Privacy Policy

Last updated: July 2026

This Privacy Policy explains how TunnelVision ("we," "our," "Licensor") collects, uses, and shares information when you use our macOS and iOS apps (the "App"). We are committed to protecting your privacy and building a product that respects it by design.

Information We Collect

Information You Provide

• Pairing data: When you pair the iOS app with the Mac app, a cryptographically generated pairing key is exchanged via QR code. This key is stored locally on your devices and is used solely to establish an encrypted relay session.
• Feedback or support requests: If you contact us, we may collect your email address and any information you share with us to respond to your inquiry.

Information Collected Automatically

• Diagnostic data: The App may collect anonymized crash logs and performance metrics if you opt in via macOS settings. This data contains no personally identifiable information and is used solely to improve the App.
• Push notification tokens: The iOS app registers for silent push notifications to receive server status updates. Apple generates a device token that is sent to the relay to enable push delivery. This token is not associated with any personal information and can be invalidated by you at any time by disabling notifications in Settings.

How We Use Your Information

We use the information we collect only for the following purposes:

• To deliver encrypted server state between your paired devices.
• To send push notifications when you have explicitly opted in.
• To improve the App through anonymized crash reporting.
• To respond to your support requests.

Data Storage and Encryption

All server state data is encrypted with AES-256-GCM on your Mac before it ever leaves your device. The relay that facilitates delivery never sees the plaintext — it only stores and forwards encrypted ciphertext. The encryption key is derived from your pairing key and never transmitted to us or any third party.

Configuration data (server lists, preferences) is stored locally on your devices using the platform-standard secure storage APIs (UserDefaults on iOS, property-list files on macOS).

Data Sharing

We do not sell, rent, or share your personal information with third parties. We may share anonymized, aggregate data (e.g., crash counts by OS version) with analytics providers solely for the purpose of improving the App. No personally identifiable information is included.

We may disclose information if required to do so by law or in response to a valid legal request.

Third-Party Services

The App uses the following third-party services:

• Relay: Used to route encrypted messages between your devices. We have configured the relay to not log message contents.
• Apple Push Notification service (APNs): Used to deliver silent push notifications to the iOS app. Apple's privacy policy applies to APNs message delivery. Push tokens are ephemeral and not linked to your identity.

Data Retention

Relayed messages (encrypted ciphertext) are held in relay storage only for the duration of an active session and are automatically deleted when the pairing session ends or after a period of inactivity. We do not maintain a persistent archive of relayed data.

Local configuration data remains on your device until you uninstall the App or manually clear it.

Your Rights and Choices

• Opt out of push notifications: You can disable push notifications at any time in the iOS Settings app under TunnelVision Remote > Notifications.
• Opt out of crash reporting: You can disable diagnostic reporting in macOS System Settings > Privacy & Security > Analytics & Improvements.
• Delete your data: Uninstall the App to remove all locally stored data. Relay session data is automatically purged after a period of inactivity.

Security

We implement industry-standard security measures to protect your data, including AES-256-GCM end-to-end encryption between your devices, HTTPS for all API communications, and adherence to Apple's App Transport Security requirements. No data transmitted through the relay can be decrypted by us or any intermediary.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

Contact

If you have any questions or concerns about this Privacy Policy, please contact us at: tunnelvision@josiah.io