Privacy Policy — OneMail Desktop

Last updated: 2026-08-06

OneMail Desktop is a desktop email client. It is developed by an individual developer ("we", "the developer"), not a company, and is distributed for personal use. This policy explains what data OneMail Desktop accesses and how it is handled.

Summary

OneMail Desktop does not have a server. There is no backend operated by the developer that your email, contacts, or calendar data is ever sent to. All data OneMail Desktop accesses stays on your own computer, except for the direct connection your computer makes to your own email provider (e.g. Google, or your IMAP/SMTP server) to send and receive your mail.

What data OneMail Desktop accesses

• Email messages, folders, and labels — read and written directly between your computer and your email provider's own servers (IMAP/SMTP, or Gmail via Google's API).
• Google Account sign-in — when you connect a Gmail account via "Sign in with Google", OneMail Desktop requests the https://mail.google.com/ scope (full mail access, needed to read, send, and organize your Gmail the same way any email app needs to) and basic profile/email address info.
• Google Drive (optional) — if you separately choose to connect Google Drive for the cloud-attachment feature, OneMail Desktop requests the narrow drive.file scope, which only grants access to files OneMail Desktop itself creates in your Drive — never your existing Drive files.

Where your data is stored

• Credentials and OAuth tokens are stored in your operating system's own secure credential store (Windows Credential Manager, macOS Keychain, or the Linux Secret Service) — never in a plain file, and never transmitted anywhere by OneMail Desktop.
• Message cache (for offline access and fast search) is stored in a local database on your computer, with message bodies encrypted at rest using AES-256-GCM.
• No message content, credentials, or metadata is ever uploaded to any server operated by the developer. OneMail Desktop has no analytics, telemetry, advertising, or third-party tracking of any kind.

Optional AI features

OneMail Desktop's AI features (summarization, reply suggestions, task extraction) run entirely locally on your own computer via Ollama. No message content is sent to any cloud AI service.

Data sharing

We do not sell, rent, or share your data with any third party. Your data is only ever exchanged directly between your computer and the mail provider(s) you configure yourself.

Your controls

• Remove a connected account at any time from within OneMail Desktop, which deletes its locally cached data.
• Revoke OneMail Desktop's access to your Google Account at any time from Google Account → Security → Third-party access.
• Uninstalling OneMail Desktop removes its local application data.

Contact

Questions about this policy: juha.lempiainen@gmail.com