Privacy Policy

Last updated: 4 August 2026

This Privacy Policy explains how Tenka Cloud (“Tenka”, “we”, “us”) collects and uses personal data across our services: the website and dashboard at tenka.cloud, our API, the Tenka Approver application (our login-approval app for web, iOS and Android), and our optional ChatGPT assistant.

Tenka Cloud is a platform-as-a-service operated from Sweden (EU). We are the data controller for the personal data described here. For any privacy question or request, contact us at jon@tenka.se.

1. Personal data we collect

Email address — required to create your account and to send verification and sign-in (magic) links.
Name — only if you choose to provide it, used to personalise emails and your account.
Account & usage data — the servers/deployments you create, billing records, and basic technical logs (e.g. IP address, timestamps, request metadata) needed to operate, secure, and support the service.
Approver app & device data — when you set up the Tenka Approver, we store a push-notification token (issued by your browser’s or device’s push service) and a coarse device platform label (e.g. “iOS”), used solely to deliver and process your login-approval prompts.
AI usage — if you use our built-in AI proxy, your prompts and responses are relayed to the AI provider to fulfil your request, and we record token/usage counts for metering and billing.
Payment data — if you make a payment, it is handled by Stripe; we do not store full card numbers.

2. What the Approver app does not collect

The Tenka Approver is a login-approval tool. It does not collect your location, GPS, cell-tower/mast data, contacts, photos, or device sensors, and it contains no advertising, analytics, or third-party tracking. The only device information it sends is the push token and platform label above, the numbers you tap to approve a login, and — inherent to any internet request — your IP address and browser/OS version.

3. How we use your data

To create, verify, and secure your Tenka Cloud account and sign-ins (including approver-based and magic-link authentication).
To send transactional email — verification links, sign-in links, and service notices.
To provide, operate, meter, bill, and support the platform.
To detect and prevent abuse and to keep the service secure.
To meet legal, accounting, and tax obligations.

Our legal bases (GDPR Art. 6) are: performance of a contract with you, our legitimate interest in operating and securing the service, and compliance with legal obligations.

4. Who processes your data

We use the following service providers (processors), only as needed to run the service:

Anthropic — powers the built-in AI proxy (Claude); your AI prompts and responses are processed to fulfil your requests.
Mistral AI (EU) — optional EU-hosted AI proxy, where you choose it.
Apple Push Notification service, Google (FCM), and browser push services — deliver Tenka Approver notifications to your device.
Microsoft 365 — delivers our outbound email (verification and sign-in links, notices).
Hetzner (EU) and Amazon Web Services (AWS) — host the platform and the servers you deploy.
Stripe — processes payments; we do not store full card numbers.
OpenAI — only if you use our ChatGPT assistant, your messages there are processed by OpenAI under their own policy.

We do not sell your personal data, and we share it only with the processors above as needed to run the service or where required by law.

5. Data retention

Verification and sign-in tokens are short-lived and single-use (typically 15 minutes to 24 hours). Approver pairing codes are single-use and expire within minutes. If you never verify your email, the inert account record may be removed during routine clean-up. You can remove a paired approver device at any time from the dashboard, which deletes its token and push subscription. Active account and billing data is retained for as long as you have an account and as required by applicable law, then deleted or anonymised.

6. Cookies

The Tenka Cloud dashboard uses a single essential session cookie to keep you signed in after you log in. We do not use advertising or third-party tracking cookies.

7. Your rights

Subject to applicable law (including the EU GDPR), you may request access to, correction of, or deletion of your personal data, and may object to or restrict certain processing, and request data portability. To exercise these rights, email jon@tenka.se. You also have the right to lodge a complaint with your local data protection authority (in Sweden, the Integritetsskyddsmyndigheten, IMY).

8. International transfers

Some processors (such as OpenAI, Anthropic, and AWS) may process data outside the EU/EEA. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Where possible we prefer EU-hosted options (e.g. Hetzner, Microsoft 365 EU, Mistral).

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above.

10. Contact

Tenka Cloud
Email: jon@tenka.se
Web: https://tenka.cloud