# App Store VPN Review

Use the following response in the App Store Connect Resolution Center and copy
the same substance into the App Review Information field.

## Response to App Review

Hello App Review Team,

HT Portal VPN is an enterprise remote-assistance companion app. It creates an
IPv4 split tunnel only to the remote industrial networks selected by an
authenticated HT Portal user. It is not a consumer anonymity VPN and it does
not route general Internet traffic.

### 1. What user information is collected using the VPN?

The app does not inspect or collect the contents of traffic carried by the VPN.
It does not collect browsing history, DNS queries, destination history, packet
payloads, or credentials transmitted inside the tunnel.

To authorize, operate, secure, and troubleshoot the requested VPN session, the
first-party HT Portal control plane processes only:

- the association with the authenticated HT Portal account and selected remote
  device;
- a random app-installation UUID, which is not the advertising identifier;
- platform and app version;
- session timestamps and status;
- selected transport (peer-to-peer or relay), connection quality and latency;
- technical error codes and messages;
- source IP and action metadata in security audit records.

### 2. For what purposes is this information collected?

This information is used exclusively to verify that the user is authorized for
the selected device, create and revoke the requested tunnel, maintain its
background lifecycle, display connection status, protect the service against
abuse, and diagnose connection failures. It is not used for advertising,
analytics, profiling, tracking, or any unrelated purpose.

### 3. Is the data shared with third parties, and where is it stored?

No. HT Portal VPN does not sell, license, or disclose this information to third
parties and contains no advertising or third-party analytics SDKs. The records
are stored only in the HT Portal server-side database controlled by Hive
Technology S.r.l. If peer-to-peer connectivity is unavailable, encrypted VPN
packets can be forwarded by first-party HT Portal relay infrastructure; the
relay does not inspect or persist packet contents.

Mobile VPN session diagnostics are deleted no later than 30 days after the
session ends. Security audit events, containing the action and source IP but no
VPN traffic contents, are retained for up to 180 days. One-time handoff data is
encrypted at rest and cleared when consumed or expired.

Before starting a connection, the app displays this data-use declaration and
requires an affirmative Continue action. iOS then displays the system VPN
authorization prompt. The privacy policy is available at:
https://portal.hivetechnology.net/privacy-policy

## App Review Information

- Core purpose: authorized enterprise remote access to a selected industrial
  device and its explicitly configured remote networks.
- VPN implementation: `NEPacketTunnelProvider`, IPv4 split tunnel, encrypted
  n3n data plane, peer-to-peer first with first-party relay fallback.
- Traffic handling: no packet-content inspection, logging, storage, analytics,
  advertising, profiling, or tracking.
- Review flow: in HT Portal select a device, choose VPN, open HT Portal VPN,
  review the disclosure, tap Continue and authorize VPN, accept the iOS system
  prompt, then disconnect from the app or portal.
- Privacy policy: https://portal.hivetechnology.net/privacy-policy

### Review access and account flow

- From the idle screen, tap **Sign in and select a device**. The app presents
  `https://portal.hivetechnology.net/mobile-vpn?platform=ios` inside
  `SFSafariViewController`; it does not switch to the default browser.
- The companion page supports sign-in with an existing HT Portal account using
  portal credentials, Google, Microsoft, or Apple. It also provides password
  recovery. The companion page does not offer account registration, pricing,
  license purchase, demo purchase, or external purchase calls to action.
- After selecting the reviewer runtime and tapping **Continue in HT Portal
  VPN**, the secure universal-link handoff returns to the native app. Review the
  data-use disclosure, continue, and accept the system VPN permission.
- Supply the always-online reviewer account and runtime password in the private
  App Review credentials fields. Do not include those credentials in this
  repository or in public release notes.

## Response to Guidelines 4 and 3.1.1

Use this response for the design and in-app-purchase rejection after submitting
the build containing the embedded companion flow:

> Hello App Review Team,
>
> We revised HT Portal VPN so users remain inside the app. Tapping **Sign in and
> select a device** now presents the dedicated HT Portal companion page in an
> `SFSafariViewController`, with the HTTPS domain and certificate controls
> visible. Users can sign in with an existing account using portal credentials,
> Google, Microsoft, or Apple, and can recover their password. This companion
> page intentionally contains no registration, pricing, purchase, or external
> payment call to action.
>
> HT Portal VPN is a free standalone companion for an industrial remote-
> assistance system. There is no paid digital content, subscription, premium
> app feature, or consumable available in the app. The referenced license is a
> perpetual license installed on and bound to a separately deployed industrial
> runtime/device purchased by a business customer. It enables that physical
> runtime to accept authorized remote-assistance sessions; it is not purchased,
> activated, managed, or consumed in the iOS app. The app cannot sell or upgrade
> it. Existing authorized users use the free companion solely to establish the
> requested split-tunnel VPN to their organization’s runtime.
>
> We believe this is the standalone companion-app case described by App Review
> Guideline 3.1.3(f): no purchasing occurs in the app and there are no calls to
> action for purchase outside the app. Review credentials and an always-online
> test runtime are provided in App Review Information.

## App Privacy Answers

Declare the following data types as collected, linked to the user, not used for
tracking, and used only for App Functionality:

- User ID;
- Device ID;
- Other Diagnostic Data.

Classify the source IP used for security auditing under Other Diagnostic Data,
as recommended by Apple's IP-address guidance for diagnostic use.

Do not declare browsing history, search history, precise/coarse location,
advertising data, or tracking because the app does not collect or use them.

## Public Privacy Policy Addition (Italian)

The following disclosure is published by `o20010.01` at
`https://portal.hivetechnology.net/privacy-policy`:

### HT Portal VPN

HT Portal VPN e' un'applicazione aziendale di teleassistenza che crea, su
richiesta dell'utente autenticato, un tunnel cifrato limitato al dispositivo
industriale selezionato e alle reti remote esplicitamente configurate. Non
instrada il traffico Internet generale.

Hive Technology S.r.l. non ispeziona, registra o conserva il contenuto del
traffico trasportato dalla VPN, la cronologia di navigazione, le richieste DNS,
le destinazioni visitate, i payload dei pacchetti o le credenziali trasmesse
nel tunnel.

Per autorizzare, stabilire, proteggere e diagnosticare la sessione richiesta,
HT Portal tratta esclusivamente: l'associazione con l'account autenticato e il
dispositivo remoto selezionato; un identificatore casuale dell'installazione
che non corrisponde all'identificatore pubblicitario; piattaforma e versione
dell'app; data, ora e stato della sessione; trasporto selezionato, qualita' e
latenza della connessione; codici e messaggi di errore; indirizzo IP sorgente e
azione nei registri di audit di sicurezza.

Questi dati sono utilizzati esclusivamente per verificare l'autorizzazione
dell'utente, creare e revocare il tunnel, mantenerne il funzionamento in
background, mostrare lo stato della connessione, proteggere il servizio da
abusi e diagnosticare malfunzionamenti. Non sono utilizzati per pubblicita',
analisi del comportamento, profilazione o tracciamento.

Hive Technology S.r.l. non vende, concede in licenza, comunica a terzi o usa
per finalita' estranee al servizio i dati generati attraverso la VPN. I dati
sono conservati esclusivamente nell'infrastruttura HT Portal controllata da
Hive Technology S.r.l. Quando il collegamento peer-to-peer non e' disponibile,
i pacchetti cifrati possono transitare attraverso relay HT Portal di prima
parte, che non ne ispezionano ne' conservano il contenuto.

La diagnostica delle sessioni VPN mobili viene cancellata entro 30 giorni dal
termine della sessione. Gli eventi di audit di sicurezza, contenenti azione e
indirizzo IP ma non il contenuto del traffico VPN, sono conservati fino a 180
giorni. I dati monouso per il passaggio sicuro dal portale all'app sono cifrati
a riposo e cancellati quando vengono utilizzati o scadono.

Prima dell'avvio della VPN, l'app mostra queste informazioni e richiede
un'azione esplicita dell'utente. Successivamente iOS presenta la propria
richiesta di autorizzazione di sistema.

## Public Privacy Policy Addition (English)

### HT Portal VPN

HT Portal VPN is an enterprise remote-assistance application that, at the
request of an authenticated user, creates an encrypted tunnel limited to the
selected industrial device and explicitly configured remote networks. It does
not route general Internet traffic.

Hive Technology S.r.l. does not inspect, log, or store VPN traffic contents,
browsing history, DNS queries, destination history, packet payloads, or
credentials transmitted inside the tunnel.

To authorize, establish, secure, and troubleshoot the requested session, HT
Portal processes only: the association with the authenticated account and
selected remote device; a random installation identifier that is not the
advertising identifier; platform and app version; session timestamps and
status; selected transport, connection quality, and latency; technical error
codes and messages; and source IP and action metadata in security audit
records.

This data is used exclusively to verify user authorization, create and revoke
the tunnel, maintain its background lifecycle, display connection status,
protect the service against abuse, and diagnose failures. It is not used for
advertising, behavioral analytics, profiling, or tracking.

Hive Technology S.r.l. does not sell, license, disclose to third parties, or
use for purposes unrelated to the service any data generated through the VPN.
The data is stored only in HT Portal infrastructure controlled by Hive
Technology S.r.l. If peer-to-peer connectivity is unavailable, encrypted
packets may pass through first-party HT Portal relays, which do not inspect or
persist packet contents.

Mobile VPN session diagnostics are deleted within 30 days after the session
ends. Security audit events, containing the action and source IP but no VPN
traffic contents, are retained for up to 180 days. One-time secure handoff data
is encrypted at rest and deleted when consumed or expired.

Before the VPN starts, the app displays this information and requires an
explicit user action. iOS then presents its system authorization request.
