Back to Barra

Barra Privacy Policy

Last Updated: May 18, 2026

1. Introduction

Barra ("Barra," "we," "our," or "us") is a privacy-first connectivity app built and operated by nzayn Software Studio, based in Dubai, UAE. Barra helps travelers and mobile professionals stay connected on the networks they encounter while abroad.

Privacy is the core of the product, not an afterthought. This policy explains in plain terms what information we do and do not collect, how we use it, and the rights you have. By using Barra, you agree to the practices described here.

2. Our Privacy Commitment

Barra is designed to know as little about you as possible. Specifically, we do NOT collect, log, or store any of the following:

  • Traffic content: the data you send or receive while connected through Barra
  • DNS queries: the domain names your device resolves while connected
  • Websites or apps: the sites or services you access through the tunnel
  • IP addresses: we do not retain logs that associate your originating IP with your account
  • Connection timestamps: when you connect, for how long, or how often
  • Bandwidth usage: per-session or per-user bandwidth tied to your identity
  • Browsing history: any record of your activity while connected

Our servers forward your encrypted traffic and do not retain it. If we are legally compelled to produce records, we can only provide the limited account data described in Section 3 — because that is the only data we have.

3. Information We Collect

3.1 Account Information (via Sign in with Apple)

  • Apple User Identifier: an opaque, per-app identifier provided by Apple. This is not your Apple ID and cannot be used to identify you outside of Barra.
  • Name (optional): only if you choose to share it when you first sign in. You can use Apple's private name option.
  • Email (optional): only if you choose to share it when you first sign in. You can use Apple's private email relay, in which case we never see your real email.

3.2 Subscription Information

  • Subscription status: whether you have an active Barra subscription, your plan (monthly or yearly), and trial status. This information is managed by Apple's App Store via StoreKit; we do not see your payment details.

3.3 App Preferences (synced via iCloud)

  • Preferred region
  • Kill switch and connect-on-demand settings
  • Onboarding completion flag

These preferences sync between your Apple devices via Apple's iCloud Key-Value Store. They are stored under your Apple ID and we do not have access to them on our servers.

3.4 Diagnostic Data (Apple, opt-in)

If you have enabled "Share with App Developers" in iOS Settings > Privacy & Security > Analytics & Improvements, Apple may share anonymized crash reports with us via App Store Connect. We use these to fix bugs. We do not use any third-party analytics, advertising SDKs, or behavioral tracking.

4. How We Use Your Information

  • Authenticate your subscription: verify that you have an active Barra plan before establishing a tunnel
  • Provide the tunnel: route your encrypted traffic through our servers to its destination
  • Sync preferences: via Apple's iCloud, with no involvement from our servers
  • Customer support: respond to your inquiries when you contact us
  • Fix bugs: investigate anonymized crash reports from Apple if you opted in to sharing them

We do NOT use your data for advertising, profiling, marketing communications without your consent, or sale to third parties. We will never do these things.

5. Third-Party Services

Barra is intentionally minimal in its third-party dependencies:

  • Apple: Sign in with Apple (authentication), StoreKit (subscriptions), App Store (billing), iCloud (preference sync). See Apple's Privacy Policy.
  • Cloudflare: DNS resolution (1.1.1.1) for traffic inside the tunnel. See Cloudflare's Privacy Policy.
  • Hosting providers: the physical servers that carry your tunnel traffic are leased from commercial hosting providers (such as Hetzner) in the regions we serve. Tunnel traffic transits these servers but is not retained on them.

Barra does not include Google Analytics, Facebook SDK, Mixpanel, Amplitude, Sentry, or any other behavioral analytics or advertising libraries.

6. Data Storage and Security

6.1 Where Your Data Lives

  • On your device: account identifier stored in the iOS Keychain (encrypted by Apple, optionally synced to your iCloud Keychain)
  • In Apple's iCloud: app preferences via Key-Value Store, accessible only to apps signed by us and tied to your Apple ID
  • With Apple: subscription state and billing records, managed by Apple's StoreKit

6.2 Security Measures

  • All traffic between your device and our servers is encrypted end-to-end using modern protocols (TLS 1.3, QUIC)
  • Account data on-device is protected by the iOS Keychain and the Secure Enclave
  • Our servers run hardened, minimal Linux installations with restrictive firewall policies
  • No central user database in version 1; nothing on our infrastructure to breach

7. Your Rights

Because we collect so little, exercising your rights is largely something you can do without contacting us:

  • Access: all data we have access to is described in Section 3. To see the actual values, you can review them in the Barra app's Settings screen.
  • Deletion: sign out of Barra (clears the Keychain) and delete the app (clears local data).
  • Revoke Apple access: at any time, you can revoke Barra's Sign in with Apple authorization via iOS Settings > Apple Account > Sign in with Apple. We are notified automatically.
  • Cancel subscription: via Apple ID settings or directly from the Barra app's Settings screen.
  • Withdraw consent / opt-out: by uninstalling the app, you remove all data we have any path to.

EU/UK/Swiss residents have additional rights under the GDPR, including the right to lodge a complaint with a supervisory authority. California residents have rights under the CCPA. To exercise any rights or ask questions, contact us at m.saeed.youssef@gmail.com. We will respond within 30 days.

8. Children's Privacy

Barra is not intended for use by children under the age of 16. Sign in with Apple requires that users be at least 13 years old (as set by Apple's terms). We do not knowingly collect personal information from children. If you believe a child has signed up for Barra, please contact us at m.saeed.youssef@gmail.com and we will deactivate the account.

9. International Users

Barra is operated from the United Arab Emirates. Our tunnel infrastructure operates in multiple jurisdictions worldwide, chosen for their reliability and respect for digital privacy. By using Barra, you understand that your encrypted traffic may transit through any of these locations.

For European Economic Area users: nzayn Software Studio acts as the data controller for the limited account data described in Section 3. Lawful basis for processing is your consent (when you sign in) and the necessity of performing the subscription contract (delivering the service you paid for).

10. Legal Requests

If we receive a valid legal request for information about a user, we will respond only with the information we actually have, which is the limited account data described in Section 3 (no traffic, no DNS, no connection logs). Where permitted by law, we will notify the affected user.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the app, our infrastructure, or applicable law. We will post the updated policy on this page and update the "Last Updated" date. For material changes, we will also notify active subscribers via the app or by email if you have shared one.

12. Contact Us

Questions about this Privacy Policy, the data we hold, or your rights? Get in touch: