Legal

Privacy policy

Last updated October 17, 2026

Who we are

Keymail is made by Danny Chait, who is responsible for this policy. Contact: [email protected].

The short version

Keymail runs on your Mac and talks directly to your mail provider. There is no Keymail server. We never receive, store or see your email, contacts or account credentials, and the app has no analytics, ads or tracking.

What the app accesses

• Gmail: when you sign in, Google asks you to grant Keymail access to your mail (gmail.modify) your basic Gmail settings such as signatures (gmail.settings.basic), and your Google Calendar events (calendar.events). Keymail uses that access only to show your mail and do what you ask: read, send, archive, label, snooze, schedule and unsubscribe. Sign-in happens in your browser, so Keymail never sees your Google password.
• iCloud Mail (optional): uses an app-specific password you create at Apple, stored in the macOS Keychain, to connect to Apple's mail servers.
• Yahoo Mail (optional): uses an app password you create at Yahoo, stored in the macOS Keychain, to connect only to Yahoo's mail servers.
• Outlook (optional, in preview): when you sign in with a Microsoft account (Outlook.com, Hotmail or Microsoft 365), Microsoft asks you to grant Keymail access to read and send your mail, your basic profile, and your mailbox settings (Mail.ReadWrite, Mail.Send, MailboxSettings.ReadWrite, User.Read). Keymail uses that access only to show your mail and do what you ask. Sign-in happens in your browser, so Keymail never sees your Microsoft password.
• Calendar: Keymail shows your calendars next to your mail. For Google accounts it reads and changes events with the calendar.events permission. For Outlook accounts it asks once for separate calendar access (Calendars.ReadWrite); your mail keeps working if you say no. Events you create, edit, move, delete or answer go to that calendar, like any calendar app. If you allow it, Keymail also shows and edits the calendars set up on your Mac (such as iCloud), through macOS; that calendar data stays on your Mac.

Where your data lives

• Mail cache, settings, snippets and rules: files on your Mac, encrypted with a key kept in your Keychain and readable only by your user account.
• Passwords and sign-in tokens: the macOS Keychain.
• Sender logos: cached on your Mac.

AI features

AI features run only when you ask for one, such as a draft, summary or instant reply. They use an AI command-line tool you have already installed and signed in to on your Mac (Claude Code, Codex or Gemini CLI). When you use one, Keymail sends the email text it needs to that tool, which sends it to its maker (Anthropic, OpenAI or Google) under your own account and that company's privacy terms. Keymail never sends your mail to an AI service on its own, and it asks for your permission the first time it would send email text to each AI provider.

AI agents on your Mac

Agent access is off unless you turn it on in Settings. When it's on, AI agents running on your Mac (such as Claude Desktop, Claude Code, Codex or Gemini) can read and draft mail through Keymail. Organizing mail (triage) is a separate switch. An agent can never send an email by itself: every send needs your approval in Keymail. Whatever an agent reads is then handled by that agent's maker under its own terms. Settings shows a log of what agents asked for.

Send to Claude Code

If you choose Send to Claude Code on an email, Keymail opens the Claude desktop app with a prompt containing that email, in a project folder you pick. Nothing is sent until you review the prompt and press Enter in Claude. If you choose a model or effort level, Keymail saves it in that folder's .claude/settings.local.json file. From there, Anthropic handles the email under your Claude account and its privacy terms.

What we don't do

• No analytics, telemetry or crash reporting sent to us.
• No read receipts or tracking pixels in mail you send.
• No selling, sharing or transferring your data to anyone. No ads, and we don't use your data to train AI models.

Network connections

• Your mail providers: Google, and Apple, Yahoo or Microsoft if you add those accounts.
• Updates: the app checks GitHub for new versions. The check downloads a public file and sends no information about you, your mail or your Mac beyond a normal web request, including your IP address, which GitHub handles under its privacy statement.
• Remote images: blocked by default, because senders can use them to see when and where you opened an email. Click "Load images" on an email to load them once, or turn them on for all mail in Settings → General.
• Sender logos: to show a sender's logo, Keymail fetches the icon from the sender's own website, using only the domain of their address (for example, example.com). Nothing about you or the email is sent, but that website sees your IP address. Personal address domains such as gmail.com are skipped. Turn this off in Settings → General.
• Event locations: when you type a place into an event, Keymail looks it up with Apple Maps, so Apple receives what you type there.
• Unsubscribe: one-key unsubscribe contacts the address the sender provides for it.

This website is hosted on Cloudflare Pages and sets no cookies. The release notes page loads data from GitHub's public API in your browser.

Why we process data

Keymail processes your mail on your Mac because that's needed to provide the service you asked for: an email app (GDPR Article 6(1)(b)). AI features and agent access are optional and rely on your consent, which you give when you turn them on or approve sending to an AI provider. You can withdraw it any time by turning the feature off.

How long data is kept

Your data stays on your Mac until you sign out of an account or delete the app. We don't hold copies, so there's nothing for us to keep or delete on our side.

Where data is processed

Your mail providers (Google, Microsoft, Apple, Yahoo) and any AI company you choose to use may process data outside your country, under their own terms and privacy policies.

Your rights

Depending on where you live, including under the GDPR and California's CCPA, you have the right to access, correct or delete your personal data, to object to or restrict its processing, and to complain to your local data protection authority. Because your data is stored only on your Mac and with the providers you connect, you can view, correct and delete it yourself in Keymail or with those providers. For anything else, email [email protected] and we'll respond within 30 days.

Keymail does not sell or share personal information, as those terms are defined in California law.

Children

Keymail isn't intended for children under 13, or under 16 in the European Union.

Google API Services

Keymail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

Signing out of an account in Keymail deletes everything the app stored for it: its password or tokens in the Keychain, its cached mail, and its snoozes, reminders, scheduled sends and signatures. Unsent scheduled mail is discarded, not sent. To revoke Keymail's Google access, visit your Google Account permissions. For a personal Microsoft account, use Microsoft's app permissions page; for a work or school account, use My Apps or ask your IT admin. To remove everything Keymail stored, delete the app and the folders ~/Library/Application Support/Email, ~/Library/Caches/Email and ~/Library/Caches/Keymail-Logos.

Changes and contact

If this policy changes, the new version will appear on this page with a new date. Questions? Email [email protected].