What we protect, and what we do not claim
Accurate explanations instead of marketing. This page states our security architecture, our privacy disclosures, our service policies, and exactly which parts of the platform are not yet operational.
Authentication
Accounts are protected by the platform’s secure authentication: email and password with emailed verification codes, password recovery, and optional federated sign-in providers. Passwords are never stored by this application.
Role-based access
Two roles exist: customers and administrators. Every registry and administration record is restricted server-side; a registered customer is never automatically an administrator.
Server-side authorisation
Access rules are enforced by the data platform, not by the browser. Records are scoped to their owner, and administrative records are visible only to administrators.
Encrypted transport
All website, dashboard and API traffic is served over TLS. Customer devices will reach our WireGuard servers with modern cryptography (Curve25519, ChaCha20-Poly1305, BLAKE2s).
Secrets & credentials
Partner secrets are generated server-side and stored only as salted hashes. Secrets are shown once at creation, never placed in client code, and can be rotated or revoked immediately.
Rate limiting
Partner endpoints enforce per-credential request limits, and repeated failures are recorded as security events for administrator review.
Audit logging
Administrator actions, credential changes and partner API access are written to an audit trail with actor, action, outcome and severity.
Protection against unauthorised provisioning
Peer provisioning and server administration are administrative operations. No customer-facing or public surface can create infrastructure or a peer without authorisation.
What we store, and what we do not collect
We store
- Your account email, display name and account role.
- The devices you register, their platform and their WireGuard public key.
- Your saved default location (country, region, city, postal region).
- Subscription status and entitlement limits.
- Support requests and partner applications you submit.
We do not collect
- Browsing histories, visited domains or page contents.
- Private keys from your devices or from any wallet.
- Wallet custody material, signing credentials or transaction permissions.
- Traffic content. A VPN cannot see into encrypted connections, and we do not attempt to.
On logging: our operational logging practice must be verified against deployed infrastructure before we make any statement about it. We therefore do not advertise a “no logs” guarantee at this stage, and we will not until it can be demonstrated.
What our service may and may not be used for
- Using FlowMoney VPN for lawful privacy protection, remote access and business connectivity.
- Protecting your connection on untrusted networks.
- Building licensed integrations through the FlowMoney VPN Partner API within your granted scopes.
- Any illegal activity under applicable law, including fraud, harassment, or distribution of malicious software.
- Attacking, scanning or interfering with systems you are not authorised to test.
- Reselling access without a licensing agreement, or attempting to bypass rate limits and authorisation controls.
- Using the service to harm other customers’ accounts or data — this is grounds for immediate suspension.
Subscriptions, billing and the current service state
- No charges today. No payment method is collected, no card is charged, and no subscription is activated. Pricing remains unpublished until approved, and billing will be introduced only after that approval.
- Subscriptions. When billing opens, subscriptions will support cancellation at the end of a billing period, status tracking through pending, active, past due, canceled and expired, and business seats with device limits.
- Accounts. You may create an account without any FlowMoney wallet or financial product, and you may manage devices, preferences and your saved location from the dashboard.
- Partner terms. Partner access is granted per application, with explicit scopes, rate limits and revocation rights retained by FlowMoney VPN. Administrative infrastructure operations are never granted to partners.
- Independent operation. FlowMoney VPN is owned by FlowMoney LLC and operates independently of flowmoney.app and wallet.flowmoney.app. VPN access never requires cryptocurrency custody or transaction authorisation.
Complete today, versus awaiting deployment
We keep finished functionality strictly separate from infrastructure that has not been deployed. Nothing here claims protection you are not yet receiving.
- Website, navigation, interactive 3D Earth and location explorer
- Customer registration, email verification, sign-in and password recovery
- Customer dashboard, device management and privacy preferences
- Server registry, location registry, subscription records and administration centre
- Partner API foundation, credential hashing, rate limiting and audit logging
- WireGuard exit servers deployed, health-checked and registered
- Native clients for Android, iPhone, Windows and macOS
- Peer provisioning and real connection sessions
- Approved pricing, live billing and invoices
Until every item above is complete, the customer dashboard displays “VPN SERVICE SETUP IN PROGRESS” and never simulates a connection.
Reporting a vulnerability
Report suspected vulnerabilities through the support form using the “Security report” category. Include the affected surface, the steps to reproduce and any supporting evidence. Do not test against other customers, accounts or production infrastructure. Verified reports are reviewed before general support traffic.