Privacy Policy

This Privacy Policy explains how DiDi com Lab LLC ("we", "us") processes information when you use the MESQ - Proxy Utility application for iOS and iPadOS (the "App") and the website mesq.live (the "Website").

1. The short version

• MESQ is a client application. It connects to servers that you configure; we do not operate those servers and do not see your traffic.
• Keys, subscription links and settings are stored only on your device.
• We do not ask for your name, e-mail or phone number, and we do not show ads.
• We collect anonymous technical data (crash reports and basic usage statistics) to keep the App working.

2. Data you keep on your device

Configurations you add (share links, subscription URLs, JSON configurations), routing and DNS settings and the connection history are stored in the App's local storage on your device. They are not sent to us. When the App refreshes a subscription, it contacts the subscription URL you provided directly.

Connection logs are written locally. They leave your device only if you choose Settings - Send logs and share them yourself, for example with our support.

3. Network traffic

When you connect, the App creates a VPN tunnel with the iOS Network Extension framework and forwards your traffic to the server from the configuration you selected. That server is operated by you or by a third party you chose - not by us. We do not log, inspect, store or sell your traffic, the websites you visit or your DNS queries. The privacy practices of the server you connect to are governed by its operator.

4. Data collected automatically

The App uses the following Google Firebase services, provided by Google LLC:

• Firebase Anonymous Authentication - creates a random identifier that is not linked to your identity. It is used to request the App's remote configuration.
• Firebase Crashlytics - when the App or its network extension crashes, sends a crash report: stack trace, App version, device model, OS version, free memory and disk space, and an installation identifier.
• Google Analytics for Firebase - basic usage statistics: App opens, screens, session length, App and OS version, device model, language and the approximate country derived from the IP address.
• Firebase Remote Config - downloads App settings (for example, default DNS servers) using an installation identifier.

This data does not include your configurations, server addresses, traffic contents or browsing history. We do not use it for advertising and do not combine it with data from other sources. Google processes it under the Firebase privacy terms.

5. Why we process data

• To provide the App and its remote settings (performance of our agreement with you).
• To find and fix crashes and improve stability (our legitimate interest in a working product).
• To answer your support requests (performance of the agreement and your request).

6. Retention

Crash reports are kept for up to 90 days. Analytics data is kept for up to 14 months. Support correspondence is kept as long as needed to resolve your request and then for up to 12 months. Data on your device remains until you delete it or remove the App.

7. Sharing

We do not sell personal data. We share data only with Google LLC as the provider of the Firebase services listed above, and with authorities when required by law. Data may be processed outside your country, including in the United States, with appropriate safeguards provided by Google.

8. The Website

The Website does not use analytics or advertising cookies. It stores two technical cookies - your chosen language and theme. Our hosting provider keeps standard server logs (IP address, requested page, time) for security purposes for a limited period.

9. Your rights

Depending on where you live, you may have the right to access, correct or delete your data, to object to or restrict processing, and to lodge a complaint with a data protection authority. Because the App does not use accounts, most data is not linked to you; you can reset it by deleting the App. To exercise your rights, write to info@didicomlab.com.

10. Children

The App is not directed to children under 13, and we do not knowingly collect personal data from them.

11. Changes

We may update this Policy. The new version is published on this page with a new "Last updated" date. Material changes will be announced in the App or on the Website.

12. Contact

DiDi com Lab LLC
N1 (former Avlevi), flat N3, building N3, Nino and Ilia Nakashidze Street, Tbilisi 0108, Georgia
E-mail: info@didicomlab.com