AI chat and API that keeps your conversations fully private
Don’t want OpenAI seeing all your conversations? We don’t either. That’s why we built Tinfoil - an AI that keeps your conversations strictly between you and the AI model, everyone else is locked out. It’s like a local AI but running in the cloud, using secure hardware. Tinfoil leverages hardware security features available on NVIDIA GPUs to deliver verifiable privacy. No pinky promises required: you can check for yourself that your conversations are end-to-end private.
Hi there! I’m Sacha, cofounder of Tinfoil. Excited to share what we’ve been building!
Tinfoil gives you a familiar AI chat(browser and iOS) and an inference API, featuring the latest open-source models like DeepSeek V4, Gemma 4, Kimi K2.6, and GLM 5.1. However, with Tinfoil all data is stored end-to-end encrypted and processed privately, even during inference.
Backstory: my cofounders and I have always been very aware of how important privacy is, especially with tools like AI chatbots that we use daily for personal discussions and to process our thoughts. We strongly believe nobody should be privy to these chats.
I did my PhD in cryptography and internet privacy, and was an early user of ChatGPT. My cofounders and I quickly realized that the amount of control we were giving up to get access to powerful AI like ChatGPT was simply unprecedented, and frankly creepy. We found ourselves hesitating when sharing certain things or wondering if our deleted conversations would end up in the next training cycle. Today, we’re all leaking our brains to AI labs. Tinfoil is the Flex Tape to stop that.
The latest NVIDIA GPUs have built-in support for secure enclaves. These are security mechanisms built into the hardware that allow running LLMs in a way that keeps data private during processing. Nobody, not even the operators of the GPUs, can see the data being processed. Secure enclaves also allow you to perform remote attestation, which means the chip can return a signed fingerprint of the code and security configuration currently running inside the enclave. This means you don’t have to take our word that your data is secure, you can actually check it yourself:
All the code running in the enclave is open source and it’s fingerprint is pinned to a transparency log, Sigstore. You can inspect this code yourself and verify that it’s secure.
When you connect to our chat or inference API, the client fetches the attestation report from the enclave it is connecting to.
The client checks that the fingerprints match. If they do, the server is running exactly the code that we claimed it would be running.
Apple, Meta and others have been using secure enclaves to build private AI for their own apps and services, but Tinfoil’s goal is to give everyone else the ability to build verifiably private AI applications with state-of-the-art open source models. We put a lot of effort into removing the friction that security & privacy tends to introduce, so we’re excited to hear what you think!
Pricing:
Chat: $20/month but you can try it out for free!
API: $5 in free credits when you sign up.
About Tinfoil on Product Hunt
“AI chat and API that keeps your conversations fully private”
Tinfoil launched on Product Hunt on April 30th, 2026 and earned 101 upvotes and 14 comments, placing #16 on the daily leaderboard. Don’t want OpenAI seeing all your conversations? We don’t either. That’s why we built Tinfoil - an AI that keeps your conversations strictly between you and the AI model, everyone else is locked out. It’s like a local AI but running in the cloud, using secure hardware. Tinfoil leverages hardware security features available on NVIDIA GPUs to deliver verifiable privacy. No pinky promises required: you can check for yourself that your conversations are end-to-end private.
On the analytics side, Tinfoil competes within Productivity, Artificial Intelligence and Encryption — topics that collectively have 1.1M followers on Product Hunt. The dashboard above tracks how Tinfoil performed against the three products that launched closest to it on the same day.
Who hunted Tinfoil?
Tinfoil was hunted by Sacha Servan-Schreiber. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
For a complete overview of Tinfoil including community comment highlights and product details, visit the product overview.
Sacha Servan-Schreiber
Hi there! I’m Sacha, cofounder of Tinfoil. Excited to share what we’ve been building!
Tinfoil gives you a familiar AI chat (browser and iOS) and an inference API, featuring the latest open-source models like DeepSeek V4, Gemma 4, Kimi K2.6, and GLM 5.1. However, with Tinfoil all data is stored end-to-end encrypted and processed privately, even during inference.
Backstory: my cofounders and I have always been very aware of how important privacy is, especially with tools like AI chatbots that we use daily for personal discussions and to process our thoughts. We strongly believe nobody should be privy to these chats.
I did my PhD in cryptography and internet privacy, and was an early user of ChatGPT. My cofounders and I quickly realized that the amount of control we were giving up to get access to powerful AI like ChatGPT was simply unprecedented, and frankly creepy. We found ourselves hesitating when sharing certain things or wondering if our deleted conversations would end up in the next training cycle. Today, we’re all leaking our brains to AI labs. Tinfoil is the Flex Tape to stop that.
The latest NVIDIA GPUs have built-in support for secure enclaves. These are security mechanisms built into the hardware that allow running LLMs in a way that keeps data private during processing. Nobody, not even the operators of the GPUs, can see the data being processed. Secure enclaves also allow you to perform remote attestation, which means the chip can return a signed fingerprint of the code and security configuration currently running inside the enclave. This means you don’t have to take our word that your data is secure, you can actually check it yourself:
All the code running in the enclave is open source and it’s fingerprint is pinned to a transparency log, Sigstore. You can inspect this code yourself and verify that it’s secure.
When you connect to our chat or inference API, the client fetches the attestation report from the enclave it is connecting to.
The client checks that the fingerprints match. If they do, the server is running exactly the code that we claimed it would be running.
This whole process happens automatically, so you always know that you are connecting to a trustworthy service. If you’re curious, you can read more about that in our docs: https://docs.tinfoil.sh/verification/verification-in-tinfoil
Apple, Meta and others have been using secure enclaves to build private AI for their own apps and services, but Tinfoil’s goal is to give everyone else the ability to build verifiably private AI applications with state-of-the-art open source models. We put a lot of effort into removing the friction that security & privacy tends to introduce, so we’re excited to hear what you think!
Pricing:
Chat: $20/month but you can try it out for free!
API: $5 in free credits when you sign up.