Privacy

SeroMail is an email client, so we know how much of your life sits in an inbox. The short version: your mail stays on your device, we run no servers that read it, we do not sell your data, and we do not share it with advertisers. This policy covers the SeroMail app and this website.

The app

What it accesses

When you connect an account, you sign in with Google or Microsoft directly and grant SeroMail permission to read, organise and send mail on your behalf. We never see your password. The app then downloads, on your device:

• Your messages: headers, bodies, attachments, labels or folders, and their read, starred and archived state.
• Your contacts, built from the people you have already emailed, so the app can suggest recipients.
• Your profile: name, email address and avatar, to label the account.

Where it lives

Everything above is stored in an encrypted database on your device and nowhere else. The sign-in credentials that let the app talk to Google or Microsoft are kept in the device keychain. SeroMail has no mail server of its own: your device talks to Google and Microsoft directly, and we have no copy of your mail to read, lose or hand over.

Search, summaries and the assistant

Search indexing, the Daily Brief, reply suggestions and Ask SeroMail all run on the device using Apple's on-device models. No message content is sent to us or to any AI provider. If your device cannot run the on-device model, those features are unavailable rather than routed through a server. We do not use your mail to train models, ours or anyone else's.

Notifications

If you turn on notifications, we hold the minimum needed to deliver them: an anonymous device token issued by Apple, and the address of the mailbox it belongs to, so that Google or Microsoft can tell us a new message has arrived. That signal carries no message content. The app then fetches the message on the device.

What the app sends off your device

• Requests to Google and Microsoft to read and send your mail, over HTTPS.
• Requests for the images embedded in HTML emails, to the servers the sender chose, when a message is opened. Senders can use these to see that a message was opened.
• A tiny connectivity check to Apple, Cloudflare or Google to tell offline from online.

That is the whole list. The app contains no analytics, advertising or crash-reporting SDKs, and does not report what you read, send or search for.

Google API Services

SeroMail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: Gmail data is used only to provide the email features you can see in the app, is never sold or used for advertising, and is never read by a human except with your explicit permission for support, or as required by law.

Removing your data

Removing an account from the app, or deleting the app, deletes its mail, index and credentials from your device. To stop SeroMail accessing the account at all, revoke it from your Google or Microsoft account's connected apps page; the app cannot fetch anything after that. Because we hold no copy, there is nothing left on our side to delete, other than the notification token, which is removed when you sign out or turn notifications off.

This website

This site only collects what you type into it:

• Your email address, when you join the waitlist.
• Your answers to the waitlist questions, and the features you vote for or suggest.

Votes are tied to an anonymous identifier held in a cookie, not to your identity, so we can stop one person voting a hundred times without building a profile of you. We use Cloudflare Turnstile to keep bots off the waitlist; it sets a token for that check and is not an advertising tracker. There are no analytics, advertising or social media trackers on this site.

We use the address to send product updates: launch news, early access invitations, changes worth knowing about. We use the votes and suggestions to decide what to build first. Every email has an unsubscribe link, and one click is enough; or email support@seromail.com and we will remove you and, if you like, the answers you gave us. We keep it until you ask us to delete it, or until the waitlist has served its purpose.

What we never do

• We do not sell your data. Not to advertisers, not to data brokers, not to anyone, for any price.
• We do not rent, trade or share it for anyone else's marketing.
• We do not use it to build advertising profiles or train models.

The only third parties involved are the ones you already use and the ones that run our infrastructure: Google and Microsoft, who host your mailbox; Apple, who delivers notifications; and Cloudflare, who serves this site and the notification relay on our behalf and cannot use anything on it for their own purposes. If we are ever legally compelled to hand something over, we will comply with the law, and tell you where we are allowed to.

Your rights

Depending on where you live you may have the right to access, correct, export or delete the personal information we hold about you, and to object to how we use it. Email support@seromail.com and we will action it. SeroMail is not directed at children, and we do not knowingly collect information from anyone under 13.

Changes

If this policy changes in a way that matters, we will update the date at the top and, for anything significant, email the waitlist and tell you in the app rather than quietly editing the page.

Contact

SeroMail is operated by XBIT Corp Pty Ltd. Questions about any of this: support@seromail.com.