GenMail privacy
GenMail talks to the mail server you configure and to nothing of mine. There is no account, no sign-in, no analytics and no crash reporting. I cannot see your mail, your address, or that you use the app.
on your device
Synced messages are cached in a local database for offline reading and search. Downloaded attachments stay in the app’s storage. Settings are a plain text file you can read and edit.
Passwords go in the system Keychain, never in the settings file. A password found in an imported settings file is moved to the Keychain and removed from the file before anything is written.
Removing an account deletes its cache and password and changes nothing on the server. Deleting the app removes everything.
every connection
This is the whole list.
| contacted | when | who that is |
|---|---|---|
| Your IMAP server | Reading mail, syncing folders, and holding an IDLE connection while the app is open | The server you configured |
| Your SMTP server | Sending | The server you configured |
| Your mail domain | Adding an account, to find the server settings | autoconfig.<domain> and <domain>/.well-known/, over HTTPS |
| Mozilla’s provider database | Adding an account, only if your domain publishes nothing | autoconfig.thunderbird.net. It receives the domain, not the address |
| Hosts a message references | Only if you allow remote content for that sender | Whatever the sender linked |
Loading remote content tells the sender you opened the message. It is blocked by default.
the privacy level
One control. Minimal renders plain text and makes no request when you open a message. Balanced, the default, renders HTML, blocks remote content until you allow it for a sender, and strips tracking parameters from links. Seamless loads messages as sent, so senders can tell when you open them.
The same control decides whether outgoing mail names the client and whether the Message-ID carries your computer’s name. Read receipts are never sent.
not collected
No analytics, crash reports, usage statistics, advertising identifiers, contact upload or device identifier. The App Store listing says Data Not Collected.
third parties
No third-party SDKs. The one outside service is Mozilla’s provider database, contacted while adding an account and only if your domain publishes no settings of its own. It receives the domain, never the address or the password. Enter the server settings by hand and it is skipped.
your rights
I hold nothing about you to export, correct or delete. Your mail provider holds your mail under its own policy. Questions to [email protected].
children
Not aimed at children under 13. Nothing is collected from anyone.
changes
The date at the top is the version in force. A new connection is added to the list above before the version that makes it ships.