Your inbox stays yours.

1. Scope and app relationship

This policy applies only to Mate Mail for Android and the services it calls for Mate Mail features. Mate Mail is a separate app from Note Mate and Calendar Mate; their separate privacy policies govern those apps. Where you choose a Note Mate family integration, the relevant content is passed to Note Mate through an Android signature-protected app connection.

Mate Mail is a productivity email client. Depending on the account and features enabled, it can display, search, compose, send, reply to, archive, mark, delete, snooze, and schedule messages; show notifications and widgets; and save selected email content to a connected family app.

2. Information processed

• Account and sign-in: email address, provider account identifier, authorization state, and account preferences. Google authorization is managed with Google services. Microsoft account features use Microsoft authorization and Microsoft Graph.
• Email: message identifiers, sender and recipient addresses, subject, timestamps, labels, snippets, message text or HTML, attachment names and metadata, and attachment files you explicitly open or download. Gmail access uses gmail.readonly to read messages, gmail.modify for actions such as archive, mark read, star, trash and snooze, and gmail.send to send mail. These Gmail scopes can access mailbox-level data, not only the message currently displayed. Outlook access requests Microsoft Graph Mail.ReadWrite and Mail.Send. The provider returns data needed for your selected operation.
• App data: folders, search/filter preferences, drafts, scheduled-send and snooze state, widget settings, notifications, and local AI chat history.
• Family integration: the note/task/event details you explicitly save or pass to Note Mate or Calendar Mate.
• Diagnostics: app and operating-system information and failure details needed to keep the app reliable. We aim not to include message content or credentials in diagnostics.

Mate Mail does not collect precise location, contacts, microphone recordings, or calendar contents through its declared Android permissions. Google classifies Gmail read/modify scopes as restricted; public release requires Google OAuth verification, and transmitting restricted-scope data to servers can require a separate security assessment. See the Gmail scope rules.

3. On-device storage and security

Mail Mate stores its working cache in private app storage. Folder lists, recently opened messages (including message bodies), and slow mailbox scans are encrypted with AES-GCM using a non-exportable Android Keystore key. Existing plaintext cache entries are encrypted when the app next reads them. Disconnecting an account clears the mailbox cache and its cache key. Android app sandboxing and disabled Android backup add protection, but a compromised or unlocked device can still expose displayed content.

Google authorization tokens are managed by Google Play services. Microsoft tokens, where used, are stored in encrypted app preferences. The app does not store your mailbox password. Network requests use HTTPS. No security control can guarantee protection from every device, provider, or network threat.

4. When information leaves your device

• Email providers: requests to fetch, search, send, change, or delete mail go to the provider you connect (such as Google Gmail or Microsoft Graph). Sending mail delivers its contents to the recipients you specify.
• Mate AI: if you submit a question or use a feature that invokes AI, the prompt and relevant context selected by that feature (which may include email text and metadata) is sent over HTTPS to the Mate AI Cloudflare Worker. The Worker authenticates your app account and forwards the request to the configured model provider, such as Groq or OpenRouter. Those providers process the request under their own terms and retention settings. Do not include information you do not want processed by those services.
• Firebase: Firebase Authentication supports the Note Mate family account; Firebase services may handle authentication and app diagnostics where enabled.
• Android services: Android handles notifications, alarms, widgets, and account chooser flows on your device.
• Note Mate/Calendar Mate: only content you choose to send through the family integration is passed to the app signed with the same trusted family key.

We do not sell your email content or use it for advertising. Cloudflare Pages hosts this policy page; visiting it may generate standard hosting and security logs.

5. Android permissions

• Internet and network state: connect to mail providers, authentication, and requested AI features.
• Notifications: notify you about mail and scheduled actions; you can disable notifications in Android settings.
• Boot and scheduling: restore scheduled send and snooze work after restart. Exact alarms are used where Android allows them for user-scheduled actions.
• Widgets: show selected mailbox information on your home screen. People with access to your unlocked device may see widget content.

Permissions are requested or used for the corresponding feature. Denying optional permissions may limit that feature without preventing ordinary app use.

6. Retention and deletion

Cached email is retained on your device to support faster loading and is removed when you disconnect the account, clear app data, or uninstall the app. Drafts and scheduled actions remain until completed or deleted. Your mailbox remains with your email provider and is controlled by that provider. Requests sent to AI providers may be retained according to their policies and configuration; recipients retain messages delivered to them. Deleting the app does not delete email already stored by your provider or recipients.

7. Your choices and rights

• Disconnect the account in Mate Mail to clear its local mail cache; revoke Google or Microsoft access from the provider’s account security settings.
• Disable notifications, widgets, or exact-alarm access through Android settings.
• Choose whether to use AI and avoid submitting sensitive email context.
• Request access, correction, or deletion of account information by emailing shreyaslinks00008@gmail.com. We may ask you to verify account ownership. Provider-held mail must be managed with that provider.

Privacy rights vary by location. We handle requests in accordance with applicable law. Some information may remain temporarily in service logs, provider systems, backups, legal records, or recipient copies outside our control.

8. Children, transfers, and changes

Mate Mail is not designed for children under 13 (or the higher age required by local law). Service providers may process information in countries other than yours. We may update this policy when the app or its data practices change; the effective date above will be updated. Material changes will be communicated through appropriate app or store channels.