VPN Super

Is VPN Super safe?

It is one of the cleaner big free VPNs on a technical level, and a mediocre one on privacy. When researchers took apart the most downloaded free VPN apps in 2025, VPN Super came out without the shared hard-coded keys and hidden ownership links they found elsewhere. But the free app makes its money from ten advertising networks, Apple's label shows data used to track you, and the company has never had its no-logs promise checked by an outside firm. We score it 57/100.

That puts it above X-VPN (53) and well above Turbo VPN (42), but behind Hotspot Shield (62), another ad-funded free VPN that has at least had its logging audited.

Who is behind VPN Super?

The answer has changed over time, which is why it matters. The app appears on the App Store under Mobile Jump Pte Ltd and on Google Play under VPN Super Inc, with a Redwood City address. Its privacy notice covers four companies: Super Unlimited Inc., VPN Super Inc., Free VPN Pte. Ltd and Mobile Jump Pte. Ltd.

In its 2018 investigation into free VPN ownership, Top10VPN listed Mobile Jump at an address in a Beijing technology park, with a 315-word privacy policy that did not mention the VPN. By its 2022 follow-up, Mobile Jump was a Singapore company whose sole director, Tanuj Chatterjee, was a US citizen in California, and whose shareholder was Free VPN Pte. Ltd. Singapore's company register shows Free VPN Pte. Ltd was registered in September 2019, and it now lists the company number Top10VPN gave for Mobile Jump under the name VPN Super Pte. Ltd. Top10VPN listed no China links for VPN Super, while it found them for five other top VPN apps in the same study.

Today the parent, Super Unlimited Inc., names its leaders openly. Its site lists Tanuj Chatterjee as chief executive, a former Dropbox finance chief as chairman, and the venture firms WndrCo and 8VC as investors. It also sells an eSIM app and a second-number app. That is more openness than most free VPNs in the store charts offer, though the app listing itself does not mention the parent.

What the 2025 "Hidden Links" study found

"Hidden Links", presented at the FOCI 2025 workshop by researchers from Arizona State University and Citizen Lab, examined 21 popular Android VPNs with about 972 million combined downloads. It grouped most into three secret families, including the one behind Turbo VPN, whose shared Shadowsocks password let an eavesdropper decrypt traffic.

VPN Super was one of three apps the authors placed in an "Other" group with no links to the rest. They found only standard code obfuscation and no anti-analysis tricks. The app used OpenVPN and IKEv2, and memory dumps showed keys and settings consistent with those protocols. The study did not report a hard-coded key or a flaw of its own for VPN Super.

That is a good result as far as it goes. It is one academic look at the Android app, not an audit. VPN Super has no published penetration test, no no-logs audit and no Google Play independent security review badge. Its security.txt file gives an email address for security and bug bounty reports, but we found no public programme on HackerOne or Bugcrowd and no stated rewards. We found no breach or published vulnerability for the app.

What data does the free version share?

The policy's core promise is sound: it says the company does not record the sites or apps you use over the VPN, uses your IP address only during a session to pick a server, and does not store it. Paid users see no ads.

Free users are a different case.

The policy also admits that, under California's broad definition, the company "sold" identifiers, IP-based location and app usage data in the past 12 months through these partners. Google Play's statement that nothing is shared does not match that, so we scored privacy on the policy and Apple's label. The terms also let the company block free users who run an ad blocker.

How to use VPN Super more safely

1. Use it to protect yourself on public Wi-Fi or reach a blocked site, not for anything where you need a strong privacy guarantee.
2. If you stay on the free plan, reset or turn off your phone's advertising ID, which limits what the ad networks can link to you.
3. Skip account sign-up unless you pay. The app works without one.
4. If you buy Premium, check where you paid. The 30-day refund applies to purchases on the VPN Super website; App Store refunds go through Apple.
5. Do not let children install it. The stores rate it 4+ and Everyone, but the terms require users to be 18.

For a free VPN without ads, Proton VPN has five public no-logs audits, and TunnelBear has had a yearly security audit since 2017.

How we scored it

Privacy (42) is the weakest factor because of tracking on Apple's label, ten ad networks and an admitted data "sale" under California law, with no audit behind the no-logs claim. Security (60) gains from a clean 2025 research result, standard protocols and no known vulnerabilities, but loses for the missing audit and bug bounty terms. Regulatory record (85) is the highest factor: no regulator has acted against the app, but none has examined it either.