LycheeVPN
Lychee Protocol · self-operated infrastructure

Your private key
never leaves your device.

Most VPN apps hand out a pre-made .conf file with a private key shared across users. LycheeVPN is different: the key pair is generated on your device, and the server only ever sees the public half.

Free for one device, no time limit, no credit card required.

4 Locations
Lychee Protocol
ChaCha20 Encryption
0 Activity logs
Why it's different

Private by default, not as an option

We designed the system so that even if a server were compromised, an attacker would have no key on hand to decrypt your traffic.

Keys born on your device

The app creates the key pair inside its own private storage. Only the public key is sent to the API to register the peer.

Lychee Protocol

Our protocol is lean: a single-round handshake and far less battery drain than legacy VPN protocols on mobile.

Self-operated infrastructure

We rent and configure every node ourselves rather than borrowing a third-party network — so we know exactly what runs on it.

No activity logs

The system only stores open sessions in order to allocate tunnel IPs. Close the session and the record is simply marked finished — nothing about where you went is kept.

Multiple devices

Each device holds its own access token. Lose a phone and you revoke just that device — the rest keep working untouched.

No ads, no trackers

The app and website ship with zero advertising SDKs and zero third-party analytics. You pay for bandwidth, and that's the whole business model.

How it works

Four steps, and none of them expose a key

Generate keys

The app loads or creates a key pair, stored in the app's private storage.

Register the peer

The public key and a device identifier are sent to the control plane.

Get an address

The system picks a free /32 address, adds the peer to the node and returns the config.

Bring up the tunnel

The app starts the tunnel via VpnService. On disconnect, the peer is removed from the node immediately.

Network

Available locations

View all locations
Singapore
Singapore
Online
United States Premium
San Francisco
Online
Canada Premium
Toronto
Online
United Kingdom Premium
London
Online
Pricing

Pay for bandwidth, not for ads

Free

Mien phi

Plenty for browsing and light work

  • 1 device
  • 1 GB of data per day
  • Standard nodes (SG, JP, VN, TH…)
  • No time limit, no throttling
  • No activity logs
Start for free

Premium Yearly

690.000 đ / nam

Works out to 57,500 ₫ per month

  • Everything in Monthly
  • 27% cheaper than paying monthly
  • Priority support
  • Full refund in the first 14 days
Choose this plan
Questions

The ones we get asked most

Does LycheeVPN log which sites I visit?
No. The system only keeps a session record — device identifier, server and tunnel address — just enough to allocate an IP and reclaim it when you disconnect. No DNS logs, no traffic logs.
Why does it matter that the private key isn't on the server?
Because if a server held your private key, anyone who compromised that server could impersonate you or decrypt captured traffic. With this design, the private key only ever exists inside the app's private storage on your phone.
Is the free plan time-limited?
No time limit. The free plan is capped at one device and the standard nodes; premium nodes are reserved for paid plans because their bandwidth costs far more.
Which platforms are supported?
Android today, with more platforms on the roadmap. Any country in the server list is available from the app the moment we bring the node online.

Read the full FAQ

Up and running in two minutes

Install the app, open it and hit connect. No email required if you stick to the free single-device plan.