Zmail privacy policy
The short version
Zmail is an app that runs on your computer. It has no server of ours behind it. Your mail goes from your mail provider to your computer and stays there. We never receive it, so we cannot read it, sell it or share it.
What Zmail accesses
When you add an account, Zmail connects to that account's mail server (for Gmail, imap.gmail.com) and reads your messages and folders so that it can show them to you. For Google accounts it asks for the Google permission https://mail.google.com/, which is the permission Google requires for IMAP access. Zmail uses it to read mail, mark messages read or unread, archive them, and move them between folders. Zmail never sends, replies to or deletes mail.
Where your data is kept
- Mail and statistics are stored in a database on your computer, in the
Zmailfolder of your user Application Support directory. - Passwords and Google sign-in tokens are stored in the macOS keychain, not in that database.
- Zmail has no analytics, no advertising, no crash reporting and no accounts of its own. It connects to the mail servers you set up, to Google's sign-in service for Google sign-in, and to the web addresses of images inside a message when you open it (see below). If you turn on the local model for hiding sensitive details, it also connects once to huggingface.co (or hf-mirror.com) to download the model's files. That request carries no mail.
Images in mail
When you open a message, Zmail loads the images in it from the addresses the sender wrote, as most mail apps do. The servers hosting those images see your IP address and the time, so the sender can tell the message was opened. A message with HTML is shown as its sender made it, in a separate web view that runs no scripts and opens no frames or forms, and it may include tiny tracking images. Zmail sends no mail content or account details with these requests.
Google user data
Zmail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- Zmail uses Google data only to provide the mail features you see in the app. It does not use it for advertising, and does not sell it or transfer it to data brokers or other third parties.
- Zmail does not use Google data to develop, improve or train generalized artificial intelligence or machine learning models.
- No person reads your Google data. It is not sent to us.
- Google data is stored only on your computer.
Hiding sensitive details
Zmail can hide sensitive details in its window, where they show as blurred text, and in what agents read, where they are replaced by labeled placeholders. Patterns on your computer find email addresses, phone numbers, bank cards, ID numbers, verification codes, passwords, keys, salaries, amounts and labeled addresses. An optional model, AstrLink Guard (Apache-2.0, by QuantumNous, read by code adapted from magpie), finds names and addresses; it runs on your computer, reads mail there and sends nothing out. Hiding is off until you turn it on in the window; the setting for agents is in the Statistics page. The model is used only while hiding is on. This is a convenience for what you see and what agents read. It does not protect against a program that reads Zmail's database or files directly.
Reporting a problem
The feedback sheet in Zmail opens a new GitHub issue with a draft filled in. You edit and submit it yourself; Zmail uploads nothing. The sheet can also polish your note with a language model. Nothing is sent until you click "AI 润色", and only the text in that box goes, with email addresses, phone numbers and similar values replaced by placeholders first. By default the text goes to Agnes AI; you can point Zmail at another OpenAI-compatible service, or none, in the sheet's model settings. No mail, account detail or Google data is part of it.
AI agents you connect
Zmail can let AI agents that you set up work on your mail. This is off until you connect an agent. An agent works through zmail commands that it runs on your own computer (search, read, mark read, archive, move). Zmail runs no background service, opens no port and holds no token for agents.
Mail an agent reads leaves Zmail only because you connected that agent, and it goes to the agent you chose. What that agent does with the mail is governed by its own terms and settings, which are yours to review. Zmail does not send mail content to any agent by itself. Messages from other people are untrusted content: instructions written inside an email are not instructions from you.
Your choices
- Stop access: remove the account in Zmail (
zmail account remove --email [email protected]). Zmail forgets the stored password or token. - Revoke Google access: remove Zmail at myaccount.google.com/permissions.
- Delete local data: quit Zmail and delete its
Zmailfolder in your Application Support directory. Mail on your mail provider's server is not changed by Zmail removing its copy. - Disconnect agents: stop letting the agent run
zmailcommands, and remove Zmail's instructions (zmail skill) from the agent.
Children
Zmail is not directed at children.
Changes and contact
If this policy changes, the new version will be published on this page with a new effective date. For questions, open an issue at github.com/monoedge-labs/zmail. Please do not put private information in a public issue.