Law Enforcement Requests

1. Data we hold

In accordance with our Privacy Policy, we collect only the data needed to run the account and the subscription:

• The account identifier (phone number and/or email address), the creation date and, if provided, the name and country.
• Subscription data (plan, start and end dates, status) and payment references (provider, amount, date, transaction ID).
• Device metadata: platform, OS and app version, hardware identifier hashed on the device, and a two-letter country code of the last activity.
• Total data volume transferred, aggregated per hour per subscription.
• A salted, rotating hash of the IP address, used solely against abuse. This hash cannot be reversed to recover the original IP address, and it does not allow a user to be looked up from an IP address.

2. Data we do not hold

Our infrastructure does not inspect, record or retain:

• The contents of your traffic.
• The sites, domains or destination addresses visited.
• DNS queries.
• The timing of your individual connections.
• Your IP address in clear, or the exit IP address assigned at any given time.

3. What we can produce

Upon a valid request concerning an account identified by its phone number or email address, we can disclose the account, subscription and payment data listed in section 1, strictly limited to what is requested and necessary.

4. What we cannot produce

Because we do not hold this information, we are technically unable to:

• Identify a user from an IP address, date and time.
• State which sites, services or destinations a user has visited.
• Provide a user's browsing or connection history.
• Intercept, monitor or record a user's traffic, in real time or after the fact.
• Disable encryption or introduce a backdoor into the application or infrastructure.

5. How to submit a request

Any request must take the form of a written requisition issued by a judicial or law-enforcement authority competent under the laws of Cameroon, addressed to LTC GROUP SARL at privacy@kolavpn.site. It must state the legal basis, the identity and function of the requesting authority, the precise identifiers of the targeted account (phone number or email address), the categories of data sought and the requested deadline. Requests from foreign authorities must go through the international judicial cooperation channels applicable in Cameroon. Informal requests (phone call, unverifiable email, absence of a requisition) are not processed; we may ask for confirmation through an official channel.

6. Review of requests

Each requisition is reviewed for legal validity, scope and proportionality. We ask for overly broad or imprecise requests to be narrowed, refuse those without a valid legal basis, and disclose only the strict minimum necessary. We inform the user concerned where the law does not prohibit it.

7. Transparency commitment

We commit to publishing, at least once a year, a transparency report stating the number of requests received, their origin and the proportion that resulted in full disclosure, partial disclosure or refusal. We will never change our no-logs browsing policy at the request of a third party without publicly updating this page and our Privacy Policy.

8. Contact

Authorities: LTC GROUP SARL -- privacy@kolavpn.site. Users seeking clarification: support@kolavpn.site.