Privacy Policy

What we collect

Account data: GitHub username, email address (from GitHub OAuth).

Node data: WireGuard public key, device hostname, overlay IP, node ID. Your private key is generated on-device and never sent to us.

Usage data: Bandwidth consumed (bytes in/out per tenant, not content), connection timestamps, tunnel establishment events. This data is used for quota enforcement and billing.

Audit logs: Append-only ledger of enrollment events, tier transitions, and policy changes. Retained per your tier's retention policy.

Signal data (aggregate): Referrer URL, UTM parameters at signup, funnel events (signup started, first tunnel created). Used to understand how developers discover us. Not sold to third parties.

What we do NOT collect

• The content of your tunneled traffic — data travels peer-to-peer, encrypted with WireGuard, not through our servers
• Your WireGuard private key
• Behavioral profiling for advertising

How we use data

• Operate the service (enrollment, broker, quota enforcement)
• Billing via Stripe (F0-Plus)
• Abuse detection (rate limiting, PhishTank check at signup)
• Product improvement (aggregate funnel analytics only)

Data sharing

Stripe: Billing data for paid plans. Stripe's privacy policy applies.

Infrastructure providers: Cloud hosting for control plane. Data processed under DPA agreements.

We do not sell your data. We do not share your data with advertisers.

Data retention

Account data: retained until account deletion. Audit logs: 1 year (F0/F0-Plus), 7 years (Enterprise — Phase 2+). Usage metrics: 90-day rolling window for F0.

Your rights

You may request export or deletion of your account data at any time by emailing hello@ankayma.com or using in-app account deletion.

Cookies

The mobile/desktop app uses no cookies. The web admin console uses a single session cookie. The marketing site (this page) uses no tracking cookies.

Security

Data in transit is encrypted with TLS. Server-side data at rest is encrypted. See Honest Limits for the current state of independent security verification.

Changes

Material changes will be communicated via the email on your account with 14 days notice.