1. Scope, operator and effective date
Effective August 21, 2026. This policy describes how Puzzing Labs Inc., referred to as “Puzzing Labs,” “we,” or “us,” processes information when you use the Nthbe App, the Nthbe website, your Nthbe account, VPN service or private Mesh features.
Nthbe is not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn that such information was provided, we will take reasonable steps to delete it.
2. Information categories and sources
We receive information directly from you when you create an account, contact support or complete a purchase; automatically from the App, website and service infrastructure when they operate; and from Apple or another payment provider when a transaction is validated.
The categories involved are account and contact information, purchase and entitlement records, device and app configuration, limited service-operation metadata, optional Mesh descriptors and information you deliberately include in a support request or diagnostic export.
3. Account, purchase and device information
We process the email address you provide, securely protected account credentials, account session state, plan entitlement, selected server, app version, operating-system version, language and a random persistent device identifier. This information is used to create and authenticate your account, make configured services available, prevent account abuse and coordinate your devices.
For Apple in-app purchases, we process the product identifier, transaction or receipt information and validation result needed to credit or recover an eligible account purchase. Apple processes payment credentials under its own privacy policy; Nthbe does not receive your complete payment-card information. Website checkout providers process the payment information required for the payment method you select.
4. VPN and network processing
To deliver a connection, the selected Nthbe gateway transiently processes the client address, destination address or host name, destination port, protocol, connection time and transferred byte count. Nthbe does not decrypt HTTPS or TLS content and does not inspect application payloads.
After connection processing, we do not retain browsing history, DNS query history, packet contents or records that associate a source user with visited destinations. We do not sell or rent VPN traffic data, use it for advertising or profiling, or use it to track you across apps or websites.
5. Mesh information
If you enable Mesh, we process the device name, public identity key, advertised network endpoints, NAT state, routes you explicitly publish, path state and short-lived coordination signals needed to connect your private devices. Mesh devices, descriptors and routes are isolated by the authenticated account.
Coordination signals expire and are removed automatically. A remote subnet becomes reachable only when an authorized device explicitly enables gateway publishing. Network traffic may then be processed by that authorized Mesh peer to deliver the connection you requested.
6. Information kept on your device
Local traffic capture, packet details, local DNS observations and diagnostic logs remain on your device by default. We receive an exported diagnostic or capture only when you deliberately share it. Review an export before sending it because it may contain device, network, domain or connection information.
You can delete local capture records, disable local proxy listeners and disable Mesh or subnet publishing from the App.
7. Website data and cookies
The Nthbe website may process an IP address, browser type, operating system, requested pages, referral information and session cookies needed for security, sign-in, language selection and service operation. If site analytics are enabled, they are used to understand aggregate website performance and improve the service.
This website section does not mean that the Nthbe App contains third-party advertising SDKs or uses browser cookies for cross-app tracking. The App does not use information for third-party advertising.
8. Purposes and legal bases
We process information as needed to perform the service you request, including authenticating accounts, operating VPN and Mesh connectivity, synchronizing configuration, applying service time and answering support requests. We also process limited information for legitimate security interests such as preventing fraud, abuse and unauthorized access.
Where applicable, processing may also rely on your consent, for example when you choose to send diagnostics, or on a legal obligation such as accounting, tax, sanctions or a valid government request. You may withdraw consent for future optional processing without affecting processing already completed on another lawful basis.
9. Service providers, disclosure and international processing
Infrastructure, payment, distribution and support providers may process only the information needed to perform services on our behalf and are subject to contractual or equivalent restrictions. Apple independently processes App Store transactions under its own terms. We may also disclose information when required by valid legal process, to protect users and the service, or as part of a corporate transaction.
Nthbe operates through infrastructure that may be located outside your country. Where applicable law requires it, we use contractual, technical or organizational safeguards for international processing. We do not authorize providers to use Nthbe traffic data for their own advertising or tracking.
10. Retention and security
Account, entitlement, device and service-configuration records are retained only while reasonably necessary to provide and protect the service, resolve disputes and meet accounting or legal obligations. Short-lived Mesh signals are removed after expiry. Limited transaction and security records may remain after account deletion where required for accounting, fraud prevention, security or legal compliance.
We use administrative, technical and organizational safeguards, including encrypted transport and access controls. No online system can be guaranteed completely secure, so protect your account credentials and notify us if you suspect unauthorized use.
11. Your choices, account deletion and privacy rights
You can change your profile, disable optional Mesh publishing, remove local data and permanently delete your account from Nthbe Settings. Subject to the limited retention described above, account deletion removes the active profile, device identities, active service allocation and associated Mesh devices, routes and signals.
Deleting an Nthbe account does not automatically refund or revoke an Apple purchase or another third-party payment arrangement. Manage refund requests and payment methods with the applicable provider. Depending on your location, you may request access, correction, deletion, restriction, objection, withdrawal of consent or a portable copy of eligible personal information through the private contact form. You may also contact the competent privacy authority where local law provides that right.
12. Policy changes and contact
We may update this policy as Nthbe, its infrastructure or legal requirements change. Material changes will be identified on this page, and the current version applies from the effective date shown above.
For privacy questions or requests, use the Nthbe contact page. The public website does not expose the private recipient mailbox.