Effective date: July 21, 2026

This Privacy Policy explains how HomeTunnel Inc. (“HomeTunnel,” “we,” “us,” or “our”) collects, uses, discloses, stores, and protects personal information when you access or use:

  • the HomeTunnel website at https://hometunnel.io;
  • the HomeTunnel account portal;
  • HomeTunnel application programming interfaces;
  • HomeTunnel client and Home Assistant add-on software;
  • HomeTunnel subscription, support, notification, and account-management services; and
  • related websites, communications, software, and services that link to this Privacy Policy.

These offerings are collectively referred to as the “Services.”

This Privacy Policy currently applies to the HomeTunnel website and web-based Services. Separate or supplementary privacy disclosures may be provided for HomeTunnel mobile applications before they are publicly released.

1. HomeTunnel and contact information

HomeTunnel Inc. is responsible for the personal information processed through the Services, except where a third-party provider independently processes information under its own privacy notice.

HomeTunnel Inc.

Mailing address:
2967 Dundas St W
Toronto, Ontario M6P 1Z2
Canada

Privacy and data-rights requests: support@hometunnel.io
Customer support: support@hometunnel.io
Legal notices: legal@hometunnel.io
Website: https://hometunnel.io

The address above is HomeTunnel’s public mailing address. It should not be interpreted as a representation that customers may receive in-person support at that location.

2. Scope and geographic availability

HomeTunnel currently offers the Services to eligible users in the United States and Canada, excluding Quebec.

The Services are currently provided in English. HomeTunnel does not currently offer the Services for purchase in Quebec. Availability may be expanded or restricted as HomeTunnel’s legal, language, technical, and operational capabilities change.

This Privacy Policy may also apply when information is processed outside those locations, including when a visitor accesses the public website from another jurisdiction. Accessing the website does not mean that HomeTunnel offers the Services in every jurisdiction.

3. Information we collect

The information we collect depends on how you interact with the Services.

3.1 Account and identity information

We may collect:

  • your Microsoft Entra External ID subject identifier;
  • your email address;
  • your display name and other optional profile information;
  • account status and account preferences;
  • authentication status and authorization results;
  • subscription and trial eligibility status; and
  • identifiers used to associate your HomeTunnel account with homes, devices, and subscriptions.

HomeTunnel uses the validated Microsoft Entra subject identifier as the primary account identity. An email address may be used for communication and display purposes but is not treated as the sole proof of identity.

3.2 Home and property information

When you create or manage a home through HomeTunnel, we may collect:

  • home names and identifiers;
  • ownership and management relationships;
  • home configuration and service status;
  • billing restriction status;
  • route and resource configuration;
  • device assignments;
  • Home Assistant connection information; and
  • operational information required to isolate one home from another.

Home names should not contain unnecessary sensitive information.

3.3 Device and network information

We may collect information about enrolled devices and authorized private-network services, including:

  • device identifiers;
  • device names;
  • device type and platform;
  • Home Assistant OS add-on information;
  • NetBird peer identifiers and peer names;
  • device enrollment and binding metadata;
  • device credential status;
  • public networking identifiers;
  • local IPv4 addresses;
  • local subnet information;
  • target IP addresses and hostnames;
  • target service ports;
  • host-route configuration;
  • route-distribution status;
  • device movement between homes;
  • device and software version information; and
  • information indicating whether a device is eligible to act as a routing peer.

HomeTunnel is designed to use narrowly scoped host routes rather than expose an entire private network by default.

3.4 Connectivity and telemetry information

We may collect:

  • heartbeat times;
  • last-seen times;
  • online, offline, recovered, degraded, or disconnected status;
  • peer and tunnel status;
  • routing capability;
  • route-readiness status;
  • direct or relay connection status where available;
  • same-LAN indicators;
  • IP-conflict indicators;
  • overlapping-subnet indicators;
  • local-bypass recommendations;
  • provisioning and reconciliation state; and
  • technical error and diagnostic information.

This information is used to operate, secure, troubleshoot, and display the status of the Services.

3.5 Security, audit, and request information

We may collect:

  • IP addresses;
  • browser type;
  • operating-system information;
  • request timestamps;
  • request paths and methods;
  • authentication and authorization outcomes;
  • rate-limit events;
  • account, home, device, route, enrollment, and administrative actions;
  • provisioning, cleanup, and reconciliation events;
  • suspicious or prohibited activity;
  • security alerts;
  • billing-webhook processing status;
  • error categories; and
  • information needed to investigate incidents or enforce our Terms and Conditions.

HomeTunnel does not intentionally place access tokens, setup-key values, private keys, complete authorization headers, device tokens, signed binding tokens, payment-card details, or other operational secrets into ordinary logs or customer-visible audit records.

3.6 Subscription and billing information

When you begin a trial or purchase a subscription, we may receive or store:

  • selected plan;
  • billing period;
  • trial eligibility and trial-use status;
  • subscription status;
  • renewal and cancellation status;
  • current billing-period end;
  • Paddle customer and subscription identifiers;
  • Paddle price and transaction identifiers;
  • currency and normalized transaction amounts;
  • refund, dispute, or payment-failure status;
  • billing-event metadata; and
  • provider request or correlation identifiers.

Purchases are completed through the HomeTunnel website. HomeTunnel does not currently offer subscription purchases through Apple App Store or Google Play billing.

Paddle acts as merchant of record for eligible purchases and independently processes checkout, payment, tax, invoicing, fraud-prevention, refund, and payment-support information under its own legal terms and privacy notice.

HomeTunnel does not intentionally receive or store complete payment-card numbers or card security codes.

3.7 Communications and support information

We may collect:

  • messages you send to HomeTunnel;
  • support requests;
  • attachments and screenshots you provide;
  • legal or privacy requests;
  • account-deletion requests;
  • alert preferences;
  • notification delivery status;
  • email delivery metadata;
  • complaint records; and
  • communications concerning billing, security, account access, or service operation.

Do not send passwords, access tokens, private keys, setup keys, or other secrets through support email.

3.8 Website and browser information

The website may process:

  • IP address;
  • browser and device information;
  • language and time-zone information;
  • requested pages;
  • referral information;
  • necessary cookie or storage identifiers;
  • security signals; and
  • information required to authenticate users, maintain sessions, prevent abuse, or complete checkout.

HomeTunnel does not currently use personal information for targeted advertising or cross-context behavioural advertising.

4. Information HomeTunnel does not intend to collect

HomeTunnel does not intend to collect or inspect the contents of normal traffic transmitted between authorized devices through an encrypted HomeTunnel connection.

WireGuard private keys are intended to be generated and retained on the relevant device. They are not intended to be transmitted to or stored by HomeTunnel.

HomeTunnel does not intend to:

  • sell personal information;
  • use personal information for targeted advertising;
  • maintain advertising profiles;
  • capture the contents of Home Assistant traffic;
  • collect precise GPS location through the website;
  • collect complete payment-card details; or
  • expose an entire home network by default.

Technical metadata needed to establish and secure connectivity may still be processed.

5. Sources of information

We may obtain information:

  • directly from you;
  • from users authorized to manage a home or device;
  • from Microsoft Entra External ID;
  • from the HomeTunnel website and portal;
  • from HomeTunnel clients and Home Assistant add-on software;
  • from enrolled devices;
  • from NetBird;
  • from Paddle;
  • from Microsoft Azure Communication Services;
  • from Cloudflare;
  • from infrastructure, hosting, database, backup, security, and monitoring providers;
  • from customer-support communications; and
  • from public authorities or other parties where permitted or required by law.

6. How we use information

We may use personal information to:

  • create and administer accounts;
  • authenticate users;
  • verify permissions and home ownership;
  • enforce subscription and feature limits;
  • pair and enroll devices;
  • issue short-lived enrollment credentials;
  • bind devices to authorized homes;
  • provide encrypted remote connectivity;
  • create and distribute narrowly scoped routes;
  • apply access-control policies;
  • maintain per-home isolation;
  • move authorized client devices between homes;
  • show home, route, device, and connection status;
  • process trials, subscriptions, renewals, cancellations, and account restrictions;
  • send requested operational notifications;
  • provide customer support;
  • investigate errors;
  • reconcile HomeTunnel and NetBird state;
  • clean up expired or orphaned resources;
  • maintain security;
  • prevent fraud, phishing, abuse, and unauthorized access;
  • enforce the Terms and Conditions;
  • comply with accounting, tax, regulatory, and legal obligations;
  • establish, exercise, or defend legal claims;
  • improve the reliability and usability of the Services; and
  • communicate material service, security, legal, or policy changes.

HomeTunnel limits collection, use, and disclosure to information reasonably required for identified purposes.

7. Consent and other legal bases

Where Canadian privacy law applies, HomeTunnel obtains consent where required and processes information for purposes that a reasonable person would consider appropriate in the circumstances.

Some information is necessary to provide the Services. For example, HomeTunnel cannot provide an authenticated, home-scoped remote-access service without processing account identifiers, home ownership, device identifiers, routes, connection status, and security records.

Where the GDPR, UK GDPR, or a comparable law applies despite HomeTunnel’s current geographic offering, HomeTunnel may rely on:

  • performance of a contract;
  • steps taken at your request before entering a contract;
  • legitimate interests in security, fraud prevention, service operation, and legal enforcement;
  • compliance with legal obligations; and
  • consent where the applicable activity requires it.

You may withdraw consent where processing is based on consent. Withdrawal does not affect processing already completed and does not prevent processing under another valid legal basis.

8. Automated operational decisions

HomeTunnel uses automated technical rules to determine matters such as:

  • whether a request is authenticated;
  • whether a user owns or may manage a home;
  • whether a subscription currently provides access;
  • whether a trial has already been used;
  • whether a plan limit has been reached;
  • whether a device may be enrolled;
  • whether a route may be created or distributed;
  • whether a device is ready to provide routing;
  • whether network information indicates a conflict;
  • whether access should be restricted after subscription expiration;
  • whether an operation should be rate-limited; and
  • whether a device or route requires reconciliation.

These rules are used to operate and secure the service. They are not intended to evaluate personal traits or make employment, credit, housing, insurance, education, or similar decisions.

Contact support@hometunnel.io if you believe an automated operational rule produced an incorrect result.

9. How we disclose information

HomeTunnel may disclose information to the following categories of recipients.

9.1 Microsoft

Microsoft Entra External ID provides account authentication. Microsoft Azure Communication Services may be used to deliver transactional and operational emails.

Microsoft may process account, authentication, delivery, and related technical information under its own agreements and privacy documentation.

9.2 NetBird

NetBird provides components of the WireGuard-based connectivity and network-control infrastructure.

Information disclosed or synchronized may include:

  • peer identifiers;
  • device names or labels;
  • setup-key enrollment information;
  • group membership;
  • route definitions;
  • access-control information;
  • connection status; and
  • technical information needed for peer-to-peer or relay connectivity.

HomeTunnel remains responsible for HomeTunnel account ownership and authorization decisions.

9.3 Paddle

Paddle acts as merchant of record for eligible purchases made through the website. Paddle may independently process:

  • buyer contact information;
  • checkout information;
  • payment information;
  • tax information;
  • fraud signals;
  • subscriptions;
  • invoices;
  • refunds;
  • disputes; and
  • buyer-support requests.

HomeTunnel receives only the information reasonably required to provision and administer the corresponding HomeTunnel subscription.

9.4 Cloudflare

Cloudflare may process request, IP-address, browser, security, and delivery information to provide DNS, content delivery, traffic protection, rate limiting, and related edge-security services.

9.5 Hosting and infrastructure providers

HomeTunnel may use hosting, database, backup, observability, email, security, and infrastructure providers to operate the Services. These providers may process information only as necessary to provide their contracted functions, subject to their agreements and applicable law.

9.6 Professional and legal recipients

We may disclose information to:

  • lawyers;
  • accountants;
  • auditors;
  • insurers;
  • consultants;
  • financing or transaction counterparties;
  • government agencies;
  • regulators;
  • courts;
  • law-enforcement bodies; and
  • other parties where disclosure is legally permitted or required.

9.7 Business transactions

If HomeTunnel is involved in a merger, financing, acquisition, reorganization, sale of assets, insolvency process, or similar transaction, information may be disclosed subject to appropriate confidentiality and legal protections.

10. No sale or behavioural advertising

HomeTunnel does not sell personal information.

HomeTunnel does not share personal information for cross-context behavioural advertising and does not use personal information to build targeted advertising profiles.

If HomeTunnel introduces a materially different advertising or analytics practice, this Privacy Policy will be updated and any legally required notice, consent, or opt-out mechanism will be provided before that practice begins.

11. Cookies and similar technologies

HomeTunnel may use cookies, browser storage, token caches, and similar technologies that are reasonably necessary for:

  • authentication;
  • security;
  • maintaining sessions;
  • remembering preferences;
  • preventing fraud and abuse;
  • completing checkout;
  • operating the account portal; and
  • maintaining service continuity.

Microsoft, Paddle, Cloudflare, and other service providers may use their own necessary technologies when providing their functions.

HomeTunnel does not currently use advertising cookies. If non-essential analytics or marketing technologies are introduced, HomeTunnel will provide notice and obtain consent where required.

12. International processing and transfers

HomeTunnel is based in Ontario, Canada.

HomeTunnel and its service providers may process information in Canada, the United States, member states of the European Economic Area, the United Kingdom, and other jurisdictions in which relevant providers operate.

Information processed outside your province, state, or country may be subject to the laws of that jurisdiction and may be accessible to courts, law-enforcement authorities, or national-security authorities in accordance with applicable law.

Where legally required, HomeTunnel will use recognized transfer safeguards, which may include:

  • contractual data-protection terms;
  • Standard Contractual Clauses;
  • the United Kingdom International Data Transfer Agreement or Addendum;
  • adequacy decisions;
  • transfer-risk assessments; and
  • other legally recognized transfer mechanisms.

13. Retention

HomeTunnel retains personal information only for as long as reasonably required for the purpose for which it was collected, for legitimate security and operational requirements, or to meet legal obligations.

The following schedule describes HomeTunnel’s intended standard retention periods.

13.1 Active account and configuration records

Account, home, ownership, device, peer, resource, and route configuration is generally retained while the relevant account or resource remains active.

Some inactive or tombstoned records may be retained temporarily when needed to complete secure cleanup, prevent stale access, investigate an error, or reconcile external network state.

13.2 Customer-visible home audit history

Customer-visible home audit records are generally retained for 30 days.

These records may include actions such as:

  • device enrollment;
  • device movement;
  • device deletion;
  • route changes;
  • notification events; and
  • other home-management actions made available through the account portal.

13.3 Security and compliance audit records

Security, authorization, fraud-prevention, incident, and privileged operational audit records may be retained for up to 24 months.

These records may be retained longer where reasonably necessary for:

  • an active security incident;
  • an abuse investigation;
  • a legal claim;
  • a regulatory request;
  • fraud prevention;
  • enforcement of the Terms; or
  • a legal hold.

13.4 Heartbeat and ordinary telemetry history

Historical heartbeat and ordinary device telemetry records are generally retained for 30 days, unless a shorter period is implemented for a particular telemetry category.

Current or latest-known status values may remain associated with an active device.

13.5 General application and authentication logs

General application, request, and authentication logs are generally retained for up to 90 days.

13.6 Notification delivery records

Notification-delivery records are generally retained for up to 90 days.

Alert preferences are generally retained while the account remains active.

13.7 Billing webhook information

Raw billing-webhook payloads are generally retained for up to 90 days.

Normalized subscription, transaction, and billing-state records may be retained for longer periods as described below.

13.8 Subscription and financial records

Subscription, transaction, tax, invoice, refund, and other financial records may be retained for seven years or for another period required by applicable accounting, tax, corporate, or legal obligations.

13.9 Support and complaint records

Support correspondence, privacy requests, complaints, and related attachments are generally retained for up to 24 months after the matter is closed, unless a longer period is required for security, legal, or operational reasons.

13.10 Inactive accounts

An account may be designated inactive after all of the following have occurred for 12 consecutive months:

  • the account has no active or trial subscription;
  • there has been no portal sign-in; and
  • there has been no authenticated device heartbeat.

HomeTunnel intends to provide at least 30 days’ notice to the account email address before scheduled inactive-account deletion.

Signing in or reactivating service before the scheduled deletion date cancels the scheduled inactive-account deletion.

Account configuration is generally deleted from active systems within 30 days after the scheduled deletion date.

13.11 Account-deletion requests

You may request account deletion by contacting support@hometunnel.io from the email address associated with your account.

HomeTunnel may require reasonable identity verification before processing the request.

Deletion may require HomeTunnel to:

  • terminate or restrict active access;
  • revoke device credentials;
  • remove route distribution;
  • clean up NetBird resources;
  • cancel or separate active service records;
  • preserve legally required billing records; and
  • retain limited security or dispute records.

HomeTunnel will process verified deletion requests within the period required by applicable law.

Deleting an account does not require deletion of information that HomeTunnel or Paddle must retain for legal, accounting, tax, fraud-prevention, security, dispute, or transaction-record purposes.

13.12 Backups

Information deleted from active systems may remain in encrypted or access-controlled backups until it expires through the normal backup cycle.

HomeTunnel’s intended rolling backup expiration period is no more than 35 days after deletion from active systems, unless a backup must be preserved because of a security incident, legal hold, or disaster-recovery requirement.

HomeTunnel does not ordinarily restore an individual deleted record from backup unless necessary for disaster recovery, security, or legal compliance.

13.13 Anonymized information

HomeTunnel may retain information that has been irreversibly anonymized so that it no longer identifies an individual.

14. Account deletion does not equal subscription cancellation

Uninstalling software, disconnecting a device, ceasing to use the Services, or cancelling a subscription does not automatically delete the corresponding HomeTunnel account or all retained records.

Similarly, requesting account deletion does not necessarily cancel an independently processed Paddle transaction unless the subscription has also been cancelled through the available billing process.

Users should complete any required subscription cancellation and then submit an account-deletion request.

15. Your privacy rights

Depending on your location and applicable law, you may have the right to:

  • request access to personal information;
  • request correction of inaccurate information;
  • request deletion;
  • withdraw consent where processing is based on consent;
  • object to or restrict certain processing;
  • request information about disclosures;
  • request a portable copy of certain information;
  • request review of certain automated decisions;
  • appeal a denied privacy request;
  • use an authorized agent; and
  • submit a complaint to a privacy regulator.

Submit privacy requests to support@hometunnel.io.

HomeTunnel may ask for information reasonably necessary to verify:

  • your identity;
  • your authority over the account;
  • the scope of the request; and
  • the authority of an agent acting for you.

HomeTunnel will not unlawfully discriminate against a person for exercising a privacy right.

Some rights are subject to exceptions. For example, HomeTunnel may be unable to delete records that must be retained for tax, transaction, security, fraud-prevention, legal, or dispute purposes.

Canadian users may contact the Office of the Privacy Commissioner of Canada if they are not satisfied with HomeTunnel’s response and the matter falls within that office’s jurisdiction.

Residents of certain U.S. states may have additional rights under applicable state privacy laws. HomeTunnel does not currently sell personal information or share it for cross-context behavioural advertising.

16. Children and young users

The Services are not directed to children under 16.

A person must be at least 16 years old to use the Services.

A user who is 16 or 17, or who has not reached the age of majority where they live, may use the Services only where:

  • a parent or legal guardian has reviewed and accepted the Terms and Conditions;
  • the parent or legal guardian authorizes the user’s use;
  • the parent or legal guardian controls or authorizes any paid subscription; and
  • the use is otherwise permitted by applicable law.

HomeTunnel does not knowingly collect personal information from a child under 16.

Contact support@hometunnel.io if you believe a child under 16 has provided personal information. HomeTunnel will investigate and take appropriate deletion or restriction steps.

17. Information about other people

If you configure or manage a home, device, property, or network for another person or organization, you are responsible for having lawful authority to do so.

You may also be responsible for providing required notices and obtaining necessary permission from:

  • property owners;
  • residents;
  • tenants;
  • household members;
  • employees;
  • contractors;
  • customers;
  • guests; and
  • other affected people.

Do not use HomeTunnel to monitor, access, or control a property or device without authorization.

Business customers may require a separate data-processing agreement depending on their use and legal obligations.

18. Security

HomeTunnel uses administrative, technical, and organizational safeguards designed to protect information.

These safeguards may include:

  • server-side authentication and authorization;
  • per-request token validation;
  • home-ownership checks;
  • per-home isolation;
  • narrowly scoped host routes;
  • access-control policies;
  • short-lived setup credentials;
  • single-use enrollment controls;
  • device credential and binding validation;
  • encryption in transit;
  • device-generated private keys;
  • credential expiration and revocation;
  • rate limiting;
  • restricted infrastructure access;
  • internal-only management services;
  • database access controls;
  • security monitoring;
  • logging restrictions;
  • backup controls; and
  • reconciliation and cleanup procedures.

No system is completely secure. HomeTunnel cannot guarantee that unauthorized access, data loss, misuse, or service interruption will never occur.

HomeTunnel will provide breach notices where required by applicable law.

Report suspected security issues to support@hometunnel.io. Do not include active credentials or exploit sensitive systems beyond what is reasonably necessary to describe the concern.

19. Third-party websites and services

The Services may contain links to or interact with services operated by other organizations.

HomeTunnel does not control the privacy practices of independent third parties. Review their privacy notices before submitting information.

This Privacy Policy does not replace the separate privacy terms of Microsoft, NetBird, Paddle, Cloudflare, Home Assistant, hosting providers, internet providers, device manufacturers, or other independent services.

20. Changes to this Privacy Policy

HomeTunnel may update this Privacy Policy to reflect changes in:

  • the Services;
  • technology;
  • providers;
  • legal requirements;
  • security practices;
  • retention practices; or
  • business operations.

The updated version will be posted with a revised effective date.

HomeTunnel will provide additional notice or obtain consent where required for a material change.

Continued use after an update takes effect constitutes acceptance only to the extent permitted by applicable law.

21. Contact

Questions, complaints, account-deletion requests, and privacy-rights requests may be submitted to:

HomeTunnel Inc.
Attention: Privacy Officer
2967 Dundas St W
Toronto, Ontario M6P 1Z2
Canada

Email: support@hometunnel.io
Legal notices: legal@hometunnel.io
Website: https://hometunnel.io