Privacy Policy

What Tunneltunnel is

Tunneltunnel is an encrypted AI chat service operated at tunneltunnel.com. This policy covers the tunneltunnel.com website.

Data we collect

• Account data: your email address and a derived authentication hash. Your password itself never reaches our servers. If you sign in with Google, we receive your email address from Google.
• Conversations: messages are end-to-end encrypted on your device before they are stored. We store only ciphertext and cannot read your conversations. If you lose your password and have no recovery phrase, your conversations are unrecoverable — by design.
• Usage data: token counts and message counts per account, used to enforce plan limits and budgets. We do not use them for advertising or profiling.
• Payments: handled by Stripe on the web and Google Play in our Android app. We never see or store your card details; we store your subscription status and the applicable provider reference.

What we do not do

• We do not sell or share your personal data.
• We do not show ads and do not use advertising trackers.
• We do not use your conversations to train AI models, and we cannot — they are encrypted with keys we do not hold.

Cookies

We use strictly necessary cookies only: a session cookie to keep you signed in and a language preference cookie. No analytics or third-party marketing cookies.

Data retention & deletion

Conversations remain until you delete them; deleting a conversation removes its ciphertext from our servers. To delete your account and all associated data, contact us at the address below.

Contact

Questions or data requests: [email protected]