TungsPrivacy
Last updated 22 September 2026. Tungs is made by Manifest Automation, Inc.
Tungs sits in the middle of your phone calls, so the only question that really matters is what happens to what you say. This page answers that first, in plain terms, and then covers everything else.
The short version
- We do not store your call audio. Not on disk, not in a database, not in a log. It is forwarded as it arrives and then it is gone.
- We do not store your transcripts. They exist on your Mac, in the app window, while the call is happening.
- We do not use anything you say to train anything. We have no model of our own, and we send nothing to anyone for training.
- Recordings never leave your Mac. They are only made when you press record, and they are written to a folder you can open, move or delete.
- On a license, your audio never touches our servers at all. It goes from your Mac straight to OpenAI on your own key.
Where your call audio actually goes
There are two paths, and which one you are on depends on what you bought.
Your speech is streamed to our relay, which forwards it to OpenAI's Realtime API and streams the translated speech back. The relay is a Cloudflare Worker that holds each chunk of audio in memory only as long as it takes to pass it on. It writes no audio to disk and keeps no copy. What it does record is the shape of the session and nothing about its content: a random session identifier, the account it belongs to, how long it ran, which languages you chose, and connection events such as a dropped socket. We meter the seconds so we know how many minutes you have left.
There is no relay. The app opens a connection from your Mac directly to api.openai.com with your key. Your call audio never reaches any machine of ours, and we could not see it if we wanted to. Your API key is kept in your Mac's Keychain and is never sent to us.
On both paths the audio is processed by OpenAI to produce the translation. That processing is governed by OpenAI's own terms and privacy policy; OpenAI states that data submitted through its API is not used to train its models by default. We link their documents rather than paraphrase them: OpenAI privacy policy and terms of use.
Recordings
Tungs can record a call as a stereo file, with the other person's translated voice on one channel and yours on the other. This happens only when you press record, never automatically. The file is written to ~/Music/Tungs Recordings on your own Mac. It is never uploaded, and we have no way to reach it. Deleting it is deleting it.
Recording a conversation is your decision and your responsibility. Laws on recording calls differ by country and by state, and some require the consent of everyone on the call. Please make sure you have it.
What the app sends us
The Mac app reports how it is being used, so we can tell whether it works. Every message carries:
- a random install identifier, generated on first launch and stored on your Mac — it is not derived from your hardware, your name or your account;
- the Tungs version and build, your macOS version, and your system language;
- which screen you are on, and events such as a session starting or ending, the driver installing, or an error occurring.
Error messages are truncated and anything resembling an API key is masked before it is sent. What is never included: audio, transcripts, the languages of any particular sentence, your contacts, your files, or anything typed into the app other than the fact that a field was filled in.
The app also asks tungs.ai whether a newer version exists. That request carries nothing but the app's version.
What the website collects
When you visit tungs.ai we set a cookie called tungs_vid, which is a random identifier that lets us count returning visitors rather than counting the same person twice. It lasts two years and it is not readable by scripts. Choosing a language in the footer sets tungs_lang so the site remembers.
We record page views, the page you arrived from, your country and city as Cloudflare reports them, and your browser and operating system. Your IP address is used to derive a salted hash and is not stored in its raw form.
We run two advertising measurement pixels, from OpenAI and from Meta, which set their own cookies and report to those companies that a visit, download or purchase happened. They are subject to those companies' privacy policies. If you would rather not be measured this way, a content blocker or your browser's tracking protection will stop them, and the site works exactly the same without them.
The site and its data run on Cloudflare.
Buying
Payments are handled by Stripe. Your card number goes to Stripe and never to us; we never see it and never hold it. From a purchase we keep your email address, the Stripe customer identifier, what you bought, how many minutes remain, and the account code that lets you restore the purchase on another Mac.
We use your email address to send you what you bought, to send your account code, and to answer you if you write to us. We do not sell it, and we do not send marketing to it.
Keeping and deleting
Call audio and transcripts are not kept at all, so there is nothing to delete. Session metadata and website analytics are kept while they are useful for understanding whether the product works. Purchase records are kept as long as we need them for accounts and tax.
Write to [email protected] and we will tell you what we hold about you, correct it, or delete it. A real person reads that address. If you are in the EU, the UK or California, you have rights over your data under local law, and asking us by email is enough to use them — we will not make you fill in a form.
Children
Tungs is not designed for or directed at children under 13, and we do not knowingly collect anything from them.
Changes
If this page changes in a way that affects what happens to your call audio, we will say so at the top rather than quietly edit it. The date above tells you when it was last touched.
Contact
Manifest Automation, Inc. — [email protected]. Questions about any of this are welcome, including the awkward ones.