Slowlane Privacy Policy

1. Operator and scope

Slowlane helps users review time spent in selected apps and slow their internet connections. The developer display name is 원두. The privacy contact is hww2989@gmail.com. This policy describes processing by version 0.3.4-beta, support email and this policy website.

The app has no account registration, advertising, payments, analytics SDK or developer-operated collection server. This does not mean that original internet traffic forwarded by the app, or support emails voluntarily sent by users, never leave the device.

2. App selection and usage time

App names, package identifiers and icons made visible by Android are used to select apps to manage. The installed-app inventory is not uploaded to the developer. Selected and archived rules remain in device-local storage.

With usage-access permission, Slowlane reads Android activity, screen, lock and boot events to measure selected apps. Other apps’ names and screen content are not retained in its usage journal. Unmeasurable intervals are marked separately rather than guessed. Measurement continues while the VPN runs, including when Slowlane is not on screen.

3. Local VPN, TCP, UDP, DNS and encryption

Packets, connection addresses, ports and protocols are temporarily processed in device memory and forwarded to their original destinations. This includes TCP and UDP traffic and DNS requests. DNS servers follow the configuration supplied by the active non-VPN network; requests are not converted into a separate DoH/DoT service. There is no external VPN gateway, and the developer does not receive copies of that traffic.

Slowlane does not log packet contents, visited addresses, passwords or authentication tokens. It does not decrypt HTTPS/TLS or install an interception certificate. It preserves the original app’s encryption but does not add encryption to plaintext TCP/HTTP, UDP or DNS. This does not mean that all UDP or DNS is always plaintext: encryption already provided by the original protocol is preserved.

Slowlane is not an anonymity, location-changing or security VPN service. Original traffic and DNS requests leave the device for their destinations and DNS servers. Those apps, network providers and destination services have their own privacy practices. Slowlane cannot run together with another VPN.

If Android cannot identify the owner UID of the app that opened a connection, Slowlane forwards that flow to its original destination without throttling to preserve connectivity. It does not guarantee per-app identification or throttling of flows whose owning app is unknown.

4. Local storage and retention

Rules, selected package identifiers, time zones, measured usage and uncertain intervals are kept in app-private storage. When active journals are updated, detailed usage events are bounded to the latest 48 hours and 30,000 points. Reset-window summaries are bounded to about 90 entries; calendar summaries cover the current date and preceding seven days when refreshed. Action counters are pruned to 90 days when a new action is recorded.

Diagnostics contain timestamps, a temporary process-run identifier, app version, package-derived hashes and Instagram/YouTube flags, connection counts, transferred-byte and error counts, policy settings, aggregate usage, DNS status, transport type, CPU and memory counters. Package hashes are not guaranteed anonymity.

Logs rotate at about 512 KiB and retain the previous file, approximately 1 MiB plus the last record in total. There is no fixed-day deletion schedule for diagnostics. Pruning occurs during app activity, so inactive or removed-app journals may remain. Rules remain until deleted. Android cloud backup and device-transfer backup are disabled.

While the VPN runs, an app-private temporary configuration file stores loopback connection settings and internal SOCKS credentials generated for that run. Normal shutdown cleanup deletes this file. These are not passwords for the user’s other apps. Possible file retention after an abnormal exit has not been separately tested on a device.

5. External transfers and your choices

Settings, usage history, app inventory and diagnostics are not automatically uploaded to the developer or advertising/analytics providers. Forwarding traffic to its original destinations, receiving voluntary support messages and serving this policy website are separate activities.

When you press Share in the diagnostics screen, Android sharing lets you send a short text summary to an app you choose. The summary contains the app version, VPN status description, runtime in seconds, total transferred bytes, failure/rejection counts and the count of flows with an unidentified owning app. It does not automatically attach the full diagnostics file, usage events, package hashes, visited addresses or authentication tokens. You choose the sharing app and recipient, whose privacy practices apply. Information you choose to send to the developer is subject to the support-information process below.

Stop the VPN to end throttling. Revoke usage access in Android Settings to suspend automatic measurement; manual throttling remains available. Removing an app from management does not delete its history.

6. Deletion and rights requests

To permanently delete all local records, first stop the VPN, then use Android Settings > Apps > Slowlane > Storage > Clear data. This permanently deletes settings and history and cannot be undone. Uninstalling also removes local data. There is no Slowlane account to delete.

The developer cannot remotely access or erase records stored on your device. You may email requests to access, correct, delete or restrict processing of support information you directly sent to the developer. Identity will be checked only as needed to avoid disclosing another person’s information. The developer cannot promise to erase all records independently held by original destinations, email providers or hosting providers.

7. Support email and retention

If you voluntarily contact support, your sender address, message and attachments are processed only as needed to respond and resolve the issue. Messages are received and stored through Gmail. Do not send passwords, tokens, other apps’ conversations, visited URLs or complete diagnostic logs. Send only necessary app/device versions, settings, incident time and reproduction steps.

Support information is retained for as long as necessary to handle the inquiry and deleted without undue delay when its purpose is fulfilled and it is no longer needed. Information subject to a separate legal retention obligation is kept separately for the applicable period. This rule applies to support information managed by the operator. The app does not automatically delete support emails. Immediate erasure of a provider’s own backups or legally retained records is not promised.

Support email is handled through Google’s Gmail and may be processed internationally in providing that service. See the Google Privacy Policy for provider processing.

8. Privacy policy website

This Korean and English policy website uses static HTTPS hosting on Cloudflare Pages. Its page source contains no advertising or analytics scripts, forms, external fonts, tracking pixels or app-diagnostic upload function.

Cloudflare may process visitors’ IP addresses and request, routing and system-related information to deliver and secure the site. The absence of tracking code in these pages does not eliminate the hosting provider’s processing or security records. Provider retention depends on service, security and legal purposes; the operator does not promise an unverified fixed retention period.

Cloudflare describes worldwide processing and primary storage in the United States and the European Economic Area. For provider processing, international transfers and information for users in South Korea, see the Cloudflare Privacy Policy and its South Korea addendum.

9. Teen users and guardian procedures

The intended audience is teenagers aged 13 and above and adults; the app is not designed for children under 13. It is not a remote parental-control or supervision app. The Play Console target audience is set to ages 13–15, 16–17 and 18 or over. This setting does not mean that guardian consent and verification features are implemented or that an official content rating has been assigned.

Where parental or legal-guardian consent is required for processing personal information, including applicable processing of children under 14 in Korea, a separate consent and verification process is needed. Avoid sending unnecessary personal information and contact support with a guardian where appropriate. The app has no age verification or legal-guardian consent and verification feature. Android VPN and usage-access approvals do not replace guardian consent. The scope and procedure for processing that requires guardian consent remain unresolved. Publishing this policy does not mean that those features are implemented or that the related obligations have been fulfilled.

10. Changes and contact

Privacy contact: hww2989@gmail.com. If app processing changes, the in-app and public policies will be updated and consent requested again where necessary. Last revised: 14 October 2026.