Is Turbo VPN safe? Logs, ad trackers and what the policy leaves out

Privacy and jurisdiction 3.7/10 and security 2.5/10 (segment medians 2.7 and 1.2). No red flag in our data. Independent no-logs audit: Not stated.

In 10 seconds

  • Kill switch

Privacy

Jurisdiction
Singapore, outside 5/9/14 Eyes
Legal entity
Innovative Connecting Pte. Limited (UEN 201812738K)
No-logs policy
Yes no traffic or personal data in data centers
Independent no-logs audit
Not stated
Data retention
as long as needed; no periods given
Shared with third parties
AdMob; Liftoff; InMobi; Unity; Bigo Ads; Firebase; Adjust; Zendesk; Stripe; Airwallex; Payssion; v5pay; Forter; Rebilly
Trackers on the website
Yes GTM, cookies, ad pixels

What the privacy policy says is collected

Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.

  • Email✕ Yes
  • IP at sign-upNot stated
  • Connection IPNot stated
  • Session timesNot stated
  • Bandwidth✕ Yes
  • Device info✕ Yes
  • App analytics✕ Yes
  • Crash reports✕ Yes

Security

Kill switch
Yes
DNS leak protection
Not stated
Encryption
AES-256
Open-source apps
No
Two-factor sign-in
Not stated

Turbo VPN scores higher than its peers in the segment, but its no-logs promise is not backed by anything. VPNRadarLab gives it a privacy score of 3.7 out of 10 and a security score of 2.5, versus medians of 2.7 and 1.2 for free mobile apps. Our data shows no red flags or incidents, and the service does not report any independent audit.

What the policy says about logs

The developer company is registered in Singapore, outside the 5/9/14 Eyes alliances. The privacy policy, dated 25 April 2025, states that traffic and personal data are not stored in data centers. Whether the service keeps the connection IP and session times is not addressed in the policy, and it names no specific retention periods. There is no separate policy for law enforcement requests, only a general phrase about complying with the law.

Where the app's data goes

The free mobile plan shows ads, so five ad networks appear on the partner list: AdMob, Liftoff, InMobi, Unity and Bigo Ads. Firebase and Adjust receive analytics and crash reports. The app collects device type, operating system, internet provider, country and anonymized traffic volume, and the website carries advertising pixels.

Connection protection

The app includes a kill switch and AES-256 encryption. Protocols: OpenVPN, IKEv2, L2TP/IPsec and the proprietary ISSR. Turbo VPN does not say whether it protects against DNS leaks or whether two-factor login is available. The app code is closed-source, and the service does not report any security audit either.

Who it suits

Turbo VPN will help you open a blocked site on your phone. For banking, work email and accounts in your name, pick a VPN with an independent no-logs audit or check out Turbo VPN alternatives.