Mailie Pro
Get the app
Get the app

Legal

Privacy Policy

How the Mailie Pro application and the mailie.pro website handle personal data — what stays on your device, every connection the application can make, what this website processes, and the rights you have.

Effective
Applies to
The Mailie Pro app and mailie.pro
Controller
Mailie Pro

This document is available in ten languages. If a translation differs from the English text, the English text prevails.

  • Your mail stays between your device and your mail provider. Mailie Pro is an email client that runs on your Android device. We operate no mail service, no synchronisation server and no AI service. Your messages, attachments, contacts, credentials and everything the application derives from them are stored on your device, encrypted, and are never sent to us.
  • The AI features run on your device. Summaries, the Briefing, suggested replies, writing help, translation, search by meaning and the safety checks are computed on the device itself. Your mail is never sent to an AI service to be processed, and it is never used to train any model.
  • We hold no account for you. There is no registration with us, no user identifier, no analytics, no advertising and no tracking in the application.
  • Some connections are necessary, and we list every one (section 5): your mail servers; the encrypted DNS resolver; Google Play, which delivers the application, its AI models and subscriptions; on-device Google components used by certain features; and a few optional services that only you can turn on. Google's ML Kit terms state that its on-device components process their input on the device and send Google metrics about their performance and use (section 6).
  • This website is hosted by Cloudflare. It uses no analytics script, no advertising and no tracking cookies. If you write to us, through the contact form or by email, we use what you send only to answer you.
  • We do not sell or share personal information, as those terms are defined in United States state privacy laws.

This Privacy Policy is issued by Mailie Pro (we, us, our), an independent software publisher, which is the controller of the personal data described in this policy for the purposes of the EU and UK General Data Protection Regulations and similar laws. Our registered address and, where one is required, the details of any representative appointed under Article 27 of the GDPR are available on written request to privacy@mailie.pro.

Contact us at:

We are not affiliated with, endorsed by or sponsored by Google, Microsoft, Mozilla, Cloudflare or any mail provider named in this policy.

This policy covers:

  • the Mailie Pro Android application, distributed through Google Play under the package name pro.mailie (the App); and
  • the website at mailie.pro and its pages in every language (the Site).

It does not cover the mail providers, servers and services you choose to connect the App to (for example Google, Microsoft, Yahoo or your own provider), Google Play, your device's operating system, or any website we link to. Those are independent controllers of your data, their own privacy policies apply, and we have no control over them.

The App is a mail client. It does what any mail client must — receive, display, organise and send your mail — and it does all of this on your device.

Data Where it is stored How it is protected
Your email messages, attachments, folders and drafts On your device, in the App's private storage An encrypted database (SQLCipher, AES-256) whose key is sealed by the Android Keystore
Account settings, passwords, app passwords and sign-in tokens On your device Encrypted with an AES-256-GCM key held in the device's hardware-backed Android Keystore; never stored in plain text
Your address book in the App On your device, in the encrypted database As above
What the App derives from your mail: categories, summaries, the Briefing, search indexes, reminders, the open items it finds (such as promises, requests, bills, subscriptions and bookings), and what it learns from your corrections and choices On your device, in the encrypted database As above
OpenPGP and S/MIME keys you create or import On your device Private keys are sealed by the Android Keystore; passphrases are not stored
Settings and preferences On your device App-private storage
Crash and freeze records (section 10) On your device Redacted when recorded; App-private storage

None of this is sent to us. We operate no server that receives, stores, synchronises, backs up or processes your mail or anything derived from it.

  • It contains no analytics, telemetry, advertising identifier, advertising or third-party crash-reporting service.
  • It creates no account with us and assigns you no identifier of ours.
  • It does not request access to your location, your device's contacts, your microphone, your camera or your photos. Attachments and imports use the system file picker, which grants access only to the files you choose.
  • It does not include your device's data in cloud backups: system backup is disabled for the App, and device-to-device transfer of its data is excluded.
Permission Why
Internet and network state To connect to your mail servers and the services listed in section 5, and to wait for a connection before syncing
Notifications To tell you about new mail and reminders. Asked when you enable notifications
Do Not Disturb access Only if you grant it in Android Settings, so that alerts for the priority topics you set can sound during Do Not Disturb
Foreground service (data sync), wake lock, run at start-up To keep new-mail delivery working reliably, including after the device restarts
Biometrics Only if you turn on the App lock
Google Play billing To offer subscriptions through Google Play

Data stays on your device until you remove it. Deleting an account in the App erases that account's mail, credentials and derived data from the device. The Briefing's Forget option clears what the App has learned about your senders and your reply habits. Uninstalling the App, or clearing its storage in Android Settings, erases everything the App holds. Because we never receive this data, we cannot delete, recover or restore it for you.

If you export a backup, the App writes a file encrypted with AES-256-GCM under a key derived from a passphrase you choose (PBKDF2-HMAC-SHA256). The file goes only where you save it. We never receive the file or the passphrase, and we cannot open or recover either.

A mail client has to use the network. The table below lists every destination the App can contact, when, and what it sends. All connections use TLS (TLS 1.3 for your mail servers). If you turn on routing through a SOCKS5 proxy such as Tor, the connections below go through it, and a connection fails rather than bypassing the proxy.

Destination When What is sent
Your mail servers (IMAP, POP3, JMAP or SMTP, or Microsoft's mail service for Microsoft accounts) To receive, sync and send mail Your credentials or sign-in token, and your mail, as any mail client must. The servers are chosen by you
Sign-in pages of Google, Microsoft and other providers When you add an account that signs in with OAuth The sign-in happens on the provider's own page; the App receives a token for your mailbox (section 7)
Your encrypted DNS (DNS-over-HTTPS) resolver — Quad9 by default; Cloudflare, Google or one you set Whenever a server name must be looked up The server name being looked up. If the chosen resolver does not answer, the App tries the others in the order Quad9, Cloudflare, Google, rather than using unencrypted DNS
Mozilla's account-configuration service (autoconfig.thunderbird.net), and your provider's own configuration address When you add an account and ask the App to find its settings The domain part of your email address (for example example.com). If Mozilla has no answer, your provider's own configuration address receives your full email address, as its standard requires
Google Play To install and update the App; to deliver the App's on-device AI models; for subscriptions What Google Play needs to deliver an app and process a purchase (sections 6 and 11)
models.mailie.pro (our model storage, hosted by Cloudflare) Only if you choose to download the optional larger AI model An ordinary request for a public file. It contains nothing about you or your mail. Like any web server, the host receives your IP address to answer
Google, for on-device features Only for the features named in section 6 Requests for generic language packs or components, and the usage metrics described in section 6. Never the text of your mail
A recipient's Web Key Directory While you write to someone, to find their public OpenPGP key A hash of the part of the recipient's address before the @, and that part itself as the standard requires, sent to the recipient's own domain
Your CardDAV server Only if you turn on contact sync for an account added with a password Your contacts, to that account's own server only
Your alias provider (SimpleLogin or addy.io) Only if you configure one A request to create an alias, with the access token you supplied
A sender's unsubscribe address Only when you unsubscribe, or confirm the clean-up of senders you choose The one-click unsubscribe request that the sender published in its message
Your UnifiedPush distributor Only if you turn on UnifiedPush A push registration for your account, on the distributor you chose
The servers that host remote content in a message Only when you choose to load the images or content of that message What a browser would send to load them, including your IP address. Remote content is blocked by default for this reason
A website you open from a message Only when you tap a link The link opens in your browser. Package-tracking actions open the carrier's own tracking address with the tracking number found in the message, never a link taken from the message

Only one destination in this list belongs to us — models.mailie.pro, and only if you download the optional model — and it receives nothing that identifies you beyond the IP address any web server sees.

The App uses some Google components. They run on your device, but Google provides them, and Google's own terms and privacy policy (policies.google.com/privacy) apply to them.

  • Google Play distributes the App and its updates. It also delivers the App's default on-device AI models as part of the App's download, and processes subscriptions (section 11). Google receives what it needs for these services, as it does for any app from Google Play.
  • ML Kit provides on-device text recognition, translation, language identification, handwriting recognition and the AI model features described below. Google's ML Kit terms state that the input data and the results are processed on the device and are not sent to Google's servers, and that the APIs send Google metrics about their performance and use. The App gives these components only the text, image or ink a feature needs, on the device.
  • Translation and handwriting download a generic language pack from Google the first time you use a language. Only the request for the pack is sent, never your text or your ink.
  • Gemini Nano through Android AICore. On devices that support it, some AI features use Gemini Nano, the generative model that Google provides as part of Android through the AICore system service. It runs on your device. AICore is managed by Android and Google, may download and update the model, and Google's terms for it apply. On other devices, the App uses its own on-device models instead.
  • Document scanning uses a Google Play services component that takes the pictures in its own process and returns only the pages you keep. The App itself does not request camera permission. The scanner is not offered on devices without Google Play services.
  • Dictation and read-aloud use your device's own speech recognition and text-to-speech services. The App asks the speech service to work on the device where possible. Depending on your device and its settings, that service (often Google's) may process your speech under its own terms. The App receives only the resulting text.

This section applies when you add a Google account (Gmail) by signing in with Google.

The App requests one scope: https://mail.google.com/. It is used only to authenticate your own mailbox over Gmail's IMAP and SMTP servers (XOAUTH2), in place of a password. This is what lets the App read and display your mail, mark, move, archive and delete messages, keep drafts, send and reply, and notify you of new mail. Gmail's IMAP and SMTP servers accept only this scope; the narrower Gmail scopes work only with the Gmail API, which the App does not use. The App requests no Google Contacts, Calendar or Drive access.

  • It stays on your device. Google user data is processed and stored only in the App's encrypted storage on your device. It is never uploaded to us; we operate no server that could receive it.
  • Tokens are protected. Access and refresh tokens are sealed with a hardware-backed Android Keystore key, never stored in plain text, never logged and never sent to us.
  • We do not transfer it. We do not sell, rent, trade or otherwise transfer Google user data to anyone.
  • No advertising. Google user data is never used for advertising of any kind.
  • No human reads it. No person at Mailie Pro can read your Google user data. There is no support tool, log or database through which this could happen.
  • It is never used to train AI. Google user data is not used to develop, train or improve any generalised AI or machine-learning model.

Remove the account in the App to erase its mail and tokens from your device. You can also revoke the App's access at any time at myaccount.google.com/permissions.

When you add an Outlook.com, Hotmail, Live or Microsoft 365 account, you sign in on Microsoft's page, and the App syncs your mail through Microsoft's mail service (Microsoft Graph). The App requests only Mail.ReadWrite (to read, flag, move and delete mail), Mail.Send (to send) and offline_access (to stay signed in). It does not request your profile, contacts or calendar. Your mail and the sign-in token are handled exactly as described for all mail in section 4: on your device, encrypted, and never sent to us. You can remove the App's access in your Microsoft account settings.

Every AI feature — the Briefing and what it finds in your mail, summaries, suggested and quick replies, writing and rewriting, the subject suggestion, Ask your inbox, search and find-similar by meaning, categories, translation, text and handwriting recognition, and the phishing, scam and send checks — runs on your device, using the App's own models or the on-device Google components described in section 6. Your mail, your questions and the App's answers are never sent to us or to any AI service for processing.

The App learns from your own use on your device: the categories you correct, the senders you consider important, the replies you tend to choose, and similar signals. This is stored encrypted on your device and used only for you. The Briefing's Forget option clears what the App has learned about your senders and your reply habits; your own rules, category corrections and the items you marked as done stay until you change them, delete the account or uninstall the App. None of it is pooled with other people's data, because it is never sent anywhere.

Your mail and anything derived from it is never used to develop, train, fine-tune or evaluate any AI or machine-learning model, ours or anyone else's.

The App's own models are open-weight models published by others (such as Qwen2.5 and EmbeddingGemma) and are delivered with the App through Google Play; the optional larger model is downloaded from models.mailie.pro only if you choose it. Their licences are listed in the App under About › Open-source licences.

AI output can be wrong or incomplete. The App says so where its output appears, links each result back to the original message, and you should check anything important against the original. See the Terms of Use.

To help diagnose problems without a crash-reporting service, the App records crashes, freezes and engine failures on your device. A record contains only technical details: the type of failure, the names of the program classes and functions involved, the time, the App version, the device model, the Android version and the available memory. It never contains the text of an error message, a message, an address or any other content, and a thread label that could contain an address is removed. Records stay on your device. You can view, share, clear or stop them under Settings › Diagnostics.

A record leaves your device only if you tap Share report, which opens your device's share menu, and you choose where to send it. If you send it to us, we use it only to diagnose the problem and handle it like any other message you send us.

If you email us, write to us from the App's About screen (which opens an email to help@mailie.pro in your mail app), or use the contact form, we receive what you send: normally your name, your email address and your message, plus anything you choose to attach. We use it only to answer you, to follow up on your request and to keep a record of the conversation. Please do not send us passwords or the contents of private emails; we never need them.

The App is free to download and works as a complete mail client without payment. Its Smart features (the AI features grouped under that name in the App's settings), Ask your inbox, the file drawer, the Briefing on the home-screen widget and more than three accounts need a subscription after a free trial; search and find-similar by meaning stay free. Google Play is the seller: your payment, taxes, renewals, cancellations and refunds are handled by Google under the Google Play terms and Google's privacy policy. We never receive your payment details.

The App checks your subscription on your device with Google Play. We operate no billing server, the App sends us nothing about your purchase, and it gives Google no identifier derived from your mail or your email addresses, so a purchase is never linked to your mail. The App stores on your device only whether a subscription or trial is active and when it was last checked. The free trial is granted by the App on your device; it needs no payment details and simply ends. Google Play shows app publishers certain information about each order in its console. We use it only for accounting, tax, refunds and customer support.

The Site is hosted by Cloudflare, Inc. (Cloudflare Pages). To deliver the pages and protect them from attacks, Cloudflare processes technical data for every visit, such as your IP address, the page requested, the time, your browser's user agent and the referring page, as described in Cloudflare's privacy policy. We do not receive these request logs. We see only the aggregated traffic and security statistics that Cloudflare shows in its dashboard, such as visitor counts by country, which do not identify you.

The Site loads no analytics script, no advertising, no social-media plug-ins, no fonts or scripts from other companies, and no tracking pixels. The only exception is Cloudflare Turnstile on the contact page (below). The Site sends no referrer information to other websites.

  • lang cookie — set only if you choose a language from the language menu, so that the home page opens in that language next time. It holds only the language code and lasts six months.
  • Theme preference — if you choose light or dark mode, your choice is kept in your browser's local storage. It never leaves your browser.

Neither is used for tracking, and neither is shared with anyone. Because both are strictly necessary to remember a choice you made, they do not require consent. You can delete them at any time in your browser.

When you send the contact form, the Site sends your name, email address, topic, message and the page language to the mail server we operate ourselves, which delivers it to our mailbox as an email. Nothing is stored on the Site itself. We use the message only to answer you.

To keep out automated spam, the contact page uses Cloudflare Turnstile, which checks in your browser that the form is sent by a person. Turnstile is loaded only on the contact page and processes technical data about your browser and connection under Cloudflare's Turnstile privacy addendum. It does not use the information for advertising.

Where the GDPR or the UK GDPR applies, we rely on these legal bases:

Processing Purpose Legal basis
Answering your message or support request, including a diagnostics report you choose to send Responding to you Steps you request (Art. 6(1)(b)) and our legitimate interest in supporting our users (Art. 6(1)(f))
Hosting and security of the Site by Cloudflare Delivering the Site and protecting it from abuse Legitimate interests (Art. 6(1)(f))
Cloudflare Turnstile on the contact form Preventing spam and abuse Legitimate interests (Art. 6(1)(f))
Remembering your language choice Showing the Site in the language you chose Legitimate interests (Art. 6(1)(f)); the cookie is strictly necessary for a function you requested
Purchase records received from Google Play Accounting, tax and customer support Legal obligation (Art. 6(1)(c)) and performance of a contract (Art. 6(1)(b))

Providing your name and email address when you write to us is not a legal or contractual requirement, but we cannot answer a message that gives us no way to reply. Purchase records come from Google Play, not from you; without them we could not meet our accounting and tax obligations or help with a refund.

We make no decision about you based solely on automated processing that has legal or similarly significant effects. The App's classification, warnings and Briefing run on your device, under your control, and decide nothing about you.

Where we rely on legitimate interests, we have balanced them against your rights. The data is minimal, is not used to profile you and is not combined with other data. You can object at any time (section 17). The App's processing of your mail takes place on your device under your control; we do not process that data.

We do not sell, rent or trade personal information, and we do not share it for advertising. The following service providers process personal data for us, on our instructions:

Provider Role
Cloudflare, Inc. Hosting and security of the Site, the contact form's spam check, and storage of the optional AI model
(none: our own mail server) Messages you send us are received, stored and answered on a mail server that we operate ourselves

Google, Microsoft, Mozilla, your mail provider and the other destinations listed in section 5 receive data directly from your device when you use the corresponding feature. They act as independent controllers under their own policies, not on our behalf.

We may also disclose information when the law requires it, or to establish, exercise or defend legal claims. Where the law allows, we will tell you about such a request.

Cloudflare and Google operate worldwide, and data may be processed in countries other than yours, including the United States. Where personal data is transferred from the European Economic Area, the United Kingdom or Switzerland, the transfer relies on an adequacy decision (such as the EU–US Data Privacy Framework, where the recipient is certified) or on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, as provided in each provider's data processing terms. You can ask us for details at privacy@mailie.pro.

Data How long
App data (mail, credentials, contacts, derived data, crash records) On your device only, until you delete it or uninstall the App. We never hold it
Messages and diagnostics reports you send us, and our replies As long as needed to deal with your request, then up to 24 months so that a later conversation has its context, then deleted
Cloudflare request and security logs Kept by Cloudflare for the short periods described in its policies; we do not receive them
The lang cookie Six months from your last language choice, or until you delete it
Purchase records (received from Google Play) As long as tax and accounting law requires

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to restrict or object to its processing, and to withdraw any consent you have given.

  • EEA, United Kingdom and Switzerland. You have the rights in Articles 15 to 22 of the GDPR and the equivalent UK and Swiss provisions, including the right to object to processing based on legitimate interests, and the right to lodge a complaint with your data protection authority. We would appreciate the chance to address your concern first.
  • California and other US states. You have the right to know, delete and correct personal information. We do not sell or share personal information, do not use it for targeted advertising or profiling, and do not process sensitive personal information to infer anything about you, so there is nothing to opt out of. You may use an authorised agent. We will not discriminate against you for exercising your rights.
  • Elsewhere. If you live in another country with data protection law — for example Brazil (LGPD), Türkiye (KVKK), India (DPDP Act), Canada or Australia — you have the rights that law gives you, and we honour them on the same basis.

To exercise a right, write to privacy@mailie.pro. We will answer within the time the law requires: generally one month under the GDPR and 45 days under US state laws, and we will tell you if we need longer. We may ask for information to confirm your identity, and we use it only for that purpose.

Because the App keeps your mail and its derived data only on your device, requests about that data are fulfilled by the steps in section 4: we hold none of it to give you, correct or delete.

The App and the Site are not directed at children. We do not knowingly collect personal data from children under 16, or under 13 in the United States. If you believe a child has sent us personal data, contact privacy@mailie.pro and we will delete it.

On your device, the App protects your data as described in section 4: TLS 1.3 to your mail servers with certificate checks, encrypted DNS, an encrypted database, keys in the hardware-backed Android Keystore, and an optional App lock. The Site is served only over HTTPS, with strict security headers and no third-party code except the spam check on the contact page. The contact form delivers your message to our mail server over an encrypted connection.

No method of transmission or storage is completely secure, and we do not claim otherwise. Our main safeguard is that we hold almost nothing about you. If a personal data breach affecting data we hold is likely to put your rights at risk, we will notify the competent authority and, where required, you, without undue delay.

To report a vulnerability, write to security@mailie.pro. We will not take legal action against research carried out in good faith that respects your and other users' privacy and gives us reasonable time to respond.

We will update this policy when the App, the Site or the law changes. The date at the top of this page shows when it last changed. If we make a material change, we will announce it on the Site before it takes effect, and where the law requires your consent, we will ask for it. Earlier versions are available on request from privacy@mailie.pro.

This policy is published in English and in translation. The translations are provided for convenience. If a translation and the English text differ, the English text prevails, unless the law of your country requires otherwise.