Does Tuta train on your data?
Tuta's privacy statement says the operating company has no access to the unencrypted data at all — a statement about what is reachable, not a promise about what it chooses to do.
Your content is not readable to them
"Tutao GmbH has no access to the unencrypted data."
- 5 Aug 2026
- 5 Oct 2026
- All plans
- global
- Internet Archive copy
- 08E09E7F…892C
How we read it: The sentence before the quoted one sets it up: "All user data is encrypted in a way that it is only accessible for the user and their communication partners." The policy never mentions training, machine learning or AI in any form — as with Signal, that silence is not what earns the grade; the incapacity is. One honest caveat the same document supplies: mail arriving from outside Tuta is not encrypted in transit, and "if unencrypted emails are sent or received by Tuta servers, they are encrypted for the user before they are stored" — so plaintext does cross their servers on the way in. Tuta does not claim to read it.
What each plan can refuse
The same questions, asked of every plan we could identify. Every cell comes from a quoted clause or a documented search - see the evidence above.
- Nothing to opt out of
- Not stated
- 5 / 100
- Not stated
- No
How to opt out of Tuta AI training
Plan by plan, from what Tuta's own policy says about refusing. Where it publishes the steps, they're listed here with the limits they carry. Where there's nothing to switch off, or nothing graded, this says so instead of inventing a menu path.
All plans
There is nothing to opt out of. Tuta's own policy says it can't reach the content, so training on it isn't something a setting controls.
What this policy has done since we started watching
The record starts here. Tuta's policy was first captured on 5 Aug 2026, and there's no earlier copy to compare it against, so this verdict has no history behind it yet. From now on every re-read is diffed against that copy, and anything that moves appears here.
Everything we read
Vendor response
We wrote to Tuta on 27 Aug 2026, quoting the clauses above and inviting a correction. Nothing has come back. That's published because a company declining to comment on its own policy is something a reader should know, and because the invitation should be on the record whether or not it's taken up. Any reply goes here, word for word.
Report a wrong clause