Privacy policy

Effective 9 November 2026

1. Who we are

Pawmail is made by:

SYMAR, spol. s r.o.
Vřesovická 429/3, 155 21 Praha 5 – Zličín, Czech Republic
Company ID (IČO): 00196738
Email: support@pawmail.app

For the few personal data we do process ourselves (section 9), we are the controller under the EU General Data Protection Regulation (GDPR).

2. What this policy covers

The Pawmail apps for macOS, Windows, iPhone and iPad, and this website, pawmail.app.

3. Where your mail is stored

• Pawmail keeps a copy of your mail, folders and labels in a database on your device, so it can work fast and offline. The original stays with your mail provider.
• Passwords and sign-in tokens are stored only in the operating system's protected store: Keychain on Apple devices, Credential Manager on Windows. They never go into files or logs.
• Things Pawmail learns to help you – how you sort mail, your writing style, the AI log – are stored on your device too.
• We have no copy of any of this and no way to access it.

4. Connections the app makes

Pawmail connects to the internet only for the following:

• Your mail providers. To sign in, sync, send and file your mail, directly between your device and your provider (for example Gmail, Microsoft 365, Outlook.com, Fastmail or your company's server).
• Setting up an account. To find the server settings for an address, Pawmail looks up its domain (the part after @) in DNS, at that domain's own configuration address, and in Mozilla's public database of mail providers (used by Thunderbird). Only the domain is sent, never your address or password.
• Updates. About once a day the app checks GitHub for a new version and downloads it from there. As with any download, GitHub sees your IP address and the app version. On the App Store, Apple handles updates.
• Pictures in email. Remote images are blocked until you allow them for a sender, because senders use them to see when you open a message. Tracking pixels are removed.
• Links and unsubscribing. Links open in your browser when you click them. Pawmail contacts a sender's unsubscribe address only when you choose to unsubscribe.
• AI providers, only if you turn them on – see the next section.

5. AI features

Pawmail can sort mail, summarise it, find deadlines and draft replies with an AI model. This is optional and off until you set it up. You choose the model, and you can choose a different one – or none – for each account.

• On your device: Apple's on-device model, or a local model in Ollama or LM Studio. Mail does not leave your computer.
• In the cloud: Claude by Anthropic or Grok by xAI, through your own subscription (Claude Code, Grok Build) or your own API key. The content of the messages needed for a task – sender, subject, text and, for some tasks, attachments – is sent directly from your device to that provider. We do not receive it. The provider processes it under your own agreement and settings with them: please read their privacy policy.
• Assistants you connect yourself. Pawmail has a built-in MCP server that only runs on your computer. If you connect an assistant to it (for example Claude Code), that assistant can read the mail its tools expose, under your account with its provider.

The AI never sends, deletes or forwards mail on its own. It only proposes; you decide. The app's AI log shows what the AI did and when.

API keys you enter are stored in Keychain or Credential Manager. Pawmail never reads or stores your Claude or Grok sign-in; their own apps keep it.

6. Gmail and other Google data

If you add a Google account, Pawmail asks Google for access to Gmail (the gmail.modify permission). Pawmail uses it only to show you your mail and do what you ask: read, search, label, archive and move messages, save drafts, and send the messages you approve. Pawmail never permanently deletes mail.

• Google user data is stored only on your device, as described in section 3. It is never sent to us.
• It is transferred to a third party only to the AI provider you choose, at your request, to provide the features you use (section 5) – or as required by law.
• It is never used for advertising, never sold, and never used to build user profiles.
• It is never used to develop, improve or train AI or machine-learning models, by us or – through Pawmail – by anyone else.
• No person at Pawmail reads your Google data. We have no access to it.

Pawmail's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Pawmail's access at any time at myaccount.google.com/permissions.

7. Microsoft accounts

If you add a Microsoft 365 or Outlook.com account, Pawmail asks Microsoft for access to your mail and uses it in the same way as Google data (section 6): only on your device, only to do what you ask, shared only with the AI provider you choose. You can remove access at account.live.com/consent/Manage (personal accounts) or myapps.microsoft.com (work and school accounts).

8. What we don't do

• No analytics, usage tracking, telemetry or advertising in the app.
• No crash reports are sent automatically.
• No selling, renting or sharing of data.

9. When you contact us

If you write to us, we receive your email address and what you send – for example a diagnostic log you choose to attach. We use it only to answer you and fix problems (GDPR Art. 6(1)(b) and (f)), and delete it when it is no longer needed for that. You decide what to send.

10. This website

pawmail.app uses no cookies, no analytics and no third-party scripts. It is hosted by Cloudflare, which processes technical data such as your IP address to deliver the pages and protect them from abuse (our legitimate interest, GDPR Art. 6(1)(f)).

11. Deleting your data

Removing an account in Pawmail deletes its local mail and its password or token from your device. Uninstalling Pawmail and deleting its data folder removes everything else. Mail on your provider's servers is not affected. Data you sent to a cloud AI provider is governed by your agreement with that provider.

12. Your rights

Under the GDPR you have the right to access, correct and delete your personal data, to restrict or object to processing, and to data portability. Write to support@pawmail.app. You can also complain to the Czech data protection authority, the Úřad pro ochranu osobních údajů.

13. Children

Pawmail is not directed at children under 16, and we do not knowingly collect their data.

14. Changes

If this policy changes, we will update it here and change the date at the top. Significant changes will also be mentioned in the app's release notes.