Information the app accesses
With your authorization, Dearmail accesses only the data required to provide the features you request.
- Email account identity, messages, threads, headers, contacts, attachments, folders, and labels.
- Permission to create drafts, send mail, and apply mailbox changes such as read state, labels, archive, trash, user-confirmed permanent deletion, and snooze.
- Connection settings and credentials for standard IMAP/SMTP accounts you add.
Where your data is stored
Mailbox content and search indexes are stored in Dearmail’s application data on your Mac. OAuth refresh tokens and IMAP/SMTP credentials are stored in Apple Keychain. Mail contents are synchronized directly with Google, Microsoft, or your configured mail servers and are not uploaded to TalkApe servers.
Live mail notifications
While Dearmail is running, a TalkApe notification service receives Gmail changes through Google Cloud Pub/Sub and Microsoft changes through Microsoft Graph, then tells the app to synchronize directly with your provider. IMAP IDLE connects directly from your Mac to your mail server.
To verify your mailbox and register or renew notifications, the service temporarily processes a short-lived provider access token in memory. It does not store that token, your refresh tokens, or your mailbox contents. It stores your provider account identifier, email address, subscription identifiers and expiry, and change cursors. Notification transport also processes connection metadata such as IP addresses. Inactive subscription records are automatically deleted after 30 days without registration once the subscription has expired. You can contact privacy support to request earlier deletion.
Protection of sensitive data
Encryption in transit: Dearmail communicates with Google and Microsoft APIs and the TalkApe notification relay over HTTPS with TLS and server certificate validation. The notification relay accepts public connections over TLS 1.2 or TLS 1.3. This protects account identity, access tokens, notification metadata, and mail data while transmitted over those connections.
Credential and local storage protection: OAuth refresh tokens and IMAP/SMTP passwords are stored using Apple Keychain, rather than in the mail database. The local mailbox database, search index, and downloaded attachments are not separately encrypted by Dearmail; they rely on macOS account and filesystem protections. Device encryption at rest depends on your Mac's FileVault configuration. We recommend enabling FileVault and protecting your Mac account.
Server access controls: The notification relay runs under a dedicated non-root service account with restricted filesystem access and private data-directory permissions. Its database is outside the website's public directory. Notification streams require signed, mailbox-specific session tokens that expire after 30 minutes. Google Pub/Sub notifications are validated against Google's signature, issuer, audience, and the expected service account; Microsoft notifications are checked against the registered subscription and a secret validation value.
Data minimization and logging: The relay handles short-lived provider access tokens only in memory while verifying identity and registering or renewing watches; it does not persist them. It never receives OAuth refresh tokens, email bodies, or attachments. Routine relay request logging is disabled, and application error logs contain error codes rather than request bodies or credentials. Stored subscription metadata is subject to the retention and deletion rules described above.
These safeguards reduce unauthorized access and disclosure risks but do not guarantee absolute security. Users can revoke Dearmail's access in their Google or Microsoft account settings, disconnect accounts in Dearmail, and contact privacy support about security or deletion requests.
How data is used
Data is processed only to display, search, organize, compose, send, synchronize, notify, and otherwise perform actions you request. TalkApe does not sell mailbox data, share it for advertising, build advertising profiles, or use it to train AI models.
Dearmail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
AI agents and the command-line interface
The app does not send mail to an AI service by itself. If you install the Agent Skill or authorize an agent to run Dearmail commands, that agent can access the data and actions you explicitly make available. Data handled by a third-party agent is governed by the agent provider and your configuration of it.
Remote content and links
Remote images in HTML email are blocked by default and load only after you choose to allow them. Scripts, forms, unsafe URLs, and unsafe styles are removed from displayed messages. External links open only after a user action.
Retention and deletion
Your local mailbox cache remains until you remove the account or delete the app's data. Removing an account in Settings deletes its cached messages, drafts, attachments, mailboxes, signatures, queued work, and stored credential from this Mac. It does not delete mail held by your email provider.
Diagnostics, tracking, and children
Dearmail does not include advertising, cross-app tracking, or third-party analytics. It is a general productivity tool and is not directed to children.
Contact
Questions or privacy requests can be sent to TalkApe (Hangzhou) Technology Co., Ltd.