Privacy Policy

1. Scope

This policy explains how OpenRung Foundation ("OpenRung," "we," "us," or "our") handles information when you use the OpenRung mobile or desktop apps, the OpenRung relay network, or openrung.org.

OpenRung is a nonprofit project that helps people reach the open internet through Foundation-operated and volunteer-run relays.

2. Information we collect

No account information

You can use OpenRung without creating an account or providing your name, phone number, or email address. We receive your email address only if you choose to contact us or request beta access or support.

Beta connection diagnostics

When you use the app or connect to the OpenRung network, the app and broker automatically process diagnostic information that may include:

• a random, persistent installation identifier; a new session identifier for each connection; event identifiers; and timestamps;
• your public or source IP address and IP-derived country, city, network provider, organization, and autonomous system number (ASN);
• app version, operating-system version, device model and manufacturer, locale, time zone, network type, and whether the network is metered or expensive;
• the relay selected, connection attempts and outcomes, failure stage and error details, connection and session duration, heartbeat status, latency, and other performance timings;
• cumulative bytes sent and received during a connection, without recording the content of those bytes; and
• results of a relay speed test that you start, including download size, duration, time to first byte, and calculated speed.

Browsing metadata by platform

The current iOS beta does not include website URLs, DNS names, destination IP addresses or ports, or the names of other apps in the diagnostic events it sends to OpenRung.

Some early-access builds on other platforms may collect connection-start metadata such as destination IP address, destination port, protocol, and the application package or identifier that opened the connection. We disclose this difference so this policy remains accurate across OpenRung platforms.

Website and locally stored information

Our website stores your language preference in your browser. The app stores settings, recent relay choices, its random installation identifier, and a short-lived queue of unsent diagnostic events on your device. Website and network infrastructure may also process ordinary request information such as IP address, browser type, requested page, and request time.

3. How we use information

We use the information described above only to:

• provide the app, select and connect to relays, and keep connections working;
• measure reliability, capacity, and performance;
• diagnose connection failures and improve beta builds;
• protect the service, investigate abuse, and enforce reasonable technical limits;
• respond to support or beta-access requests; and
• comply with law and protect users, volunteers, the Foundation, and the public.

We do not use this information for advertising, data brokerage, or tracking you across other companies' apps or websites.

4. When information is shared or visible

Infrastructure and service providers

We use providers that help deliver the app and network, including hosting and content-delivery providers, IP geolocation services, map-tile services, and Apple for TestFlight or App Store distribution. These providers may process IP addresses and request or device information as needed to provide their service. We do not authorize providers acting for OpenRung to use OpenRung diagnostic data for advertising or cross-service tracking, and we require them to protect data consistently with this policy and applicable law.

Foundation-operated and volunteer-run relays

Your internet traffic exits through the relay you connect to. Relay operators do not receive OpenRung's diagnostic database, but operating a relay can inherently expose connection-level information such as your source IP address, connection timing and volume, and destination IP addresses or domain names when the network protocol reveals them.

Legal and safety reasons

We may disclose information if we reasonably believe disclosure is required by law or necessary to protect the rights, safety, or integrity of users, relay operators, OpenRung, or the public. We do not sell or rent personal information.

5. Retention and deletion

OpenRung's broker retains beta diagnostic telemetry for up to seven days from the time it is received. Storage limits may remove older records sooner. We may retain support correspondence until the request is resolved and for a reasonable period afterward if needed for security, legal, or recordkeeping purposes.

The random installation identifier and local preferences remain on your device until you clear the app's data or uninstall it. Browser language preferences remain until you clear your browser storage.

You may request access to or deletion of information we can reasonably identify as yours by emailing admin@openrung.org. Because OpenRung has no user accounts, we may need your installation or session identifier and an approximate connection time to find a record, and in some cases we may be unable to link a record to you. We will honor verified requests as required by applicable law.

6. Your choices

• You can stop future network diagnostics by disconnecting and stopping use of the app. During beta testing, connection diagnostics are part of operating the service and there is not currently an in-app diagnostic opt-out.
• You can reset locally stored app information by clearing the app's data or uninstalling it.
• You can clear the website language preference through your browser settings.
• You can contact us to exercise privacy rights available where you live, including access, correction, deletion, or objection.

7. Security

We use technical and organizational safeguards designed to protect information, including encrypted transport to OpenRung services, restricted access to the telemetry dashboard, short diagnostic retention, and bounded storage. No system is completely secure, and we cannot guarantee that information will never be accessed, disclosed, altered, or lost.

8. Children

OpenRung is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided personal information to us, contact us so we can review and delete it where appropriate.

9. International processing

OpenRung is used internationally. Information may be processed in the United States and in other countries where our infrastructure and providers operate. Those countries may have data-protection rules different from the rules where you live.

10. Changes to this policy

We may update this policy as the beta and network change. We will post the revised policy here and update the effective date. If a change materially affects how the app handles information, we will provide additional notice where appropriate.