What we collect and why
Plain-language description of the beta. This is not a legal privacy policy; one will be written before public launch.
What is stored
Your account
Email address, password (hashed by Supabase Auth), first name
Kept: Until you delete your account
Email connections
Provider, address, connection status, and the encrypted credential (AES-256-GCM): an access token for Gmail and Outlook, or for iCloud Mail the app-specific password you created at Apple
Kept: Until you disconnect, when the credential is deleted; tokens are revoked with the provider when possible, and you can revoke an iCloud app-specific password at Apple at any time
Analysed emails
Sender, subject, date, link to the original, a preview of up to 300 characters, the AI priority, reason and summary
Kept: Your choice: 7–90 days (30 by default), then deleted automatically
Full email text
Read in memory to classify the message, sent to the AI service, then discarded
Kept: Never stored
Your rules
VIP senders, alert words, alert preferences, quiet hours, AI preferences
Kept: Until you delete them or your account
Phones and devices
Device name and type, the browser push address and its encryption keys, delivery status
Kept: Until you remove the device or it stops working
Alert history and audit log
Which alerts were sent to which device, and account events (connected, disconnected…)
Kept: Until you delete your account
Who processes it
- Supabase (database and sign-in) stores the data above. Every row belongs to one person and database rules stop anyone else reading it.
- Anthropic (Claude) receives the text of each new email to classify it, when AI analysis is turned on. The email is treated as untrusted data and the AI can only return a label — it cannot take actions.
- Google / Microsoft provide your mail through their official, read-only connections that you approve on their own sign-in pages.
- Apple (iCloud Mail) has no such sign-in for mail, so iCloud is read over an encrypted mail connection using an app-specific password that you create at Apple. That kind of password is not limited to reading by Apple, so the read-only limit is enforced by this app: it only opens your inbox in read-only mode.
- Apple / Google push services deliver phone alerts. Alerts are end-to-end encrypted to your device; these services cannot read them.
What we never do
- Ask for or store your main email or Apple Account password. (iCloud Mail uses a separate, revocable app-specific password, stored encrypted.)
- Send, delete, reply to, or change any email. Access is read-only.
- Make payments, cancel appointments or take any action for you.
- Sell your data or use it for advertising.
Your controls
Disconnect an email account (Email tab) to revoke access and delete everything analysed from it. Remove a device (Phones tab). Delete your account (Settings) to permanently erase all of your data.