Is Touch VPN safe? Logging policy, audits and jurisdiction
Privacy and jurisdiction 1.0/10 and security 1.1/10 (segment medians 2.7 and 1.2). No red flag in our data. Independent no-logs audit: ✕ No.
In 10 seconds
- Stores session times
- Jurisdiction in 5 Eyes
Privacy
- Jurisdiction
- USA, 5 Eyes
- Legal entity
- VPN Proxy Pro, LLC / TouchVPN LLC (Pango Group); site footer: TouchVPN Inc.
- No-logs policy
- Partial do not log any information that associates your account ... with VPN session activity
- Data retention
- as long as needed / account active; backups limited period
- Shared with third parties
- service providers, affiliates, ad SDKs (Unity, ironSource, Kochava, Google) collect ad IDs
What the privacy policy says is collected
Red ✕: collected. Green ✓: not collected. Grey: the policy does not say.
- Email✕ Yes
- IP at sign-upNot stated
- Connection IP✕ Yes
- Session times✕ Yes
- Bandwidth✕ Yes
- Device info✕ Yes
- App analytics✕ Yes
- Crash reportsNot stated
Security
- Kill switch
- Yes (yes on mobile, not Windows/macOS (review))
- DNS leak protection
- Not stated
- Encryption
- AES-256 (App Store)
- Open-source apps
- No
- Two-factor sign-in
- Not stated
Our data shows no red flags for Touch VPN: we found no public incidents, and traffic is encrypted with AES-256. The weak spot is different: a privacy score of 1.0 out of 10 against a median of 2.7 for free mobile VPNs, dragged down by its privacy policy.
What the service records
The wording about logs is narrow: Touch VPN promises not to store data that links your account to activity in a VPN session. The policy does list what is collected: session times, traffic volume, device information, app analytics, and the connection IP is used to estimate location. The App Store page says the app never tracks or stores your IP. We judge by the policy, since it is a legal document. No retention period is named, and data is kept as long as it is needed or the account is active.
Advertising and jurisdiction
The free version runs ad SDKs from Unity, ironSource, Kochava and Google, and they receive the device's advertising identifiers. The company is based in the US, a 5 Eyes country, and hands over data on lawful request, while stating that it challenges overly broad requests. There is no transparency report or warrant canary, no independent audit of logs either, and the app source code is closed. If you need a verified no-logs service, see our audited no-logs VPN list.
Is Touch VPN safe on desktop?
Weaker than on mobile: according to a third-party review, a kill switch exists only in the mobile apps, and there is none on Windows and macOS. If the tunnel drops there, traffic leaves your computer outside the VPN. The service does not state whether it protects against DNS leaks.
Who is Touch VPN for?
For open Wi-Fi in a cafe, the encryption is enough. If it matters to you that nobody knows about your sessions, pick from the Touch VPN alternatives.