Kakadu Privacy Policy
September 28, 2026
At Kakadu, your privacy is our top priority. Our service is built to minimize data collection and avoid storing any information that could identify or compromise you.
This Privacy Policy explains what data we collect (or do not collect), how it is used, with whom it is shared, and your rights as a user. It applies to the Kakadu VPN mobile apps and to the Kakadu VPN browser extension for Google Chrome.
1. Who We Are
Kakadu is an international virtual private network service designed for simplicity, privacy, and security.
We do not keep logs or track your online activity.
Data Controller and Developer:
Individual Entrepreneur Aik Rafaelian
Country of registration: Armenia
Address: 3008, Anushavan, Shirak, Armenia, 13 St., 11
Registration date: 15 May 2023
Customer Support Contacts
Email: KakaduHelp@yandex.ru
Telegram: @kakaduvpn_support
2. What We Don’t Collect
We do not collect or store:
- Connection logs: we do not record connection timestamps, session duration or bandwidth usage. Your IP address is used only to establish the VPN connection and is not stored.
- Browsing history, visited websites, DNS queries or the contents of your traffic.
- Personal data beyond what is needed to sign in and manage your account: we do not collect your full name, phone number or postal address. Your email address and account identifier are collected only when you create an account (see Section 4).
3. What We Might Collect
We only collect data essential to the operation of the service:
- Transaction IDs from Google Play or the App Store (to validate your purchase in the mobile apps).
- Support messages, if you reach out to us.
- Optional anonymous diagnostics (e.g., crash reports, connection errors).
- Minimal technical cookies on our website (for essential functionality only).
4. Kakadu VPN Browser Extension for Chrome
This section applies to the “Kakadu VPN: One Family” extension for Google Chrome.
What data the extension collects and why
Personal information:
- Email address and Google account ID, if you sign in with Google. Used to create your account and sign you in.
- Nickname and profile photo, only if you provide them.
- Device information: browser and operating system type and version, extension version. Used for the “Devices” list, where you can end a session on any device, and to enforce the device limit of your plan.
- Subscription and family plan information.
Authentication information:
- Authorization token and session ID. Issued after you sign in and kept in the extension so you don’t have to sign in again. Deleted when you sign out or end the session in the “Devices” list.
- Google verification token when you sign in with Google. Used only to sign you in.
- To keep you signed in, the extension also sets service cookies on our own API domains; these cookies are not accessible to third-party websites.
Location:
- Your device’s IP address, from which your approximate location can be determined. It is used only to connect you to the VPN server and is not stored.
What stays on your device only
- URLs of open tabs. The extension uses them to show on its icon whether the VPN is active for the current site, and to pre-fill the site address when you add it to a filter. Tab URLs are not stored and are never transmitted.
- Your site lists in filters and the extension settings.
When the VPN is on, your browser traffic passes through Kakadu servers. We do not record the websites you visit and do not keep activity logs (see Section 2).
Retention and deletion
Account data is kept for as long as your account exists and is deleted together with it.
You can delete your account in the extension under “Profile” → “Account management” → “Delete account”, or by contacting support.
On-device data is removed together with the extension.
Sharing
Data received by the extension is not sold and is not shared with third parties, except as described in Section 6.
Limited Use
The use of information received by the extension adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Data is used only to provide the VPN and manage your account; it is not transferred for advertising and is not used to determine creditworthiness.
5. Payments
In the mobile apps, all subscriptions and purchases are handled directly by Apple or Google through their in-app payment systems.
We do not have access to your billing information, payment methods, or card details.
Any refunds must be requested through the respective platform and are subject to Apple’s or Google’s refund policies.
6. Third Parties and Data Sharing
We do not sell user data. Data is shared only with:
- Google LLC — when you sign in with Google, Google provides us with your email address and account identifier through its OAuth service.
- Hosting providers that operate our API and VPN servers, acting as data processors under confidentiality agreements.
- Apple Inc. and Google Play — for purchases made in the mobile apps; we do not receive your payment details.
- Public authorities — only where required by applicable law.
No data is shared with advertisers or analytics vendors.
7. International Data Transfers
If data is processed outside your country, we ensure that appropriate legal safeguards are in place in accordance with applicable regulations, including the GDPR.
8. Your Rights
Depending on your location, you may have the right to:
- Request access to the data we hold about you.
- Request correction or deletion of your data.
- Withdraw consent to optional diagnostics.
- File a complaint with a supervisory authority.
For any requests, contact: KakaduHelp@yandex.ru
Telegram: @kakaduvpn_support
9. Data Retention
Account data is retained for as long as your account exists and is deleted together with the account.
Communication data (e.g., support requests) is retained only for as long as necessary to fulfill your request and comply with applicable law.
Technical diagnostics are anonymized and automatically deleted.
10. Children’s Privacy
Kakadu is not intended for users under the age of 13.
If you are under 13, please do not use our service.
11. Encryption and Security
All data is transmitted over encrypted connections.
For VPN traffic we use ChaCha20-Poly1305, Curve25519, and the Noise Protocol Framework — the same encryption trusted by Google, Signal, and Cloudflare.
12. Changes to This Policy
We reserve the right to update this Privacy Policy. If changes are significant, we will notify users through the app or the extension.
The latest version will always be available on our official website and within the app.
