Legal

Privacy policy

Last updated October 14, 2026

The short version

Keymail runs on your Mac and talks directly to your mail provider. There is no Keymail server. We never receive, store or see your email, contacts or account credentials, and the app has no analytics, ads or tracking.

What the app accesses

• Gmail: when you sign in, Google asks you to grant Keymail access to your mail (gmail.modify) and your basic Gmail settings such as signatures (gmail.settings.basic). Keymail uses that access only to show your mail and do what you ask: read, send, archive, label, snooze, schedule and unsubscribe. Sign-in happens in your browser, so Keymail never sees your Google password.
• iCloud Mail (optional): uses an app-specific password you create at Apple, stored in the macOS Keychain, to connect to Apple's mail servers.
• Calendar (optional): if you allow it, Keymail reads and adds events in the calendars already set up on your Mac, through macOS. Calendar data stays on your Mac.

Where your data lives

• Mail cache, settings, snippets and rules: files on your Mac, encrypted with a key kept in your Keychain and readable only by your user account.
• Passwords and sign-in tokens: the macOS Keychain.

AI features

AI features run only when you ask for one, such as a draft, summary or instant reply. They use an AI command-line tool you have already installed and signed in to on your Mac (Claude Code, Codex or Gemini CLI). When you use one, Keymail sends the email text it needs to that tool, which sends it to its maker (Anthropic, OpenAI or Google) under your own account and that company's privacy terms. Keymail never sends your mail to an AI service on its own.

What we don't do

• No analytics, telemetry or crash reporting sent to us.
• No read receipts or tracking pixels in mail you send.
• No selling, sharing or transferring your data to anyone. No ads, and we don't use your data to train AI models.

Network connections

• Your mail providers: Google and, if you add it, Apple.
• Updates: the app checks GitHub for new versions. The check downloads a public file and sends no information about you, your mail or your Mac beyond a normal web request, including your IP address, which GitHub handles under its privacy statement.
• Remote images: by default, emails load images from senders' servers, which can tell a sender when you opened a message. Turn off "Load remote images" in Settings → General to block all outside content.
• Unsubscribe: one-key unsubscribe contacts the address the sender provides for it.

This website is hosted on Cloudflare Pages and sets no cookies. The release notes page loads data from GitHub's public API in your browser.

Google API Services

Keymail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing your data

Signing out of an account in Keymail deletes everything the app stored for it: its password or tokens in the Keychain, its cached mail, and its snoozes, reminders, scheduled sends and signatures. Unsent scheduled mail is discarded, not sent. To revoke Keymail's Google access, visit your Google Account permissions. To remove everything Keymail stored, delete the app and the folder ~/Library/Application Support/Email.

Changes and contact

If this policy changes, the new version will appear on this page with a new date. Questions? Email [email protected].