Don’t want OpenAI seeing all your conversations? We don’t either. That’s why we built Tinfoil - an AI that keeps your conversations strictly between you and the AI model, everyone else is locked out. It’s like a local AI but running in the cloud, using secure hardware. Tinfoil leverages hardware security features available on NVIDIA GPUs to deliver verifiable privacy. No pinky promises required: you can check for yourself that your conversations are end-to-end private.
Hi there! I’m Sacha, cofounder of Tinfoil. Excited to share what we’ve been building!
Tinfoil gives you a familiar AI chat(browser and iOS) and an inference API, featuring the latest open-source models like DeepSeek V4, Gemma 4, Kimi K2.6, and GLM 5.1. However, with Tinfoil all data is stored end-to-end encrypted and processed privately, even during inference.
Backstory: my cofounders and I have always been very aware of how important privacy is, especially with tools like AI chatbots that we use daily for personal discussions and to process our thoughts. We strongly believe nobody should be privy to these chats.
I did my PhD in cryptography and internet privacy, and was an early user of ChatGPT. My cofounders and I quickly realized that the amount of control we were giving up to get access to powerful AI like ChatGPT was simply unprecedented, and frankly creepy. We found ourselves hesitating when sharing certain things or wondering if our deleted conversations would end up in the next training cycle. Today, we’re all leaking our brains to AI labs. Tinfoil is the Flex Tape to stop that.
The latest NVIDIA GPUs have built-in support for secure enclaves. These are security mechanisms built into the hardware that allow running LLMs in a way that keeps data private during processing. Nobody, not even the operators of the GPUs, can see the data being processed. Secure enclaves also allow you to perform remote attestation, which means the chip can return a signed fingerprint of the code and security configuration currently running inside the enclave. This means you don’t have to take our word that your data is secure, you can actually check it yourself:
All the code running in the enclave is open source and it’s fingerprint is pinned to a transparency log, Sigstore. You can inspect this code yourself and verify that it’s secure.
When you connect to our chat or inference API, the client fetches the attestation report from the enclave it is connecting to.
The client checks that the fingerprints match. If they do, the server is running exactly the code that we claimed it would be running.
Apple, Meta and others have been using secure enclaves to build private AI for their own apps and services, but Tinfoil’s goal is to give everyone else the ability to build verifiably private AI applications with state-of-the-art open source models. We put a lot of effort into removing the friction that security & privacy tends to introduce, so we’re excited to hear what you think!
The NVIDIA GPU secure hardware angle is interesting. Are you using confidential computing features like TEEs (Trusted Execution Environments) on the H100s, or something else? And does the privacy model hold if someone at NVIDIA has access to firmware-level hardware behavior?
Secondly "Everyone else is locked out" — does that include Tinfoil itself? Like, can your team see conversation logs for debugging, abuse monitoring, or anything else? That's usually where the asterisk hides in these setups.
At my last employer in the nuclear space, I remember how much effort there was put into security and privacy -- those concerns definitely put a damper on AI adoption that would have otherwise accelerated development. Glad to see that there is innovation in this space so that privacy is less of a concern (and provably so).
Amazing api! Literally just works, and they really ahead of the times :)
Will be huge
we love using tinfoil!! not enough people are thinking about security, and are sending all their private data to claude and openai. tinfoil solves that! happy customer here :)
I'm building proprietary systems, and didn't want my IP sitting in a mainstream AI provider's logs or training pipeline. Tinfoil has been a huge unlock for me.
I leaned on it heavily during design and prototyping to have a strong LLM thinking partner. Tinfoil has let me keep my existing LLM workflow without running a local model that would roast my laptop.
The architecture they're using- hardware enforced privacy via secure enclaves with client-side attestation of the CPU/GPU inference server is the best approach I've seen for capable and private AI.
A few specifics:
In-session UX is comparable to mainstream non-private chat services.
Passkey/recovery flow had a couple rough edges early on, but the team is actively improving this and Sacha was super responsive to help me.
Also recommend the documentation if you're the type of person that wants a primer on secure enclaves and a detailed breakdown of their architecture. I had a fun time nerding out on it
Love this. Really thoughtful product and the verification piece is especially compelling.
One question I had: for teams or developers building on the API, where have you seen the biggest tradeoff between verifiable privacy and product usability or performance, and how have you tried to minimise that?
Feels like that balance is probably where a lot of adoption decisions get made.
About Tinfoil on Product Hunt
“AI chat and API that keeps your conversations fully private”
Tinfoil launched on Product Hunt on April 30th, 2026 and earned 101 upvotes and 14 comments, placing #16 on the daily leaderboard. Don’t want OpenAI seeing all your conversations? We don’t either. That’s why we built Tinfoil - an AI that keeps your conversations strictly between you and the AI model, everyone else is locked out. It’s like a local AI but running in the cloud, using secure hardware. Tinfoil leverages hardware security features available on NVIDIA GPUs to deliver verifiable privacy. No pinky promises required: you can check for yourself that your conversations are end-to-end private.
Tinfoil was featured in Productivity (650.8k followers), Artificial Intelligence (467.3k followers) and Encryption (669 followers) on Product Hunt. Together, these topics include over 219.9k products, making this a competitive space to launch in.
Who hunted Tinfoil?
Tinfoil was hunted by Sacha Servan-Schreiber. A “hunter” on Product Hunt is the community member who submits a product to the platform — uploading the images, the link, and tagging the makers behind it. Hunters typically write the first comment explaining why a product is worth attention, and their followers are notified the moment they post. Around 79% of featured launches on Product Hunt are self-hunted by their makers, but a well-known hunter still acts as a signal of quality to the rest of the community. See the full all-time top hunters leaderboard to discover who is shaping the Product Hunt ecosystem.
Want to see how Tinfoil stacked up against nearby launches in real time? Check out the live launch dashboard for upvote speed charts, proximity comparisons, and more analytics.
Sacha Servan-Schreiber
Hi there! I’m Sacha, cofounder of Tinfoil. Excited to share what we’ve been building!
Tinfoil gives you a familiar AI chat (browser and iOS) and an inference API, featuring the latest open-source models like DeepSeek V4, Gemma 4, Kimi K2.6, and GLM 5.1. However, with Tinfoil all data is stored end-to-end encrypted and processed privately, even during inference.
Backstory: my cofounders and I have always been very aware of how important privacy is, especially with tools like AI chatbots that we use daily for personal discussions and to process our thoughts. We strongly believe nobody should be privy to these chats.
I did my PhD in cryptography and internet privacy, and was an early user of ChatGPT. My cofounders and I quickly realized that the amount of control we were giving up to get access to powerful AI like ChatGPT was simply unprecedented, and frankly creepy. We found ourselves hesitating when sharing certain things or wondering if our deleted conversations would end up in the next training cycle. Today, we’re all leaking our brains to AI labs. Tinfoil is the Flex Tape to stop that.
The latest NVIDIA GPUs have built-in support for secure enclaves. These are security mechanisms built into the hardware that allow running LLMs in a way that keeps data private during processing. Nobody, not even the operators of the GPUs, can see the data being processed. Secure enclaves also allow you to perform remote attestation, which means the chip can return a signed fingerprint of the code and security configuration currently running inside the enclave. This means you don’t have to take our word that your data is secure, you can actually check it yourself:
All the code running in the enclave is open source and it’s fingerprint is pinned to a transparency log, Sigstore. You can inspect this code yourself and verify that it’s secure.
When you connect to our chat or inference API, the client fetches the attestation report from the enclave it is connecting to.
The client checks that the fingerprints match. If they do, the server is running exactly the code that we claimed it would be running.
This whole process happens automatically, so you always know that you are connecting to a trustworthy service. If you’re curious, you can read more about that in our docs: https://docs.tinfoil.sh/verification/verification-in-tinfoil
Apple, Meta and others have been using secure enclaves to build private AI for their own apps and services, but Tinfoil’s goal is to give everyone else the ability to build verifiably private AI applications with state-of-the-art open source models. We put a lot of effort into removing the friction that security & privacy tends to introduce, so we’re excited to hear what you think!
Pricing:
Chat: $20/month but you can try it out for free!
API: $5 in free credits when you sign up.