Privacy Policy

Effective Date: March 15, 2026

MatchaVPN is operated by Jumpei Ueno. This Privacy Policy explains how MatchaVPN handles information when you use our virtual private network (VPN) service and iOS application ("Service").

We built MatchaVPN with privacy as a core principle. We collect as little information as technically possible to provide the Service.

1. Information We Do Not Collect

MatchaVPN does not collect, log, or store any of the following:

• Browsing history or the content of your internet traffic
• DNS queries
• Your original IP address
• Connection timestamps, session duration, or disconnection times
• Bandwidth usage or data transfer amounts
• User accounts, usernames, passwords, or email addresses
• Device identifiers, advertising IDs, or fingerprints
• Location data
• Analytics, telemetry, or usage statistics

We do not have the ability to associate any activity with any individual user because we simply do not collect or retain this information.

2. Information Stored on Your Device

The following information exists only on your iPhone and is never transmitted to MatchaVPN:

• WireGuard cryptographic keys: Generated locally and stored in the iOS Keychain, which is hardware-encrypted by your device. Only the public key is shared with the VPN server as required by the WireGuard protocol.
• Diagnostic logs: The app may write local diagnostic logs using the iOS logging system (os.log). These logs remain on your device and are never uploaded to MatchaVPN or any third party.
• VPN connection status: The current connection state (connected, disconnected, etc.) is held in memory only and is not persisted to disk or transmitted.

3. Information on Our Server

Our VPN server stores the minimum information required by the WireGuard protocol to establish a tunnel:

• Your WireGuard public key
• An internal tunnel IP address assigned to your device

The server does not log connections, traffic, DNS queries, or any other activity. We cannot identify which user sent which traffic because no such records exist.

4. How We Use Information

The sole purpose of any information that exists within the Service is to establish and maintain the encrypted VPN tunnel between your device and our server. We do not use information for advertising, profiling, analytics, or any purpose other than providing the VPN service.

5. Data Storage and Security

• On your device: Cryptographic keys are stored in the iOS Keychain, which is protected by hardware encryption on your iPhone.
• In transit: All traffic between your device and our server is encrypted using the WireGuard protocol (Curve25519, ChaCha20, Poly1305, BLAKE2s).
• On our server: Our VPN server is located in Tokyo, Japan, hosted by Vultr. The server stores only WireGuard peer configuration (public key and allowed IP). No user traffic or metadata is stored.

6. Third-Party Services

MatchaVPN uses the following third-party services in the course of providing the Service:

• Cloudflare (DNS): DNS queries from the VPN tunnel are resolved through Cloudflare's public DNS resolver (1.1.1.1). Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.
• Vultr (server infrastructure): Our VPN server runs on Vultr's infrastructure in Tokyo, Japan. Vultr's privacy policy is available at vultr.com/legal/privacy.
• Apple (platform): The app is distributed through the Apple App Store. Apple's privacy policy is available at apple.com/legal/privacy.

MatchaVPN does not integrate any advertising networks, analytics SDKs, crash reporting services, or other third-party tracking technologies.

7. No-Log Policy

MatchaVPN operates a strict no-log policy. We do not monitor, record, or store:

• Any VPN connection activity
• Traffic content or metadata
• DNS queries made through the tunnel
• Connection or disconnection events

Because no logs exist, we are unable to provide any user activity data even if requested by third parties or authorities.

8. Children's Privacy

MatchaVPN is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us so we can take appropriate action.

9. Your Rights

Regardless of where you are located, you have the right to:

• Access any personal data we hold about you
• Request correction or deletion of your personal data
• Object to or restrict processing of your personal data

Because MatchaVPN does not collect or store personal data, these rights are effectively satisfied by design. If you have any questions or wish to exercise these rights, please contact us at the email address below.

This policy is designed to comply with applicable privacy regulations including the EU General Data Protection Regulation (GDPR) and the Act on the Protection of Personal Information (APPI) of Japan.

10. Data Retention

MatchaVPN does not retain any user data on our servers. WireGuard cryptographic keys exist only in the iOS Keychain on your device. When you delete the MatchaVPN app, all locally stored data is removed by iOS.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective Date" at the top of this page. We encourage you to review this page periodically. Continued use of the Service after changes constitutes acceptance of the updated policy.