How it works & privacy

The app talks to a small server on Cloudflare that works with your Gmail account. Here's what that server does, and what it keeps.

The pieces

The Mac app shows your mail and sends your actions to the server.
The server is a Cloudflare Worker. It talks to Gmail for you, runs triage, and pushes live updates to the app.
Gmail holds your mail. The server doesn't keep a copy of your mailbox.

What happens when mail arrives

Gmail tells Google Cloud Pub/Sub your mailbox changed, and Pub/Sub notifies the server.
The server fetches the new email from Gmail and asks the triage model to pick a tag.
It adds the Gmail label, and archives the email if your triage mode allows it.
It tells the open app to refresh.

Once a day the server renews its Gmail subscription for each account, so notifications keep flowing.

What the server stores

Data	Why
Your email address and Google refresh token, encrypted with AES-GCM	So it can work on your mailbox while the app is closed
Hashed session tokens	To recognize your signed-in app. Sessions expire after 90 days.
Triage decisions: tag, a one-line reason, confidence, and whether it archived	To show the tag and let you correct it
Saved thread summaries	So a summary is still there when you reopen the thread
Your settings: triage mode, custom tags, signature, AI providers (API keys encrypted)	To apply your preferences
Embeddings for threads in tags you marked for AI search	To run AI search. These are numeric vectors, not message text.

Message bodies are fetched from Gmail when needed and aren't stored on the server.

Where your mail goes for AI

Triage and the default summaries and search embeddings run on Cloudflare Workers AI, in the same Cloudflare account as the server.
If you choose another provider for summaries or drafts, the thread is sent to that provider when you ask for a summary or draft. Their data policy then applies.

Removing access

Sign out from the account menu to end your session. To cut off the server completely, remove its access in your Google account permissions. Its stored refresh token stops working immediately.