Bitping Pte. Ltd. (“Bitping”, “we”, “our” or “us”) runs a distributed network of independently operated nodes and the services built on it, including network measurement, the Bitping API, bandwidth sharing, and the p2proxy app and command-line tool (together, the “Services”). This policy explains what personal data we handle when you use our websites, apps, software and Services, why we handle it, and the choices you have. We handle personal data in line with the Singapore Personal Data Protection Act 2012 (the “PDPA”) and, where they apply to you, other data protection laws such as the EU and UK GDPR.
Our dashboard uses cookies to keep you signed in and remember your preferences, and our sign-up and sign-in forms use a bot-protection service to block automated abuse. Our public websites use Google Analytics, which sets cookies to tell us, in aggregate, how the sites are used; Google processes this data under its own privacy policy, and you can opt out with Google’s browser add-on or by blocking cookies. You can block or delete cookies in your browser, though some features may then stop working. Our mobile and desktop apps contain no advertising or third-party tracking software.
When a customer routes traffic through the network (for example with the p2proxy app), that traffic is encrypted between the customer’s device, Bitping’s servers and the chosen exit node. The exit node then sends it on to its destination, so — as with any VPN or proxy — the exit node can see where each connection goes and the contents of any traffic that is not itself encrypted. Exit nodes are not given customers’ names or email addresses. We recommend always using encrypted connections (such as HTTPS) for anything sensitive.
Bitping does not store the contents of customer traffic. We do keep the account, session and usage records described above, and node software may keep a limited local record of destinations so node operators can see how their connection was used and block destinations they don’t allow. We keep these records to bill accurately, protect node operators, prevent abuse and respond to valid legal requests.
Settings you choose in our apps, such as preferred locations or favourites, stay on your device.
We use personal data to:
We collect, use and disclose personal data with your consent, including consent deemed under the PDPA when you provide data to use the Services, or where the PDPA or other applicable law otherwise permits it, such as for our legitimate interests in running a secure and reliable network or to comply with our legal obligations. We do not sell personal data, and we do not use it for targeted advertising or to track you across other companies’ apps and websites.
We share personal data only:
We and our service providers operate in several countries, so your data may be processed outside the country where you live. When we transfer personal data, we take the steps applicable law requires to keep it protected to a comparable standard.
We protect personal data with technical and organisational measures appropriate to the risk, including encryption in transit, hashing of passwords and other sensitive identifiers, and access limited to authorised personnel. No system is completely secure; please use a strong, unique password and turn on multi-factor authentication. If a data breach is likely to cause you significant harm, we will notify you and the relevant authorities, including Singapore’s Personal Data Protection Commission, as the law requires.
We keep personal data only as long as needed for the purposes in this policy. Account data is kept while your account exists. Usage, billing and payout records are kept as long as needed for billing, payouts, disputes and our legal and accounting obligations (for example, Singapore law generally requires accounting records to be kept for at least five years). Security and diagnostic logs are kept for a limited period and then deleted or anonymised.
You can delete your account at any time from Settings on app.bitping.com, which is also linked from our apps. Deleting your account removes your account, API keys and devices and cancels any active subscription. Records we must keep by law are retained only as long as required.
Under the PDPA you may ask for access to the personal data we hold about you and how it has been used or disclosed in the past year, and ask us to correct it. We will respond as soon as reasonably possible, normally within 30 days, and will tell you if we need longer. We may charge a reasonable fee for access requests, and will tell you the amount before we proceed. Some requests may be refused where the PDPA or other law allows, and we will explain why.
You may withdraw your consent at any time by giving us reasonable notice. We will tell you what withdrawing means: for example, we may no longer be able to provide some or all of the Services, which may require closing your account.
Depending on where you live, you may have further rights, such as to have your data deleted, to receive a copy in a portable format, or to object to or restrict certain processing. You can do most of this from your account settings, or by contacting our Data Protection Officer. You may also complain to Singapore’s Personal Data Protection Commission or your local data protection authority, though we’d appreciate the chance to resolve your concern first.
The Services are not directed to children. You must be at least 18 years old, or the age of majority where you live, to create an account. We do not knowingly collect personal data from children.
We may update this policy from time to time. If the changes are significant we will tell you, for example by email or a notice in the dashboard. The date below shows when it last changed.
Questions about this policy, and requests about your personal data, can be sent to our Data Protection Officer at [email protected] (subject: “Data Protection Officer”).
Last updated: 29 October 2026
