Privacy policy

Effective November 4, 2026

Email Manager is a private email sorting tool used by two people in one household. It isn't offered to the public. This page explains what it collects, what it does with it, who else sees it, and how to remove it.

Who can use it

Only Google accounts on the app's allowlist can sign in. Anyone else sees a "not allowed" page, and no account is created for them. The app runs on its owner's own hardware and can be reached only from the owner's private network.

What we collect

When you sign in

Signing in with Google gives the app your name, email address, profile picture link and Google account ID. Nothing more: signing in grants no access to your mail, and the tokens Google returns at sign-in are thrown away. While you're signed in, the app keeps a session record with your IP address and browser user agent.

When you connect a mailbox

• Gmail: you approve access on Google's own permission screen. The app asks for two permissions. gmail.modify lets it read new messages, add labels, and send an unsubscribe email from your address when you ask it to. gmail.settings.basic lets it create filters that archive mail from senders you unsubscribed from. The app stores the token Google issues so it can keep syncing.
• iCloud Mail: you give the app an app-specific password, which you create at account.apple.com. Apple lets such a password reach iCloud mail, contacts and calendars; Email Manager uses it only for mail.

The app also stores the mailbox's address and its sync status.

For each message

Email Manager keeps a small snapshot of each new message, just enough to sort it and to unsubscribe:

• the text you'd see when reading it, with hidden text, quoted replies, signatures and footers removed, and cut off at a fixed length
• the subject, and the sender's name and address
• when it arrived
• a few technical header values: the sender's unsubscribe link or address, the mailing list ID, whether it's an automatic message, and whether the sender's digital signature checks out

It doesn't keep the original message, its formatting, its recipients, its attachments, or its message and conversation IDs.

What you create

The labels you write, with every earlier version of them; the sorting results for each message; and a record of what the app changed in your mailbox and why.

How it's used

Only to give you the app's features: sorting your mail, labeling it in your mailbox, showing what's important, and unsubscribing when you ask. Your data is never sold, never used for advertising, and never used to decide credit or anything like it.

AI sorting with Jev by TypeSafe

To sort a message, Email Manager sends its snapshot (sender, subject, cleaned text and the unsubscribe and mailing-list headers) along with your label definitions to Jev, an AI model run by TypeSafe. Jev answers with a likelihood from 0 to 1 for each label. The app stores those answers, plus which model gave them and what the request cost.

• Email Manager doesn't use your mail to train, fine-tune or improve any AI model, its own or anyone else's.
• TypeSafe's privacy policy says it won't train or fine-tune models on what it's sent, and won't disclose it to anyone but its own service providers. It doesn't give a fixed period for how long it keeps requests.

Who else sees your data

• TypeSafe, as described above.
• Google and Apple, who already hold your mailbox. The app reads from and writes to it through them.
• Senders you unsubscribe from. When you ask to unsubscribe, the app contacts the sender the way their message asks: a request to their unsubscribe link, or an email from your address.
• Cloudflare stores the app's off-site backups, encrypted before they leave the owner's hardware. Cloudflare can't read them.

No one else. If you share a mailbox with the other user, they connect it separately and keep their own copy and their own labels; neither of you can see the other's labels or results. If you add the other user to one of your workspaces, they can see its mailboxes and message snapshots, but still not your labels or results. Actions that change the whole mailbox, such as unsubscribing or adding a filter, affect everyone who uses it, and the app warns you before you confirm one.

The app's owner runs the server. No one reads your messages there except when you ask for help with a problem, for security, or when the law requires it.

How it's protected

• Everything is stored on the owner's hardware, which isn't reachable from the public internet.
• Mailbox passwords and tokens are encrypted (AES-256-GCM) with keys kept outside the database, so a copy of the database alone can't open them.
• Each workspace's data is separated in the database itself, not just by the app's code.
• Backups are encrypted before they're sent off-site.

How long it's kept, and how to remove it

• Disconnect a mailbox in the app to delete it there, along with its stored password or token, every message snapshot from it, and their sorting results.
• Revoke Gmail access at any time at myaccount.google.com/connections. The app loses access at once and marks the mailbox as needing to reconnect. Do this as well as disconnecting if you want Google's grant gone.
• Revoke iCloud access by removing the app-specific password at account.apple.com, under Sign-In and Security, then App-Specific Passwords.
• Ask for your account to be removed by writing to the address below. Removing it deletes your sign-in record, sessions, workspace memberships, labels, mailboxes and everything synced from them.

Otherwise, data is kept while your mailbox stays connected. Deleted data can remain in encrypted backups until they age out.

Google API Services

Email Manager's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Changes

If this policy changes, the new version will be posted here with a new effective date, and both users will be told before the change applies to them.

Contact

Questions or requests: privacy@connertechnology.io