Supermail Privacy Policy

Supermail is a desktop mail client for Gmail that I, Alexander Lokasasmita, built for myself and my family. It isn't a public service and it isn't for sale. This policy explains what Supermail accesses in your Google Account, where that data is kept, and how to delete it.

What Supermail accesses

When you sign in with Google, Supermail asks for access to:

• Gmail (gmail.modify): to read your mail, organise it with labels, archiving and trash, and send the messages you write.
• Google Calendar (calendar.readonly): to show your calendar beside your mail. This is read only. Supermail never creates, changes or deletes events.
• Your basic profile: your name, email address and profile picture, to show which account you're using.

Supermail uses this data only to provide its features to you.

Where your data is kept

On your computer

Supermail stores your mail and calendar data on your own computer. Your Google sign-in token is stored there too, encrypted, with its key in the macOS Keychain.

Remote images in a message come from wherever the sender put them, as they do in any mail app. Supermail fetches them without cookies or a referrer, and you can turn this off in Settings → Load remote images.

On the server, if you turn on server features

Some features keep working while your computer is closed: reminders, send later, and automatic labels for new mail. These run on a server I operate on Cloudflare (Workers and Durable Objects), and only when you turn them on. For each account it acts for, the server holds:

• a Google sign-in token, so it can act on that account;
• your reminders;
• messages you've scheduled to send later, until they're sent;
• your auto-label rules.

To label new mail, the server reads the sender, subject and a short snippet of each message and sends them to Cloudflare Workers AI to classify. It doesn't keep them once the message is labelled.

Each person's data is kept separate from everyone else's.

What Supermail never does

• It doesn't sell your data, or share it with anyone beyond Google and the Cloudflare services described above.
• It doesn't use your data for advertising, and runs no analytics on your mail.
• No human reads your mail.

Supermail's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Deleting your data

Signing out of an account in Supermail revokes its Google access and deletes that account's data, both on your computer and on the server.

You can also remove Supermail's access at any time at myaccount.google.com/permissions. That stops Supermail reaching your Google Account. Signing out in Supermail is what deletes the data it already holds.

Changes

If Supermail starts handling your data differently, I'll update this page and its "Last updated" date.

Contact

For questions about this policy or your data, email me at bryan.lokasasmita@gmail.com.