True Link privacy notice
Effective October 24, 2026 · True Link 1.1.21
This notice describes the installed True Link apps for Android, iPhone, and Mac. For browsing this website or contacting support, see the Sunimod website privacy policy.
True Link connects your Mac to a phone that forwards supported internet traffic. Pairing and normal forwarding do not require a True Link online account or a Sunimod-operated relay. The current apps do not include advertising analytics or an automatic developer crash-report upload service. Operating systems and optional third-party services have their own data practices.
Current availability: True Link is in private preview. Public downloads are not available yet. The iPhone app is a development preview tested in Simulator; App Store availability has not been announced.
Information stored on your devices
True Link keeps information needed to reconnect, display connection status, and troubleshoot problems:
- Settings and paired devices: device names and identifiers, pairing credentials or their verification hashes, certificate identities, pairing and last-seen times, and connection preferences. The Mac can also remember a phone’s local address and an Android USB device alias.
- Connection status: available network type, radio label, battery level, and, where available, carrier name. The apps exchange status and traffic counters to display the connection.
- Usage measurements: phone monthly and all-time byte totals, and local traffic history containing time buckets, sent/received byte counts, and measured duration. The history database does not contain destination names or request contents. Its rolling history is designed for 30 days; old rows are removed when the database is updated, so an unused installation may retain older rows until it runs again. Monthly and all-time counters are separate from that history.
- Mac per-app usage: the Mac can use operating-system network measurements to display application names and byte counts for the current session. Those per-app entries are not written into the aggregate traffic-history database.
- Diagnostics: local logs record connection events, errors, and performance measurements. They can include device names, local connection details, file paths, and optional VPN-engine messages. Treat a copied log as potentially sensitive. App-managed logs are size-limited rather than subject to a guaranteed deletion date. Some messages also go to the operating system’s logs.
- Optional credentials: imported personal Gateway profiles and Mac VPN configurations or credentials are saved so the selected service can reconnect. Apple apps use Keychain for these secrets. Android encrypts its saved Gateway profile using a key held in Android Keystore; its endpoint is also stored as a setting.
True Link processes forwarded traffic in memory to deliver it. The usage-history feature records counts and timing rather than a browsing history or packet-content archive. The apps do not automatically upload their saved usage history or local diagnostic logs to Sunimod. If you send a diagnostic report to support, the information you choose to send becomes part of that correspondence.
Connections to other services
Depending on the features you use, these connections take place:
| Service or recipient | Why it receives a connection | Information involved |
|---|---|---|
| The websites and services requested by your Mac’s applications | Delivering your traffic | The destination receives the application’s request and the internet source address of the selected connection. The application’s own encryption and privacy settings still matter. |
Cloudflare’s public DNS-over-TLS service, using the identity one.one.one.one | Resolving supported ordinary DNS requests and relay hostnames | Cloudflare receives the DNS questions it resolves and the connection’s source address. TLS encrypts the path to the resolver; it does not hide the questions from Cloudflare. |
Google’s www.gstatic.com/generate_204, with Cloudflare’s cp.cloudflare.com/generate_204 as a fallback | Automatic checks that internet access works through the active Mac tunnel | These specific HTTPS requests include a fresh random value to avoid cached results. They contain no cookies, pairing credentials, or stable app/device identifier. The endpoint still receives the request and source address. Checks repeat more often while a dashboard is visible. |
Cloudflare’s stun.cloudflare.com on UDP port 3478 | An internet-quality test you request | The test sends 20 small packets containing random transaction identifiers. The endpoint receives the packets and source address, without pairing credentials. |
| A VPN provider you configure on the Mac | An optional additional VPN connection | The provider receives the connection and traffic carried through its service, subject to the applications’ own encryption. The NordVPN profile feature also requests public country/server information from api.nordvpn.com and configurations from downloads.nordcdn.com; a server request can include your selected country or city. |
| Your optional personal Gateway server | Forwarding through a server you control | The server receives an authenticated connection and forwards destinations and traffic. Its operator and hosting provider may observe connection metadata; unencrypted application content can also be visible at the server. |
Ordinary supported TCP/UDP port-53 DNS is handled by the encrypted resolver without a plaintext fallback. A small in-memory cache can retain eligible answers up to their DNS expiry, capped at 30 minutes; it is cleared on relevant network changes or when sharing stops. Applications using their own encrypted DNS continue to use their chosen service.
The optional Gateway is a personal, self-hosted feature. It is not a hosted Sunimod service offered to paid clients. Its connection is authenticated against the imported profile, and a Gateway failure does not silently switch forwarding to Direct mode. Resolver TLS remains inside the Gateway connection. This changes who can observe traffic; it does not make the connection anonymous. Your server, hosting provider, DNS provider, carrier, and destination services may have their own logs and retention policies.
For the providers’ own privacy information, see Cloudflare’s public DNS privacy notice and Google’s privacy policy. Optional VPN and hosting providers publish their own terms.
Your local network and paired devices
The current local Wi-Fi connection uses TLS and requires pairing before traffic can be forwarded. Public discovery is enabled during the pairing window; saved devices use authenticated discovery afterward. Pairing does not make a running phone listener invisible to the local network.
A device that can reach the local listener can receive basic identity and status information before it pairs, such as the phone name, certificate identity, hosting status, and available radio, carrier, or battery information. The iPhone listener also includes aggregate connection and traffic counters in this initial status. Local network observers can still see network addresses, ports, connection timing, and traffic volume.
The local encrypted connection does not replace HTTPS or other end-to-end protection used by applications. In Direct mode, traffic leaves the phone toward its destination; a plaintext application protocol remains plaintext on that onward connection.
Permissions and system integration
On Android, network access supports forwarding and discovery. A foreground service, notification, and wake-lock support keep sharing available while it runs. Optional phone-state permission improves the radio label, such as LTE or 5G; this feature is not used to read messages, contacts, or call contents.
On iPhone, local-network access supports the Mac connection. Background hosting uses an iOS Network Extension configuration. Its placeholder route is not intended to capture the iPhone’s ordinary internet traffic.
On Mac, local-network access supports phone discovery and connection. The app’s privileged helper manages the tunnel, routing, and connection protection. Optional per-app usage uses local operating-system process and network information.
Android is configured to disable app backup and exclude its files and preferences from backup/device transfer. Apple secrets described above use device-only Keychain storage. Other files, settings, operating-system logs, or copies you make can be affected by your device’s backup and management settings; these app settings are not a promise that no external copy can exist.
Your controls
Stop sharing to end forwarding. Use the phone’s paired-Mac controls to revoke a Mac, and the Mac’s Forget controls to remove its saved phone pairing. While sharing is stopped, you can remove a saved Gateway profile. Deleting a Mac VPN profile removes its app-managed configuration and saved credentials.
The phone apps provide a control to clear their app-managed diagnostic log. This does not erase operating-system logs or copies already shared. Resetting the monthly usage counter does not reset all-time totals or erase traffic history.
Before removing the Mac app, use Prepare to remove True Link to restore regular internet access and remove the helper. That action deliberately keeps pairings and throughput history. Uninstalling an app alone should not be treated as confirmation that Keychain items, retained settings, backups, or previously shared diagnostics have been erased. Contact support for help identifying remaining app data.
Contact
For questions about True Link privacy or app data, email admin@sunimod.com or use the Sunimod contact page. Do not include pairing codes, Gateway profiles, VPN passwords, or private keys in a support message.
