Privacy policy
Effective 23 October 2026
Pale Mail is a desktop email application. This policy explains what information it handles, why, and the choices you have. In short: your email stays on your computer and with your email provider, and Pale Mail has no servers that store it.
What Pale Mail accesses
When you connect an email account, Pale Mail asks your provider for permission to access it. For a Google account this is the Gmail permission to read, label, archive, trash and send messages on your behalf. Pale Mail then handles:
- Your email address and the account name you sign in with.
- Your messages, conversations, labels, folders and attachments.
- The sign-in tokens that keep the account connected.
How the information is used
Pale Mail uses this information only to give you the features you see in the app: showing, searching, organising, sending and replying to email, opening attachments, and optionally checking messages for phishing. It is not used for advertising, it is not sold, and it is not used to build profiles.
Where it is stored
Everything is stored on your own computer, in the application's data folder. Sign-in tokens and saved keys are encrypted using your operating system's protection. Pale Mail does not operate servers, and the developer cannot see your email, your accounts or your keys.
Who it is shared with
- Your email provider (such as Google or Microsoft), because that is where your mail lives. Pale Mail talks to them directly from your computer.
- Anthropic, only if you add your own Anthropic API key and use the security checks or other Claude features. Then the content of the message being checked is sent to Anthropic's API using your key, under your own account with them. See Anthropic's privacy policy for how they handle it. Without a key, nothing is sent.
Pale Mail does not share your information with anyone else.
Google API Services User Data Policy
Pale Mail's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google accounts is used only to provide the user-facing email features described above, and is not transferred to others except as needed to provide those features, to comply with the law, or with your consent. No humans read your email.
Your choices
- Disconnect an account in Pale Mail's Settings. This removes its sign-in and its saved messages from your computer.
- Revoke access at any time from your Google Account at myaccount.google.com/permissions.
- Remove the API key in Settings to stop any data going to Anthropic.
- Uninstall the app and delete its data folder to remove everything it stored.
Security
Email content is shown in a sandbox with scripts removed and remote images blocked by default. Risky attachment types cannot be opened from the app. No system is perfectly secure, so please also protect your computer with a strong login and disk encryption.
Children
Pale Mail is not directed at children under 13.
Changes
If this policy changes, the new version will be posted here with a new effective date.
Contact
Questions about this policy: privacy@getpalemail.com