Privacy notice

What stays on your machine

Everything you enter into TunnelIQ — constraints, commitments, observations, near-misses, audit logs, generated PDF reports, photo and voice uploads — is stored in a single SQLite database file (tunneliq.db) plus a folder of attachments (observation_uploads/) on the laptop where you ran TunnelIQ.exe. There is no copy on our infrastructure.

What may leave your machine

Three optional features can transmit data outside your network. Each is documented and opt-in:

• Cloudflare Tunnel fallback. If you choose to publish the running TunnelIQ to a public URL via the bundled cloudflared.exe, traffic between phones and your laptop is relayed through Cloudflare's network. Cloudflare can see request and response payloads in transit. Disabled by default; the launcher prompts for explicit Y/N consent before publishing.
• Claude API integrations. If you set ANTHROPIC_API_KEY, certain features (PDF shift-report parsing, A3 root-cause drafting, in-app help chat) call Anthropic's API. Only the relevant prompt is sent — never your full database. See Anthropic's privacy policy for what they retain. Disabled when no key is set.
• Sentry error reporting. If you set SENTRY_DSN, application errors (stack traces) are sent to your Sentry account. PII is filtered. Disabled when no DSN is set.

What we collect on this website

tunnel-iq.com serves only static HTML and the installer download. No tracking pixels, no analytics SDKs, no cookies. Cloudflare logs basic request metadata (IP, user-agent, URL) for abuse prevention; we do not retain this beyond Cloudflare's default retention.

Audit trail

Within your TunnelIQ instance, every meaningful action — login, constraint change, TBM mode change, NOA override, meeting advance — is recorded in the audit log. You can export the full log as CSV from the Audit page at any time.

Data deletion

To delete all your data: stop TunnelIQ, delete tunneliq.db and the observation_uploads/ folder. That's everything.

Contact

Questions: [email protected].