Privacy

The short version: your mail stays on your device, we run no servers that read it, we do not sell your data, and we do not share it with advertisers. This policy covers the SeroMail app and this website.

The app

What it accesses

When you connect an account, you sign in with Google or Microsoft directly and grant SeroMail permission to read, organize and send mail on your behalf. We never see your password. The app then downloads, on your device:

• Your messages: headers, bodies, attachments, labels or folders, and their read, starred and archived state.
• Your contacts, built from the people you have already emailed, so the app can suggest recipients.
• Your profile: name, email address and avatar, to label the account.

Where it lives

Everything above is stored in an encrypted database on your device and nowhere else. The sign-in credentials that let the app talk to Google or Microsoft are kept in the device keychain. SeroMail has no mail server of its own: your device talks to Google and Microsoft directly, and we have no copy of your mail to read, lose or hand over.

Search, summaries and the assistant

Search indexing, the Daily Brief, reply suggestions and Ask SeroMail all run on the device using Apple's on-device models. No message content is sent to us or to any AI provider. If your device cannot run the on-device model, those features are unavailable rather than routed through a server. We do not use your mail to train models, ours or anyone else's.

Notifications

If you turn on notifications, we hold the minimum needed to deliver them: an anonymous device token issued by Apple, and the address of the mailbox it belongs to, so that Google or Microsoft can tell us a new message has arrived. That signal carries no message content. The app then fetches the message on the device.

What the app sends off your device

• Requests to Google and Microsoft to read and send your mail, over HTTPS.
• Requests for the images embedded in HTML emails, to the servers the sender chose, when a message is opened. Senders can use these to see that a message was opened.
• A tiny connectivity check to Apple, Cloudflare or Google to tell offline from online.

The app contains no analytics, advertising or crash-reporting SDKs, and does not report what you read, send or search for.

Google API Services

SeroMail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: Gmail data stays on your device, is used only to provide the email features you can see in the app, and is never sold or used for advertising. No one at SeroMail reads it, because it never reaches us.

Removing your data

Removing an account from the app, or deleting the app, deletes its mail, index and credentials from your device. To stop SeroMail reaching the account at all, revoke it from your Google or Microsoft account's connected apps page. The only things left on our side are the notification token and mailbox address, removed when you sign out or turn notifications off.

This website

The site collects only what you give it:

• Your email address, when you join the waitlist.
• Your answers to the waitlist questions, and the features you vote for or suggest.
• The page you arrived from, saved with a signup or suggestion so we know which link brought you.

Votes and suggestions are tied to an anonymous id in a cookie, never to your email, so a vote can be undone without us building a profile of you. Cloudflare Turnstile keeps bots off the waitlist and the suggestion box; it sees your IP address for that check and is not an advertising tracker. There are no analytics, advertising or social media trackers on this site.

We use the address to send product updates: launch news, early access invitations, changes worth knowing about. The votes and suggestions tell us what to build first. Every email has an unsubscribe link; or email support@seromail.com and we will remove you and, if you like, the answers you gave us. We keep it until you ask us to delete it, or until the waitlist has served its purpose.

What we never do

• We do not sell your data, to advertisers, data brokers or anyone else.
• We do not rent, trade or share it for anyone else's marketing.
• We do not use it to build advertising profiles or train models.

The only third parties involved are the ones you already use and the ones that run our infrastructure: Google and Microsoft, who host your mailbox; Apple, who delivers notifications; and Cloudflare, who serves this site and the notification relay on our behalf and cannot use anything on it for their own purposes. If we are ever legally compelled to hand something over, we will comply with the law, and tell you where we are allowed to.

Your rights

Depending on where you live you may have the right to access, correct, export or delete the personal information we hold about you, and to object to how we use it. Email support@seromail.com and we will action it. SeroMail is not directed at children, and we do not knowingly collect information from anyone under 13.

Changes

If this policy changes in a way that matters, we will update the date at the top, email the waitlist and tell you in the app.

Contact

SeroMail is operated by XBIT Corp Pty Ltd. Questions about any of this: support@seromail.com.