Effective date: October 1, 2026

This Privacy Policy explains how HomeTunnel Inc. (“HomeTunnel,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you access or use:

  • the HomeTunnel website at https://hometunnel.io;
  • the HomeTunnel account portal;
  • the HomeTunnel mobile applications for iOS and Android;
  • HomeTunnel application programming interfaces;
  • HomeTunnel client and Home Assistant add-on software;
  • HomeTunnel subscription, support, notification, and account-management services; and
  • related websites, communications, software, and services that link to this Privacy Policy.

These offerings are collectively referred to as the “Services.”

This Privacy Policy applies to the Services, including the HomeTunnel mobile applications for iOS and Android. The mobile applications allow authenticated users to access and manage their existing HomeTunnel accounts, homes, devices, routes, and service status.

1. HomeTunnel and contact information

HomeTunnel Inc. is responsible for the personal information processed through the Services, except where a third-party provider independently processes information under its own privacy notice.

HomeTunnel Inc.

Mailing address:
2967 Dundas St W
Toronto, Ontario M6P 1Z2
Canada

Privacy and data-rights requests: support@hometunnel.io
Customer support: support@hometunnel.io
Legal notices: legal@hometunnel.io
Website: https://hometunnel.io

The address above is HomeTunnel’s public mailing address. It should not be interpreted as a representation that customers may receive in-person support at that location.

2. Scope and geographic availability

HomeTunnel currently offers the Services to eligible users in the United States and Canada, excluding Quebec.

The Services are currently provided in English. HomeTunnel does not currently offer the Services for purchase in Quebec. Availability may be expanded or restricted as HomeTunnel’s legal, language, technical, and operational capabilities change.

This Privacy Policy may also apply when information is processed outside those locations, including when a visitor accesses the public website from another jurisdiction. Accessing the website does not mean that HomeTunnel offers the Services in every jurisdiction.

3. Information we collect

The information we collect depends on how you interact with the Services.

3.1 Account and identity information

We may collect:

  • your Microsoft Entra External ID subject identifier;
  • your email address;
  • your phone number;
  • your display name and other optional profile information;
  • account status and account preferences;
  • authentication status and authorization results;
  • subscription and trial eligibility status; and
  • identifiers used to associate your HomeTunnel account with homes, devices, and subscriptions.

HomeTunnel uses the validated Microsoft Entra subject identifier as the primary account identity. An email address may be used for communication and display purposes but is not treated as the sole proof of identity.

3.2 Home and property information

When you create or manage a home through HomeTunnel, we may collect:

  • home names and identifiers;
  • user-entered home locations, which may contain a street address;
  • home descriptions;
  • ownership and management relationships;
  • home configuration and service status;
  • billing restriction status;
  • route and resource configuration;
  • device assignments;
  • Home Assistant connection information; and
  • operational information required to isolate one home from another.

Home names, locations, and descriptions should not contain unnecessary sensitive information. HomeTunnel treats a home location as user-entered text and does not use it as device geolocation.

3.3 Device and network information

We may collect information about enrolled devices and authorized private-network services, including:

  • device identifiers;
  • device names;
  • device type and platform;
  • Home Assistant OS add-on information;
  • NetBird peer identifiers and peer names;
  • device enrollment and binding metadata;
  • device credential status;
  • public networking identifiers;
  • local IPv4 addresses;
  • local subnet information;
  • target IP addresses and hostnames;
  • target service ports;
  • host-route configuration;
  • route-distribution status;
  • device movement between homes;
  • device and software version information; and
  • information indicating whether a device is eligible to act as a routing peer.

HomeTunnel is designed to use narrowly scoped host routes rather than expose an entire private network by default.

3.4 Connectivity and telemetry information

We may collect:

  • heartbeat times;
  • last-seen times;
  • online, offline, recovered, degraded, or disconnected status;
  • peer and tunnel status;
  • routing capability;
  • route-readiness status;
  • direct or relay connection status where available;
  • same-LAN indicators;
  • IP-conflict indicators;
  • overlapping-subnet indicators;
  • local-bypass recommendations;
  • provisioning and reconciliation state; and
  • technical error and diagnostic information.

This information is used to operate, secure, troubleshoot, and display the status of the Services.

3.5 Security, audit, and request information

We may collect:

  • IP addresses;
  • browser type;
  • operating-system information;
  • request timestamps;
  • request paths and methods;
  • authentication and authorization outcomes;
  • rate-limit events;
  • account, home, device, route, enrollment, and administrative actions;
  • provisioning, cleanup, and reconciliation events;
  • suspicious or prohibited activity;
  • security alerts;
  • billing-webhook processing status;
  • error categories; and
  • information needed to investigate incidents or enforce our Terms and Conditions.

HomeTunnel does not intentionally place access tokens, setup-key values, private keys, complete authorization headers, device tokens, signed binding tokens, payment-card details, or other operational secrets into ordinary logs or customer-visible audit records.

3.6 Subscription and billing information

When you begin a trial or purchase a subscription, we may receive or store:

  • selected plan;
  • billing period;
  • trial eligibility and trial-use status;
  • subscription status;
  • renewal and cancellation status;
  • current billing-period end;
  • Paddle customer and subscription identifiers;
  • Paddle price and transaction identifiers;
  • currency and normalized transaction amounts;
  • refund, dispute, or payment-failure status;
  • billing-event metadata; and
  • provider request or correlation identifiers.

Purchases are completed through the HomeTunnel website. HomeTunnel does not currently offer subscription purchases through Apple App Store or Google Play billing.

Paddle acts as merchant of record for eligible purchases and independently processes checkout, payment, tax, invoicing, fraud-prevention, refund, and payment-support information under its own legal terms and privacy notice.

HomeTunnel does not intentionally receive or store complete payment-card numbers or card security codes.

3.7 Communications and support information

We may collect:

  • messages you send to HomeTunnel;
  • support requests;
  • attachments and screenshots you provide;
  • legal or privacy requests;
  • account-deletion requests;
  • alert preferences;
  • notification delivery status;
  • email delivery metadata;
  • complaint records; and
  • communications concerning billing, security, account access, or service operation.

Do not send passwords, access tokens, private keys, setup keys, or other secrets through support email.

3.8 Website and browser information

The website may process:

  • IP address;
  • browser and device information;
  • language and time-zone information;
  • requested pages;
  • referral information;
  • necessary cookie or storage identifiers;
  • security signals; and
  • information required to authenticate users, maintain sessions, prevent abuse, or complete checkout.

HomeTunnel does not currently use personal information for targeted advertising or cross-context behavioural advertising.

3.9 Mobile application and local device information

The iOS and Android applications use a shared Capacitor-based interface together with native platform components that create and operate the secure connection. The applications may store on your device:

  • the current HomeTunnel device identifier and account association;
  • disclosure acceptance, onboarding, appearance, and connection preferences;
  • NetBird configuration and connection state;
  • an operating-system VPN profile;
  • secure authentication tokens in the platform-provided authentication cache; and
  • limited local diagnostic or cache information needed to establish and maintain the connection.

On iOS, the secure connection uses Apple Network Extension technology, including a packet-tunnel provider. On Android, it uses Android’s VPN service framework and displays the system-required foreground-service notification while the connection is operating. The operating system may separately display VPN status and permission information.

Signing out clears the application’s authentication session but may not remove an enrolled VPN profile or revoke a device’s network access. Use the device-removal or reset controls when access must end. Removing the application or clearing its application data generally removes app-local information, subject to operating-system behaviour, authentication-provider caches, backups, and separately installed VPN profiles.

4. VPN and secure-connection privacy

HomeTunnel prefers direct peer-to-peer connectivity. When a direct connection cannot be established, encrypted traffic may pass through a HomeTunnel-operated relay. The HomeTunnel control plane coordinates authorized peers and narrowly scoped routes but does not carry ordinary tunnel traffic. At the authorized tunnel endpoint in the home, traffic is decrypted and forwarded to the configured private service; that service’s protocol and security then govern the connection.

HomeTunnel does not sell, rent, monetize, use for advertising or profiling, or permit third parties to use data collected from VPN traffic or a user’s use of HomeTunnel’s VPN functionality. HomeTunnel processes only the limited connection metadata reasonably necessary to establish, maintain, secure, troubleshoot, and display the status of the connection requested by the user.

HomeTunnel does not inspect or store the content of normal tunnel traffic. Normal tunnel traffic is encrypted between authorized tunnel endpoints, including when a relay is used. A relay may process limited connection metadata and forward encrypted traffic but cannot decrypt its content.

Contracted infrastructure providers may process limited VPN-related metadata solely on HomeTunnel’s behalf to host, secure, and operate the Service. They are not permitted to sell the data, use it for advertising or profiling, or use it for their own independent purposes.

WireGuard private keys are intended to be generated and retained on the relevant device. They are not intended to be transmitted to or stored by HomeTunnel.

HomeTunnel does not intend to:

  • sell personal information;
  • use personal information for targeted advertising;
  • maintain advertising profiles;
  • capture the contents of Home Assistant traffic;
  • collect precise GPS location through the website or mobile applications;
  • collect complete payment-card details; or
  • expose an entire home network by default.

Limited connection metadata may include peer and tunnel identifiers, network addresses, connection method, timing, status, software version, errors, and transferred-byte or relay-capacity information where available. HomeTunnel may use aggregate operational demand and capacity information to decide when and where additional relay infrastructure is needed.

5. Sources of information

We may obtain information:

  • directly from you;
  • from users authorized to manage a home or device;
  • from Microsoft Entra External ID;
  • from the HomeTunnel website and portal;
  • from HomeTunnel clients and Home Assistant add-on software;
  • from enrolled devices;
  • from NetBird;
  • from Paddle;
  • from Microsoft Azure Communication Services;
  • from Cloudflare;
  • from infrastructure, hosting, database, backup, security, and monitoring providers;
  • from customer-support communications; and
  • from public authorities or other parties where permitted or required by law.

6. How we use information

We may use personal information to:

  • create and administer accounts;
  • authenticate users;
  • verify permissions and home ownership;
  • enforce subscription and feature limits;
  • pair and enroll devices;
  • issue short-lived enrollment credentials;
  • bind devices to authorized homes;
  • provide encrypted remote connectivity;
  • create and distribute narrowly scoped routes;
  • apply access-control policies;
  • maintain per-home isolation;
  • move authorized client devices between homes;
  • show home, route, device, and connection status;
  • process trials, subscriptions, renewals, cancellations, and account restrictions;
  • send requested operational notifications;
  • provide customer support;
  • investigate errors;
  • reconcile HomeTunnel and NetBird state;
  • clean up expired or orphaned resources;
  • maintain security;
  • prevent fraud, phishing, abuse, and unauthorized access;
  • enforce the Terms and Conditions;
  • comply with accounting, tax, regulatory, and legal obligations;
  • establish, exercise, or defend legal claims;
  • improve the reliability and usability of the Services; and
  • communicate material service, security, legal, or policy changes.

HomeTunnel limits collection, use, and disclosure to information reasonably required for identified purposes.

7. Consent and other legal bases

Where Canadian privacy law applies, HomeTunnel obtains consent where required and processes information for purposes that a reasonable person would consider appropriate in the circumstances.

Some information is necessary to provide the Services. For example, HomeTunnel cannot provide an authenticated, home-scoped remote-access service without processing account identifiers, home ownership, device identifiers, routes, connection status, and security records.

Where the GDPR, UK GDPR, or a comparable law applies despite HomeTunnel’s current geographic offering, HomeTunnel may rely on:

  • performance of a contract;
  • steps taken at your request before entering a contract;
  • legitimate interests in security, fraud prevention, service operation, and legal enforcement;
  • compliance with legal obligations; and
  • consent where the applicable activity requires it.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing already completed and does not prevent processing under another valid legal basis.

8. Automated operational decisions

HomeTunnel uses automated technical rules to determine matters such as:

  • whether a request is authenticated;
  • whether a user owns or may manage a home;
  • whether a subscription currently provides access;
  • whether a trial has already been used;
  • whether a plan limit has been reached;
  • whether a device may be enrolled;
  • whether a route may be created or distributed;
  • whether a device is ready to provide routing;
  • whether network information indicates a conflict;
  • whether access should be restricted after subscription expiration;
  • whether an operation should be rate-limited; and
  • whether a device or route requires reconciliation.

These rules are used to operate and secure the service. They are not intended to evaluate personal traits or make employment, credit, housing, insurance, education, or similar decisions.

Contact support@hometunnel.io if you believe an automated operational rule produced an incorrect result.

9. How we disclose information

HomeTunnel may disclose information to the following categories of recipients.

9.1 Microsoft

Microsoft Entra External ID provides account authentication. Microsoft Azure Communication Services may be used to deliver transactional and operational emails.

Microsoft may process account, authentication, delivery, IP-address, device, browser, and related technical information under its own agreements and privacy documentation. HomeTunnel does not receive your Microsoft password or multi-factor authentication secret.

9.2 NetBird connectivity components

HomeTunnel uses open-source NetBird components in HomeTunnel-operated management, signaling, relay, and connectivity infrastructure.

Information disclosed or synchronized may include:

  • peer identifiers;
  • device names or labels;
  • setup-key enrollment information;
  • group membership;
  • route definitions;
  • access-control information;
  • connection status; and
  • technical information needed for peer-to-peer or relay connectivity.

HomeTunnel remains responsible for HomeTunnel account ownership and authorization decisions.

Direct peer-to-peer connectivity is preferred. A HomeTunnel-operated relay forwards encrypted traffic only when needed and cannot decrypt normal tunnel content. A relay may process limited connection metadata, timing, and forwarded-byte information needed to operate and size the service. HomeTunnel expects to add or relocate relay servers as product demand, capacity, geography, and reliability needs grow, so the connection path available to a user may change over time.

9.3 Paddle

Paddle acts as merchant of record for eligible purchases made through the website. Paddle may independently process:

  • buyer contact information;
  • checkout information;
  • payment information;
  • tax information;
  • fraud signals;
  • subscriptions;
  • invoices;
  • refunds;
  • disputes; and
  • buyer-support requests.

HomeTunnel receives only the information reasonably required to provision and administer the corresponding HomeTunnel subscription.

9.4 Cloudflare

Cloudflare may process request, IP-address, browser, security, and delivery information to provide DNS, content delivery, traffic protection, rate limiting, and related edge-security services.

9.5 Hosting and infrastructure providers

HomeTunnel uses Hetzner and may use other hosting, database, backup, observability, email, security, and infrastructure providers to operate the Services. These providers may process information only as necessary to provide their contracted functions, subject to their agreements and applicable law.

9.6 Professional and legal recipients

We may disclose information to:

  • lawyers;
  • accountants;
  • auditors;
  • insurers;
  • consultants;
  • financing or transaction counterparties;
  • government agencies;
  • regulators;
  • courts;
  • law-enforcement bodies; and
  • other parties where disclosure is legally permitted or required.

9.7 Business transactions

If HomeTunnel is involved in a merger, financing, acquisition, reorganization, sale of assets, insolvency process, or similar transaction, information may be disclosed subject to appropriate confidentiality and legal protections.

10. No sale or behavioural advertising

HomeTunnel does not sell personal information.

HomeTunnel does not share personal information for cross-context behavioural advertising and does not use personal information to build targeted advertising profiles.

If HomeTunnel introduces a materially different advertising or analytics practice, this Privacy Policy will be updated and any legally required notice, consent, or opt-out mechanism will be provided before that practice begins.

11. Cookies and similar technologies

HomeTunnel may use cookies, browser storage, token caches, and similar technologies that are reasonably necessary for:

  • authentication;
  • security;
  • maintaining sessions;
  • remembering preferences;
  • preventing fraud and abuse;
  • completing checkout;
  • operating the account portal; and
  • maintaining service continuity.

Microsoft, Paddle, Cloudflare, and other service providers may use their own necessary technologies when providing their functions.

HomeTunnel does not currently use advertising cookies. If non-essential analytics or marketing technologies are introduced, HomeTunnel will provide notice and obtain consent where required.

12. International processing and transfers

HomeTunnel is based in Ontario, Canada.

HomeTunnel and its service providers may process information in Canada, the United States, member states of the European Economic Area, the United Kingdom, and other jurisdictions in which relevant providers operate.

Information processed outside your province, state, or country may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement authorities, or national-security authorities in accordance with applicable law.

Where legally required, HomeTunnel will use recognized transfer safeguards, which may include:

  • contractual data-protection terms;
  • Standard Contractual Clauses;
  • the United Kingdom International Data Transfer Agreement or Addendum;
  • adequacy decisions;
  • transfer-risk assessments; and
  • other legally recognized transfer mechanisms.

13. Retention

HomeTunnel retains personal information only for as long as reasonably required for the purpose for which it was collected, for legitimate security and operational requirements, or to meet legal obligations. Retention may vary by record because security investigations, disputes, legal holds, provider reconciliation, and accounting or tax requirements can require a longer period.

13.1 Active account and configuration records

Account, home, ownership, device, peer, resource, and route configuration is generally retained while the relevant account or resource remains active.

Some inactive or tombstoned records may be retained temporarily when needed to complete secure cleanup, prevent stale access, investigate an error, or reconcile external network state.

13.2 Customer-visible home audit history

Customer-visible home audit records are generally retained for 30 days.

These records may include actions such as:

  • device enrollment;
  • device movement;
  • device deletion;
  • route changes;
  • notification events; and
  • other home-management actions made available through the account portal.

13.3 Security, diagnostic, and service records

Current device status may remain associated with an active device. Historical heartbeat, diagnostic, application, authentication, authorization, fraud-prevention, incident, and privileged operational records are retained only as long as reasonably needed to operate and secure the Services, investigate errors or abuse, enforce the Terms, and meet legal obligations.

These records may be retained longer where reasonably necessary for:

  • an active security incident;
  • an abuse investigation;
  • a legal claim;
  • a regulatory request;
  • fraud prevention;
  • enforcement of the Terms; or
  • a legal hold.

13.4 Notifications and billing events

Alert preferences are generally retained while the account remains active. Notification-delivery records associated with a deleted HomeTunnel account are removed from active systems through the account-deletion process.

HomeTunnel removes billing-webhook events matched to a deleted account on a best-effort basis. Subscription, transaction, tax, invoice, refund, and related financial records may be retained as required for accounting, tax, fraud-prevention, dispute, corporate, or legal purposes. Paddle separately retains records under its own legal obligations and policies.

13.5 Support and complaint records

Support correspondence, privacy requests, complaints, and related attachments are retained only as long as reasonably required to resolve the matter and meet security, legal, and operational needs.

13.6 Microsoft sign-in identity

The Microsoft Entra identity used to sign in is separate from the HomeTunnel application account records removed through the portal. A sign-in identity becomes eligible for HomeTunnel’s manual identity-deletion process after both of the following have been true for 30 consecutive days:

  • it has not been used to sign in to HomeTunnel; and
  • it is not associated with an active HomeTunnel home.

Approximately every 30 days, HomeTunnel runs a report to identify identities that meet both conditions. HomeTunnel personnel then manually review and delete eligible identities from HomeTunnel’s Microsoft Entra tenant. Because this is a periodic report and manual review, deletion may occur after the 30-day eligibility point rather than on that exact day. Signing in again before the identity is deleted makes it ineligible for that deletion cycle.

This process deletes the identity from HomeTunnel’s tenant; it does not delete your independent Microsoft consumer or organizational account.

13.7 Account deletion and network cleanup

Eligible users can delete their HomeTunnel account through https://my.hometunnel.io/settings/delete-account. The portal first requires removal of active homes and completion of pending network cleanup, and it blocks deletion while an active, trialing, or past-due subscription remains.

Once confirmed, HomeTunnel removes the user profile and associated active account records, including preferences, terms acceptances, customer-visible audit records, notification deliveries, subscription records, and matching billing-webhook events on a best-effort basis. Homes, devices, routes, and associated NetBird resources must already have been removed through the home-deletion workflow.

HomeTunnel or Paddle may retain limited financial, transaction, fraud-prevention, security, dispute, or legal records where required or reasonably necessary.

13.8 Backups

Information deleted from active systems may remain in encrypted or access-controlled backups until it expires through the ordinary backup cycle, unless a backup must be preserved for disaster recovery, a security incident, or a legal hold. HomeTunnel does not ordinarily restore an individual deleted record from backup except for disaster recovery, security, or legal compliance.

13.9 Local device information

Account deletion does not automatically remove information stored locally on every device. Remove or reset enrolled devices, VPN profiles, and application data when access must end. Operating-system, Microsoft authentication, and device-backup retention may be controlled by those independent providers.

13.10 Anonymized information

HomeTunnel may retain information that has been irreversibly anonymized so that it no longer identifies an individual.

14. Account deletion and subscription cancellation are separate

Uninstalling software, disconnecting a device, ceasing to use the Services, or cancelling a subscription does not automatically delete the corresponding HomeTunnel account or all retained records.

The portal blocks account deletion while a subscription is active, trialing, or past due. Cancel the subscription through the billing process and wait until it no longer blocks deletion, then remove all homes and complete deletion at https://my.hometunnel.io/settings/delete-account.

Deleting a HomeTunnel account does not automatically create a refund or require Paddle to delete records it independently must retain. A later Microsoft sign-in creates a new, empty HomeTunnel account and does not restore deleted homes, devices, routes, preferences, or subscriptions.

15. Your privacy rights

Depending on your location and applicable law, you may have the right to:

  • request access to personal information;
  • request correction of inaccurate information;
  • request deletion;
  • withdraw consent where processing is based on consent;
  • object to or restrict certain processing;
  • request information about disclosures;
  • request a portable copy of certain information;
  • request review of certain automated decisions;
  • appeal a denied privacy request;
  • use an authorized agent; and
  • submit a complaint to a privacy regulator.

Submit privacy requests to support@hometunnel.io.

HomeTunnel may ask for information reasonably necessary to verify:

  • your identity;
  • your authority over the account;
  • the scope of the request; and
  • the authority of an agent acting for you.

HomeTunnel will not unlawfully discriminate against a person for exercising a privacy right.

Some rights are subject to exceptions. For example, HomeTunnel may be unable to delete records that must be retained for tax, transaction, security, fraud-prevention, legal, or dispute purposes.

Canadian users may contact the Office of the Privacy Commissioner of Canada if they are not satisfied with HomeTunnel’s response and the matter falls within that office’s jurisdiction.

Residents of certain U.S. states may have additional rights under applicable state privacy laws. HomeTunnel does not currently sell personal information or share it for cross-context behavioural advertising.

16. Children and young users

The Services are not directed to children under 16.

A person must be at least 16 years old to use the Services.

A user who is 16 or 17, or who has not reached the age of majority where they live, may use the Services only where:

  • a parent or legal guardian has reviewed and accepted the Terms and Conditions;
  • the parent or legal guardian authorizes the user’s use;
  • the parent or legal guardian controls or authorizes any paid subscription; and
  • the use is otherwise permitted by applicable law.

HomeTunnel does not knowingly collect personal information from a child under 16.

Contact support@hometunnel.io if you believe a child under 16 has provided personal information. HomeTunnel will investigate and take appropriate deletion or restriction steps.

17. Information about other people

If you configure or manage a home, device, property, or network for another person or organization, you are responsible for having lawful authority to do so.

You may also be responsible for providing required notices and obtaining necessary permission from:

  • property owners;
  • residents;
  • tenants;
  • household members;
  • employees;
  • contractors;
  • customers;
  • guests; and
  • other affected people.

Do not use HomeTunnel to monitor, access, or control a property or device without authorization.

Business customers may require a separate data-processing agreement depending on their use and legal obligations.

18. Security

HomeTunnel uses administrative, technical, and organizational safeguards designed to protect information.

These safeguards may include:

  • server-side authentication and authorization;
  • per-request token validation;
  • home-ownership checks;
  • per-home isolation;
  • narrowly scoped host routes;
  • access-control policies;
  • short-lived setup credentials;
  • single-use enrollment controls;
  • device credential and binding validation;
  • encryption in transit;
  • device-generated private keys;
  • credential expiration and revocation;
  • rate limiting;
  • restricted infrastructure access;
  • internal-only management services;
  • database access controls;
  • security monitoring;
  • logging restrictions;
  • backup controls; and
  • reconciliation and cleanup procedures.

No system is completely secure. HomeTunnel cannot guarantee that unauthorized access, data loss, misuse, or service interruption will never occur.

HomeTunnel will provide breach notices where required by applicable law.

Report suspected security issues to support@hometunnel.io. Do not include active credentials or exploit sensitive systems beyond what is reasonably necessary to describe the concern.

19. Third-party websites and services

The Services may contain links to or interact with services operated by other organizations.

HomeTunnel does not control the privacy practices of independent third parties. Review their privacy notices before submitting information.

This Privacy Policy does not replace the separate privacy terms of Microsoft, NetBird, Paddle, Cloudflare, Home Assistant, hosting providers, internet providers, device manufacturers, or other independent services.

20. Changes to this Privacy Policy

HomeTunnel may update this Privacy Policy to reflect changes in:

  • the Services;
  • technology;
  • providers;
  • legal requirements;
  • security practices;
  • retention practices; or
  • business operations.

The updated version will be posted with a revised effective date.

HomeTunnel will provide additional notice or obtain consent where required for a material change.

Continued use after an update takes effect constitutes acceptance only to the extent permitted by applicable law.

21. Contact

Questions, complaints, questions about account deletion, and privacy-rights requests may be submitted to:

HomeTunnel Inc.
Attention: Privacy Officer
2967 Dundas St W
Toronto, Ontario M6P 1Z2
Canada

Email: support@hometunnel.io
Legal notices: legal@hometunnel.io
Website: https://hometunnel.io