HulaVPN

HulaVPN is a freemium VPN app developed by Hula Link Technology Co., Ltd which is registered in China. At the time of this post, the app has a rating of 4.7 stars with a combined 47,000 reviews. That, given their privacy policy and embedded adware, is a bit concerning.

While the company makes claims of not logging user activity and collecting only minimal data, the specifics around data retention are vague, and the policy lacks granularity on the types of security measures in place. Moreover, the policy alludes to data being used for advertising, which may compromise the level of anonymity a user can expect. The term “reasonable” is ambiguously employed when discussing compliance with law enforcement, leaving room for interpretation. GDPR compliance is mentioned, which could be reassuring for EU residents; however, the international transfer of data to countries with potentially less stringent data protection laws is also a concern. If you engage in direct contact with the company, expect to hand over more personal information. Further, the policy is subject to change at any time without notice. Given these factors, if total privacy and anonymity are high on your list of priorities, this service might not be the optimal choice. This sentiment is further bolstered if you consider that the company is based in China, a jurisdiction known for its stringent controls over internet data. Therefore, the geolocation of this service alone may be a decisive factor for those serious about privacy.

Major Red Flags:

• Data Usage for Advertising: The policy states that collected data may be used to “support advertising and related activities,” a concern for users seeking total anonymity.
• Vague Compliance with Law Enforcement: The policy mentions compliance with laws and assisting law enforcement when deemed “reasonable,” but doesn’t define what “reasonable” means, leaving room for interpretation.
• Undefined Security Measures: The policy lacks specific information about the types of security protocols and measures employed to protect user data.
• International Data Transfers: Personal data may be transferred to other countries that might not have the same level of data protection as the user’s country of residence.
• Unclear Data Retention Policy: The policy does not clearly define how long the user data will be retained, leaving users in the dark about the longevity of their data storage.
• Policy Subject to Change: The company reserves the right to change the privacy policy at any time without prior notice, potentially affecting how user data is handled.
• Jurisdictional Risks: The company is based in China, a country known for stringent internet and data controls, which may present additional privacy risks.

See also: