This page is a reference translation. The official text is the Japanese version; if this translation differs from it, the Japanese version prevails. (Japanese original)
Vphone Privacy Policy
Established: October 7, 2026 Last revised: November 6, 2026
Vphone (the "Service") consists of a phone that you attach to your VRChat avatar, an app for Windows, and a relay server that delivers messages. This page explains how the Service handles users' information.
1. Operator
- Operator: StudioNormAl (run by an individual)
- Contact: studionormal7@gmail.com
- The operator's name and address will be disclosed without delay upon request.
- Because the Service relays messages and voice calls between users, the operator has filed a notification of telecommunications business under the Telecommunications Business Act of Japan.
2. Information kept on the server, and why
| Information | Purpose | When it is deleted |
|---|---|---|
| Display name | To show your name on your friends' screens and on the screens of members of groups you belong to | When you delete your account |
| Profile (the icon you chose and your greeting; includes the contact preference chosen in earlier versions of the app) | To show your profile on your friends' screens (only your friends can see it; a copy is also saved on your friends' PCs) | When you change it (the previous content), or when you delete your account. The copies on your friends' side: when you unfriend, or when you delete your account |
| Status (one of “Free”, “Ask me” or “Busy”) | To show your current status on your friends' screens (only your friends can see it; a copy is also saved on your friends' PCs) | When you choose another one (the previous value), or when you delete your account. The copies on your friends' side: when you unfriend, when you delete your account, or when you connect with an earlier version of the app that does not have this feature |
| Account ID (a number created automatically when you register), and converted values of the authentication token and of the transfer key (if you created one) | To confirm that a connection comes from your app, and that the person taking over the account is you | When you delete your account |
| Your friend list and the friend requests you have received | To decide who your messages are delivered to | When you unfriend (for that person), or when you delete your account |
| Groups (name; members' account IDs, display names, roles and join times; people invited; how far each member has read; the number of messages sent that day) | To deliver messages to group members, and to show members' names, roles and read counts (inside a group, members can see each other's display names and roles even if they are not friends; the names of invited people are shown only to admins; a copy is also saved on members' PCs) | When you leave the group, are removed from it, or delete your account (your part); when no members remain (the group). The number of messages sent is counted again each day |
| Friend code | To add friends | When it is used. A code that is not used stops working 10 minutes after it is issued, and is deleted the next time anyone issues a friend code |
| While you are waiting after pressing “Befriend someone nearby”: your display name and account ID, and a value made from the VRChat instance you are in that is hard to turn back into the instance | To make friends of the two people who press the button one after the other in the same instance (your display name is sent only to the person you are paired with) | When you are paired, when you stop waiting, or 35 seconds after you press (kept only in the server's memory and never saved) |
| Events (the host's display name; the name, schedule and stamp goal chosen by the host; the current session and whether check-in is open; for each attendee: account ID, display name, time joined, attendance requests and approvals, number of stamps and when the last stamp was given) | To let the host take attendance and give stamps on attendees' cards (attendees' display names and attendance records are visible only to the host; attendees, and people who enter the join code before joining, see the event's name and schedule, the host's display name, and the numbers of attendees and of people checked in (attendees also see their own record); copies are also saved on the host's and attendees' PCs) | When the host deletes the event or their account (the event's data), and when an attendee leaves the event or deletes their account (that attendee's data). So that a deleted event does not come back in an old state, a record without names or attendees (the event's ID, the host's account ID, the version number, the number of sessions, times, and the like) is kept on the host's and the attendees' sides (each is deleted when that person deletes their account) |
| Event join codes | To let people find the event they want to join (the code is shown only on the host's screen) | A code stops working 24 hours after it is issued, and is deleted the next time anyone issues an event join code. It is also deleted when the event is deleted or when the host deletes their account |
| The date and the number of times you entered an event join code | To prevent people from trying codes at random (the codes you entered are not kept) | The count starts over each day; deleted when you delete your account |
| Messages (text, quick replies, stamps, including group messages) and read receipts | To deliver them to the other person | When the other person's app receives them (for group messages, when each member's app receives them). If they are never received: after 30 days |
| Voice call signals (call, answer, decline, hang up and so on) and the information needed to connect a call | To connect voice calls with your friends (calls to someone who has chosen “Ask me” or “Busy” are refused by the server instead of being delivered) | Never saved (they are only passed on to the other person's app at that moment) |
| Text sent for camera translation (text read from the photo on your PC) and the language to translate into | To translate it and send the translation back to your app (the relay server passes the text to Cloudflare's Workers AI for translation; the photo itself is not sent) | Never saved (handled only until the translation is sent back; the translation is not saved either) |
| The number of camera translations you made that day, and the number of times the AI was called | To count the limit of 20 photos per person per day, and a limit that keeps the AI from being called too often (only the numbers are counted) | The count starts over each day, and the previous day's count is not kept (days follow Coordinated Universal Time, so the day changes at 9:00 Japan time); deleted when you delete your account (on the day you delete it, only that day's number of AI calls is kept with the order number and carried over to an account registered again with the same order number; it is deleted when the day changes) |
| Report details (the account IDs of the person who reported and of the person reported, and the reason) | To deal with nuisance behavior | When either of them deletes their account |
| The IP address you connect from | To limit the number of attempts when an order number, a tester code or a transfer key is entered wrongly several times (recorded only when a wrong one is entered) | The next day |
| The BOOTH order number or tester code, and the account that uses it | To confirm that you are a purchaser or a tester | When you delete your account (the order number or code itself remains as a record) |
To process communications, your IP address and similar information are handled temporarily by Cloudflare's facilities, but the operator does not save access logs. We may temporarily record access logs to investigate a problem (they are deleted within 3 days at most).
The voices in voice calls do not go through the operator's server; they reach the other person through the call relay (TURN servers) of Cloudflare, Inc. The relay temporarily handles your IP address and similar information. The operator does not record or save voices. The temporary keys for using the relay are only created and handed over for each call, and are not saved either.
When you use camera translation, Vphone reads the text in the photo on your PC and sends only the text it read to the relay server. The photo itself is not sent. The relay server passes that text to Workers AI of Cloudflare, Inc. (an AI service run by Cloudflare; the model used is Mistral Small 3.1, made by Mistral AI), which translates it, and sends the translation back to your app. The text you sent and the translation are used only for translating, and are not kept on the relay server or in the app's activity logs. Cloudflare states that, for this kind of use, it does not keep the content sent or its results after processing, and does not use them to train AI models (with exceptions such as legal obligations). How Cloudflare handles them is governed by Cloudflare's privacy policy and its other terms.
When an event or an account is deleted, the related information on the other people's side is also tidied up, one by one (your entry is removed from the host's list, attendees' cards are told that the event is gone, and the join code is deleted). The work records used for this (the event's ID, your and the other person's account IDs, and the like; no names or contents) are deleted when this is finished.
"Block", which existed in versions before October 12, 2026, has been replaced by unfriending. New block records are no longer created. Records created earlier are deleted the next time the app of the person who blocked connects to the server (or when that person deletes their account).
3. Information not kept on the server
- Your VRChat login information (the Service does not log in to VRChat)
- The VRChat instance you are in (the world and instance IDs). From when you press “Befriend someone nearby” until you stop waiting, the app reads it from the VRChat log on your PC, but sends the server only a value made from it that is hard to turn back into the instance
- Your chat history, photos taken with the phone's camera, and the app's activity logs (saved only on your PC)
- Photos used for camera translation (the text in the photo is read on your PC, and only the text that was read is sent to the server)
- Voices in voice calls (they only reach the other person through the relay and are never recorded or saved), and call records (calls made and received and how long you talked; saved only in the chat history on your PC)
- Your mute state in VRChat (during a call, the app reads it on your PC to decide whether to send your voice to the other person, but does not send it to the server)
- Location information and what you do in VRChat (event attendance, too, is recorded through the attendee's request and the host's approval, not by checking whether you came in VRChat)
We do not use advertising or analytics. We do not use cookies either.
4. Message content (secrecy of communications)
Messages are relayed mechanically by the server to deliver them to the other person. The operator does not look at the content of messages or use it for any other purpose, except when there is a formal request based on law.
Communications between the app and the server are encrypted. Messages are stored on the server until they reach the other person (this is not so-called end-to-end encryption).
The voices in voice calls never reach the operator's server, and the operator does not listen to or record the content of calls.
5. Where information is stored
The Service's servers run on services provided by Cloudflare, Inc. in the United States. The information we keep is stored on servers managed by that company, including servers outside Japan.
We have checked the personal information protection system of the United States using the "Survey on Personal Information Protection Systems in Foreign Countries" published by Japan's Personal Information Protection Commission. Cloudflare, Inc. has announced that it has received an international certification for handling personal information across borders (Global CBPR). Based on these, the operator takes the measures described in section 7.
6. Providing information to third parties
We do not provide the information we keep to third parties, except with your consent or where required by law.
7. Security measures
- Communications between the app and the server are encrypted.
- The authentication token and the transfer key are not stored on the server in their original form.
- On your PC, the authentication token and the transfer key are encrypted with a Windows feature before they are saved.
- Voices in voice calls are encrypted between you and the other person. Because calls always go through the relay, the other person cannot see your IP address.
- We keep only the minimum information that the Service needs.
8. Deleting your information
- When you press "Delete account…" in the Vphone window, all of your information on the server is deleted, and you disappear from your friends' lists. You also leave the groups you were in (if you created a group, another member takes it over). Events you host are deleted, and you leave the events you joined. Your account information and chat history on your PC are also deleted.
- Chat history already saved on the other person's PC cannot be deleted. Copies of event cards show the deletion when the other person's app receives the latest state from the server.
- If you cannot use the app, please contact us at the contact address with your account ID. You can check your account ID with "Copy account ID" in the Vphone window.
9. Requests for disclosure, correction, suspension of use and other measures
If you would like your information to be disclosed, corrected, no longer used or deleted, please contact us at the contact address. We may ask for your account ID to confirm that you are the person concerned. There is no fee.
10. Minors
Children under 13 cannot use the Service. If you are under 18, please use it with the consent of your parent or guardian.
11. Changes to this policy
When we change this policy, we will announce it on this page. Major changes will also be announced on Discord, X, or elsewhere.