 months

When retention ends we delete or anonymise the data.

8. How we protect data

  • Traffic between the app and our servers is encrypted with TLS.
  • The website is served over HTTPS, with security headers and a strict content security policy for the staff tools.
  • Login tokens are stored as hashes. Login attempts on the website are rate-limited, and staff accounts lock after repeated failures.
  • Access to servers and staff tools is limited to people who need it.

No system is perfectly secure. If we learn of a breach that affects your data, we will tell you and the authorities as the law requires.

9. Your rights and choices

  • Access and export: the Usage history screen in the app shows your usage. Ask us for a copy of other data we hold about you.
  • Correction: change your details through your account, or ask us.
  • Deletion: email [email protected] from the address linked to your account (or describe your device for a guest account). We delete or anonymise what we can, except where we must keep records by law.
  • Withdraw consent and object: where we rely on consent or legitimate interests, you can object at any time.
  • Complaints: you can complain to your local data protection authority.

We respond within 30 days.

10. Children

FastConnect is not directed at children. You must be at least 16 to use FastConnect if you are in the EEA, or 13 elsewhere, unless your local law sets a higher age. If you believe a child has given us data, contact us and we will delete it.

11. Changes to this policy

We will post changes on this page and update the date below. For significant changes we will also tell you in the app or by email.

Last updated: 9 October 2026

12. Contact

BANCO LTD [email protected]