Privacy Policy
Last updated: July 2, 2026
This policy explains what information the tunlstack.com website and the TUNLstack desktop application (the "app") handle, and how. TUNLstack is built local-first — the short version is that your content stays on your machine, and we collect very little.
The responsible party ("data controller") is aioLABS Limited, Halifax, Nova Scotia, Canada. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable privacy laws where you live. Contact: support@tunlstack.com.
1. The website
tunlstack.com is a static site. It currently runs no advertising trackers and no third-party analytics. The site is served by Cloudflare, which processes standard technical logs (such as IP address and browser user agent) to deliver and secure the site. Beyond any strictly-necessary cookies Cloudflare uses to serve and secure the site, the site sets no cookies of its own. If we later add analytics or advertising measurement, we will update this policy — and ask for consent where required — before it takes effect. If you email us, we keep the correspondence so we can respond and keep support history.
2. Purchases
Purchases are processed by Paddle, our Merchant of Record. Paddle collects the payment and billing details needed to complete your order under Paddle's own privacy policy. We receive order metadata from Paddle — such as your name, email address, country, product purchased, and transaction reference — so we can issue and support your license. We never receive or store your full card details.
3. The app — local-first by design
- Accounts and trial activation. Activating the free trial or a purchased license requires creating and authenticating a TUNLstack account. We collect the email address and authentication details needed to operate your account, trial, and license — nothing beyond what that requires.
- Your content stays local. The text the app reads aloud, your reading queue, settings, and usage history are processed and stored on your own machine. TUNLstack's in-house speech engines — text-to-speech and local speech-to-text — run on your machine: the content being read, and audio dictated through the local engine, never leave it.
- Bring-your-own-key features. Some optional features (for example, fast cloud dictation) call a third-party provider directly using your own API key. Your keys are stored locally on your machine and requests go straight from your machine to that provider under your account — we never receive your API keys, your audio, or the transcripts. The provider's privacy policy governs what it does with those requests.
- License validation. The app periodically contacts our licensing service, transmitting your license key, a minimal machine-binding identifier, and the app version. This is used solely to confirm your entitlement and prevent abuse.
4. What we don't do
- We do not sell or rent personal information — and we do not "sell" or "share" personal information as those terms are defined in US state privacy laws such as the CCPA/CPRA.
- We do not currently run ads or cross-site tracking.
- We do not read, collect, or transmit the content of your work sessions.
5. Retention
Order and licensing records are kept for as long as needed to support your license and to meet legal, tax, and accounting requirements. Support correspondence is kept as long as useful for support history. You can ask us to delete correspondence at any time.
6. Your rights
Subject to applicable law, you can request access to, correction of, or deletion of the personal information we hold about you, and you can ask what we hold. Email support@tunlstack.com and we will respond within a reasonable time. Where the EU/UK GDPR applies, we process personal information on the bases of contract (operating your account, trial, and license), legitimate interests (security and support), and consent where we ask for it. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or your local supervisory authority.
7. Security
We use reasonable technical and organizational safeguards appropriate to the small amount of personal information we handle. No method of transmission or storage is 100% secure.
8. Children
The site and the app are not directed to children under 13, and we do not knowingly collect personal information from them.
9. International transfers
We are located in Canada. Our service providers (such as Paddle and Cloudflare) may process information in other countries under their own safeguards and agreements.
10. Changes
We may update this policy from time to time. Material changes will be posted on this page with an updated date.
11. Contact
Privacy questions or requests: support@tunlstack.com — aioLABS Limited, Halifax, Nova Scotia, Canada.