Privacy Policy

Last updated: 29 July 2026

Clash is a network utility that runs on your device. It is not a proxy service: it connects to the services you configure, and it has no developer-operated server behind it.

Clash is published by, and “we” in this policy means, OmniWide Media Limited.

What we collect

Nothing.

Clash has no account system, analytics, telemetry, advertising SDK, tracking SDK, third-party crash reporter, or automatic diagnostics uploader. Its privacy manifest declares no collected data types, no tracking, and no tracking domains.

Under Apple's App Privacy definition, information processed only on the device is not collected. We do not transmit app or VPN data to ourselves or to analytics, advertising, or data-broker partners.

VPN data commitment

We do not collect or sell user data, use it for our own purposes, or disclose it to third parties. Clash processes network traffic on the device only as necessary to provide the functionality you request.

The proxy, DNS, subscription, provider, and test services you configure are user-directed external services, not services operated by us and not data recipients selected by us.

What stays on your device

• Profiles and configurations are stored byte for byte as you supplied them, including credentials contained in those files. They are protected by iOS data protection and the app container.
• App settings are stored locally in the app container. Sensitive local proxy-sharing credentials are stored in the device Keychain.
• Connection and request activity is bounded operational information shown in the app. Live and recent connection data is capped, held locally, and is not uploaded by Clash. Clash does not record the contents of your traffic.
• Logs and diagnostics remain local. Clash can receive privacy-filtered Apple MetricKit diagnostics on the device, but it has no automatic uploader. Data leaves the device only when you explicitly use an export or share action, in which case you choose the destination.

User-directed network connections

Clash makes network connections to provide features you configure or start:

• Subscription, rule-provider, proxy-provider, proxy, and DNS services named by your configuration. Depending on the service, it may receive your IP address, request time, authentication information, DNS queries, traffic metadata, and the content that the selected protocol can access.
• Resource updates from the URLs shown on the Resources page. Default geo database sources point to the MetaCubeX meta-rules-dat releases on GitHub.
• Diagnostics you start. The network-quality test contacts Apple's measurement endpoint. STUN contacts the server you enter. Latency tests contact the URL configured for the selected group.
• Configured background updates. When enabled, Clash may check configured subscriptions and resources in the background for the purpose you selected.

These external services operate under their own terms and privacy policies. We do not control them and do not receive the data they process.

Clash does not contact any service in the background for our benefit. Automatic subscription and resource updates run only when you configure or enable them.

iCloud backup

If you explicitly create an iCloud backup, the backup is stored in your iCloud account under Apple's terms. We do not have access to it.

Retention, deletion, and privacy choices

Because we collect no data and provide no account, there is no server-side user profile or developer-held personal data to retain or delete.

• Local profiles, settings, credentials, logs, and diagnostics remain on the device until you delete the relevant item, use Clear All Local Data, or uninstall Clash.
• Clear All Local Data removes local profiles, settings, and Keychain credentials. It does not delete iCloud backups.
• Current iCloud backups can be deleted from Clash's Backup & Restore page by swiping the backup and choosing Delete.
• You can stop user-directed processing by disconnecting, removing a profile, disabling configured updates, or choosing not to run or export diagnostics.

Children

Clash is a general network utility and is not directed at children. We do not knowingly collect personal data from anyone, including children.

Changes to this policy

We may update this policy when the app or its data practices change. The current version and update date will be published at this URL. Material changes will also be reflected in the app or its release information.

Contact

If you wish to contact us regarding this Privacy Policy or any privacy-related matters, please contact us via email at legal@omniwide.media, or via postal mail at OmniWide Media Limited, 128 City Road, London, United Kingdom, EC1V 2NX.

For non-confidential questions, you may use the Clash client issue tracker. Never post subscription URLs, credentials, server addresses, private logs, or other sensitive information in a public issue.