Privacy Policy
Last updated October 8, 2026
This policy covers the Dune desktop IDE, the Dune iOS app, Dune Cloud, and the Dune website. The short version: your code lives on your machines, or in the cloud workspaces you choose to create. The apps contain no analytics or advertising SDKs, and we collect nothing for tracking.
What the apps handle
Account information
Agent features are powered by an optional Hypery account. When you sign in, Dune receives your Hypery user ID, email address, and display name so it can show who is signed in and authorize agent requests. Sign-in uses OAuth; Dune never sees your password. Hypery's own handling of your account is governed by Hypery's privacy policy.
Authentication tokens
OAuth access and refresh tokens are stored locally on your device and are sent only to Hypery to authenticate requests. Signing out removes them.
Your code and prompts
Files you open and edit stay on the machine running Dune or your own dune-server. When you use agent features, the prompts you write and the code context you attach are sent to Hypery's AI gateway to generate responses. Nothing is sent anywhere unless you invoke the agent.
Dune Cloud workspaces and cloud agents
If you use Dune Cloud, the workspaces you create run on servers we operate. We store the files, terminal sessions, and agent history in each workspace, together with your Hypery user ID and the team you selected, so that only you can open your workspaces and usage is billed to the right team. Cloud agents run in your own cloud workspace. Their prompts and code context are sent to Hypery's AI gateway, just as for local agents. We don't read your workspace contents except where needed to operate the service, keep it secure, or meet legal obligations. Payment details are handled by Hypery and its payment processor, never by Dune.
Server addresses
The iOS app asks for the address of a dune-server you run yourself. That address is stored on your device only, so the app can reconnect. Connections to servers on your local network may use plain HTTP; use HTTPS for servers exposed beyond your network.
What we don't do
No analytics SDKs, no crash reporters, no advertising identifiers, no fingerprinting, no third-party trackers — in the desktop app, the iOS app, or this site. We do not sell, rent, or share your data. The iOS app requests no device permissions: no camera, microphone, location, contacts, or photos.
Retention and deletion
Data stored on your devices (tokens, server addresses, editor state) is yours to delete — sign out or remove the app. You can delete a single Dune Cloud workspace at any time from its menu. It is removed immediately, including its files.
You can delete your account from the iOS app (Account → Delete account) or by contacting us. Your Dune Cloud workspaces are stopped immediately and can no longer be accessed. They are retained for 30 days, so that a mistaken deletion can be reversed and records can be kept for account security and billing, and are then permanently deleted with all of their files. Your Hypery account is deleted from your account settings at hypery.ai. Hypery keeps billing and tax records for as long as the law requires, as described in its privacy policy.
Children
Dune is a developer tool and is not directed at children under 13, and we do not knowingly collect information from them.
Changes and contact
We will post any changes to this policy on this page and update the date above. Questions? Open an issue at duneyou/dune or email support@duneyou.com.