Privacy Policy

Dot Mail for Android · Effective 9 November 2026

Dot Mail is a free, open-source email app. It connects your phone directly to your email provider. The Dot Mail project runs no servers: there is no Dot Mail account, no backend, no analytics, no advertising, no crash reporting and no telemetry. Nobody working on Dot Mail can see your email, your contacts or your credentials.

What the app accesses

• Your email account. To show, search, send and organise your mail, Dot Mail connects to your provider's IMAP and SMTP servers with your password, an app password, or (for Gmail) Google sign-in.
• Google user data (Gmail). When you choose "Continue with Google", Dot Mail requests the scope https://mail.google.com/, which IMAP and SMTP require. It is used only to read, organise and delete your messages and to send the messages you write, inside the app, on your phone. Your Google email address is used to name the account in the app.
• Contacts (optional). Only if you grant Android's contacts permission, Dot Mail reads names, addresses and photos on your phone to suggest recipients and show avatars. Contacts are never uploaded.
• Certificates (optional). If you set up S/MIME, keys stay in Android's KeyChain; Dot Mail stores only a reference to them. Certificates of people who send you signed mail can be stored on your phone to encrypt replies to them.

Where your data goes

• Mail, attachments and the search index are stored only on your phone, inside the app's private storage, and sent only to your own email provider (for Gmail: Google) over encrypted connections.
• Passwords and Google sign-in tokens are encrypted on the phone with the Android Keystore and are sent only to your provider (for Google: Google's sign-in and token endpoints).
• Dot Mail does not transfer Google user data, or any other email data, to the Dot Mail project or to any third party. It does not sell it, does not use it for advertising, and does not use it to train AI or machine-learning models. No human reads it.

Optional features that contact other services

These are off by default and switched on by you in Settings. They never send message content.

• Account setup looks up server settings for your address's domain (DNS and Mozilla's public autoconfig directory, autoconfig.thunderbird.net). Only the domain is sent.
• Avatars: Gravatar and Libravatar receive a SHA-256 hash of a sender's address; "brand logos" read the sender domain's public DNS records; "website icons" request the icon file from the sender's own website.
• Remote images in HTML mail are loaded only when you allow them; the sender's servers then see that the image was requested.
• Email aliases (SimpleLogin, addy.io) contact those services only if you connect them with your own API key.
• OpenPGP is handled by the separate OpenKeychain app, if you install and choose it.

Google API Services User Data Policy

Dot Mail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Data stays on your phone until you remove it. Removing an account in Dot Mail deletes its cached mail, attachments, search index and stored credentials from the phone; uninstalling the app deletes everything. Messages on your provider's server are not affected. You can revoke Dot Mail's Google access at any time at myaccount.google.com/permissions.

Children

Dot Mail is a general-purpose email client and is not directed at children.

Changes and contact

Changes to this policy are published on this page and in the app's source repository, github.com/Sr-0w/Dot-Mail. Questions: robin@snyders.xyz.