Is VPN Proxy Master safe? Logging policy, audits and jurisdiction

Privacy and jurisdiction 3.7/10 and security 2.5/10 (segment medians 2.7 and 1.2). No red flag in our data. Independent no-logs audit: ✕ No.

In 10 seconds

Kill switch

Privacy

Jurisdiction: Singapore, outside 5/9/14 Eyes
Legal entity: SECUREGUARD GROUP PTE. LTD.
No-logs policy: Yes strict no-log policy
Data retention: as long as necessary, no specific periods
Shared with third parties: service providers: Firebase, Adjust, Zendesk, AdMob, Liftoff, InMobi, Unity, Stripe, Payssion, Paddle; no sale of data

What the privacy policy says is collected

Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.

Email✕ Yes
IP at sign-upNot stated
Connection IP✓ No
Session timesNot stated
BandwidthNot stated
Device info✕ Yes
App analytics✕ Yes
Crash reports✕ Yes

Security

Kill switch: Yes
DNS leak protection: Yes (yes (DNS and IP leak protection))
Encryption: AES-256
Security audits: No only regular internal reviews
Two-factor sign-in: Not stated

On privacy, VPN Proxy Master scores 3.7 out of 10 with us, and 2.5 on security. For free mobile apps that is above the segment median (2.7 and 1.2), and our data shows no red flags. Still, almost everything known about its protection rests on the company's own word.

What the privacy policy says

The service belongs to Singapore-based SECUREGUARD GROUP PTE. LTD.; Singapore is not part of the 5/9/14 Eyes alliances. The company claims a strict no-logs policy, but it has no independent audit, no transparency report and no warrant canary. Data retention periods are not stated, only "as long as necessary", and on a lawful request the company discloses whatever it is required to.

The policy acknowledges collecting email addresses, device information, app analytics and crash reports. Its partners include Firebase, Adjust and the ad networks AdMob, Liftoff, InMobi and Unity. A review by top10vpn says the service keeps the internet provider, server location and traffic volume; the original IP is not on that list. In its GDPR section the policy links to a form on the gameloft.com website, apparently text copied from someone else's document.

How the connection is protected

There is a kill switch and protection against DNS and IP leaks, AES-256 encryption, and the OpenVPN, IKEv2, L2TP/IPsec, SSR and V2Ray protocols. WireGuard is not in the app. The company has not undergone any external security audits and mentions only regular internal checks. In top10vpn's tests with Wireshark, the traffic turned out to be not fully encrypted.

If a verified no-logs policy is a must for you, pick from VPNs with an independently audited no-logs policy or in the secure VPN ranking.