Your mail is none of our business.

We collect as little as we can: only what we need to run this website and your licence.

• Your email address, if you apply for the beta or start a trial - to send you your licence key and to recognise your trial.
• With a beta application, the IP address and browser details (user agent) it was sent from - to help us spot automated sign-ups.
• Your licence key, when the app checks with our licence server that it is valid.
• Feedback you choose to send from the app: the text you write, linked to your licence by a one-way hash of the key, never the key itself.
• Two cookies on this website, one to keep your session and one to protect its forms. No tracking cookies. Your session is kept on our server along with your IP address and browser details.

Your mail, calendars and contacts never reach our servers, and neither do your passwords or sign-in tokens: nMail keeps those in your operating system's secure credential store, not in its own files.

There are no analytics, ads, tracking pixels or crash reporters - not in the app, not on this website. So none of this reaches us:

• Your messages and attachments
• Your calendars and contacts
• Your passwords and sign-in tokens
• Who you write to, and when

nMail connects directly from your computer to each provider you add: IMAP and SMTP for mail, CalDAV and CardDAV for calendars and contacts, and Google's own APIs for your Gmail filters. There is no nMail server in between. Everything nMail downloads is stored on your computer, in nMail's own data folder.

Those connections are encrypted with TLS. For a mail server you set up yourself you can switch encryption off in the account settings; we advise against it.

Images inside an email load from the sender's servers only when you allow it: for one message, for a sender you trust, or always. Once they load, the sender can see your IP address and that you opened the message.

When you add an account on your own server, nMail asks that server - and only that server - where its calendars and contacts live.

When you sign in with Google, nMail asks for access to your Gmail, to read, send, organise and delete your mail; your Gmail filter settings, so filters you make in nMail show up in Gmail and the other way round; your Google Calendar; your Google Contacts; and your email address, to name the account.

nMail uses this data only to show it to you and to do what you ask in the app, on your computer. It is never sent to us or to anyone else, never used for advertising, never sold, never read by a person, and never used to develop, improve or train any AI or machine-learning model.

nMail plus's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can take back nMail's access whenever you like, from your Google Account. Removing the account in nMail deletes the mail nMail stored for it.

We don't sell or rent your data, and we never share it for advertising. A few services help us run this website and the licence server, and each sees only what its job needs:

• Our hosting provider, which runs this website and the licence server.
• Our email delivery provider, which sends your licence key and beta messages.
• Google Fonts, which serves this website's typeface: your browser fetches it from Google, so Google sees your IP address.

We keep your email address and licence for as long as your licence or trial is active, and the IP address and browser details sent with a beta application for as long as the application itself. Feedback is kept until we have dealt with it. Ask us, and we delete any of it.

This website's session expires after two hours without activity. Expired sessions, and the IP address and browser details stored with them, are cleared from our server regularly.

Whatever nMail stores on your computer stays there until you remove the account or delete nMail's data. We can't see it, so we can't delete it for you.

Wherever you live, you can ask us to do any of the following. Write to [email protected] and we will answer within 30 days. If you are in the EU or the UK and are not happy with our answer, you can complain to your data protection authority.

• Show you the data we hold about you
• Correct it
• Delete it
• Send it to you in a format you can take elsewhere
• Stop using it

If we change this policy, we update this page and the date at the top. If a change affects data you have already given us, we will tell you by email before it takes effect.