Portal — Privacy Policy & About

Last updated: June 26, 2026 App: Portal · Version: 2026.6.1

---

1. What Portal is

Portal is a CLIENT application for the ePortal connection technology. ePortal is a hybrid transport that runs over two well-known, standards-based protocols — Xray (VLESS/REALITY over TLS) and AmneziaWG (a WireGuard-based tunnel) — with our own ePortal session layer on top.

Portal does not host or provide any servers and does not open access to any resources by itself. The app acts solely as a client: the user imports a configuration (an epnx:// access key) issued by their own provider or organization, and the app connects to the server defined in that configuration.

Intended use: secure remote access to a company's or provider's private resources (corporate and remote-work scenarios).

The app has no account and no sign-in.

---

2. What data we collect

We do not collect personal data.

Category	Collected?	Notes
Account / sign-up	❌ No	The app works without an account or login.
Name, email, phone	❌ No	Never requested or stored.
Browsing history / traffic	❌ No	The app keeps no log of visited resources and transmits none.
Location	❌ No	Not used.
Ads & trackers	❌ No	No advertising and no third-party trackers.
Access key (epnx://)	📱 On-device	Stored only on the device, to perform the connection.
Technical logs	📱 On-device	A connection-diagnostics log stays on the device and is not sent automatically.

In other words, the app builds no user profile, does not sell or share data with third parties, and does not track your online activity.

---

3. Network connections

All traffic is routed to the server defined in your own configuration (issued by your provider or organization). We do not operate those servers and have no access to the data passing through them. Connections are protected by standard encryption (TLS / WireGuard cryptography).

---

4. Permissions

• Network Extension (Personal VPN) — required to route traffic to the server from your configuration. This is Apple's standard system mechanism (NEPacketTunnelProvider).
• Camera (optional) — used only to scan a QR code containing an access key. Camera images are not stored or transmitted.

---

5. Data storage and deletion

The access key and local settings are stored on the device and are removed when you remove the key in the app ("Change key") or delete the app. Because there is no server-side account, there is nothing to delete on our side — no such data exists.

---

6. Children

The app is not directed at children and does not collect data about minors.

---

7. Changes to this policy

We may update this policy. The current version is always available at the address where this document is published; the last-updated date is shown at the top.

---

8. Support & Contact

Need help, or have a privacy question? Contact our support team:

• Email: support@xtau.xyz

We aim to respond within a few business days. When reporting a connection issue, it helps to include your device model and OS version (e.g. iPhone 15, iOS 18 — or Apple TV 4K, tvOS 18). Please do not send your access key (epnx://) by email — it is private to you.

---

Appendix: Portal is a legitimate client

This section briefly explains the app's purpose — for users and for review.

Portal is a client tool — not a service, and not a circumvention tool.

• Portal provides no servers, hosts no content, and opens no access to anything by itself. Without an access key, the app does nothing.
• A connection is possible only with a configuration the user already obtained from their provider or employer. By analogy: it is like an email client, which provides no mail on its own — it merely connects to a server whose details the user enters.
• The typical scenario is secure remote access by an employee to an organization's private resources (internal services, work environments), as well as connecting to the servers of a provider that supports the ePortal technology.
• The app requires no account, collects no personal data, shows no ads, and uses only standard encryption.
• Responsibility for choosing a provider and for how the connection is used rests with the user and their provider. The app complies with applicable laws and the App Store Review Guidelines in the regions where it is offered.

In short: Portal is a neutral client connection utility. It does nothing beyond establishing a connection using a configuration that the user supplied themselves.