Chinese VPN app Quickfox caught exposing 1 million users’ data