Privacy Policy
Last updated 20 September 2026
Desert is a VPN application for iPhone published by APPWILL COMPANY LTD (“we”). This policy explains what the app and the service behind it collect, why, how long it is kept, and what is never done with it. It covers the Desert app and the API it talks to at api.desert-connect.com.
The short version
- We do not sell, rent, share or otherwise disclose your data to third parties, for any purpose.
- We do not keep records of the sites you open, the addresses you reach or the contents of your traffic.
- There is no advertising, no tracking and no third-party analytics in the app. It contains no advertising or analytics SDKs at all.
- We do not store your IP address with your account. It is written down only when a request to our API fails, and that record is deleted after 30 days.
What we collect and why
| Data | Why | Kept |
|---|---|---|
| Your Apple user identifier, and the email address Sign in with Apple gives us — which is Apple’s private relay address if you chose to hide yours | To have an account you can sign in to from another device, and to reach you about the service if we must | Until you delete the account |
| App Store storefront, language and the country your account was created from | To decide which set of servers your account is served from | Until you delete the account |
| For each signed-in device: an identifier the app generates, the device name and model, its system version, the app version, and the country of the most recent session | To enforce the limit on simultaneous devices, to show you the list of your devices, and to let you sign a device out | Until the session ends or the account is deleted |
| Purchase data from Apple: transaction and order identifiers, the identifier the app attaches to a purchase, the subscription status and whether it is a sandbox or production purchase | To know whether the subscription is paid for, and to restore it on your other devices | While required for accounting and dispute handling |
| The volume of traffic your account has used | To operate the service and to detect abuse of an account | Reset at the start of each paid period |
| If a request to our API fails: the method, the path, the error and the IP address it came from | To find and fix faults, and to stop abuse | 30 days, then deleted automatically |
We never see your payment details. Payment for a subscription is handled by Apple; we receive only the fact of a purchase and its identifiers.
Your traffic
A VPN carries your traffic, so what happens to it matters more than anything else on this page. Request logging is switched off on the servers that serve the app: they do not write down the sites you visit or the addresses you connect to. What the servers do count is how many bytes an account has transferred, because the service is sold per account and abuse has to be noticed. That counter is a number, not a history of where the traffic went.
If you use a key from another provider
The app can also work with a subscription key issued by a different operator. In that mode the app talks to that operator’s server directly: we neither issue the key nor receive anything about how you use it, and this policy does not govern that operator — theirs does.
Who else processes this data
- Apple — sign-in, subscriptions, payments and the notifications Apple sends us about a subscription’s status.
- Our infrastructure providers — the companies whose servers and networks the service runs on. They host the service; they are not given your data to use for their own ends.
Nobody else. We do not hand data to advertisers, data brokers or analytics companies, and there is nothing in the app that reports to them.
Where the data is
The service runs on servers in several countries, so your data may be processed outside the country you live in. Where the GDPR applies, we rely on the fact that this processing is necessary to provide the service you asked for.
Legal bases
- Performance of a contract — the account, the subscription and the connection itself.
- Legitimate interests — keeping the service working and stopping abuse; this is what the device limit, the traffic counter and the 30-day error records are for.
- Legal obligations — keeping records of purchases for as long as the law requires.
Your rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it. You can also object to processing based on legitimate interests, and complain to your data protection authority.
You do not have to ask us to delete the account: the app does it. Settings → Account → Delete account removes the account and its devices, and revokes the token Apple issued for signing in. The subscription is a separate thing and stays with Apple — cancel it in the App Store if you no longer want it, because deleting the account does not stop it renewing.
Children
Desert is not directed at children and we do not knowingly collect data from them.
Changes
If this policy changes, the new version appears on this page with a new date. If a change matters to you — if we start collecting something new, for instance — we will say so in the app.
Contact
Write to support@desert-connect.com. The service is provided by APPWILL COMPANY LTD, a company registered in England and Wales under number 08937285, Suite 9, 186 St Albans Road, Watford, Hertfordshire, WD24 4AS, United Kingdom.