Privacy Policy

Last updated: October 21, 2026

This policy explains what data the T43mime apps for iPhone, iPad and Mac ("T43mime", "we") access, how we use it, and the choices you have.

Data we access from your Google Account

When you sign in with Google, you grant T43mime access to your Gmail account through the Gmail API (scopes gmail.modify and gmail.send). We use this access only to provide the features you see in the app:

• On your device: show, search, send, archive, label and delete your messages. Message content is stored only on your device, in the app's local storage, to display it quickly and offline.
• On our notification server: detect new messages in your Inbox and send you a notification.

How notifications work

To deliver notifications within seconds, our server keeps an encrypted OAuth refresh token for each account you add. When Gmail reports a change, the server reads the sender, subject and a short preview of new Inbox messages and sends them to your devices through Apple Push Notification service (APNs). The server does not store message content: sender, subject and preview pass through memory only for as long as it takes to send the notification. Apple processes the notification as described in Apple's privacy policy.

The server stores only: your email address, the encrypted refresh token, a Gmail history marker, the time your Gmail watch expires, and the push token, type and name of each device you register.

Limited Use

T43mime's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We do not sell your data or use it for advertising.
• We do not transfer your data to third parties, except to Apple to deliver notifications you asked for, or as required by law.
• No person reads your email, unless you ask us to for support, it is needed for security, or the law requires it.
• We do not use your data to train AI or machine learning models.

Security

Connections to Google, Apple and our server use TLS. Refresh tokens are encrypted at rest with AES-256-GCM. Access to the server is limited to the operator.

Retention and deletion

When you remove an account from T43mime on your last device, the server stops the Gmail watch and deletes the refresh token and device records for that account. You can also revoke T43mime's access at any time at myaccount.google.com/permissions; the server then can no longer read your mailbox. To ask us to delete all data related to your account, email us at the address below.

Children

T43mime is not directed to children under 13.

Changes

We will update this page when our practices change and change the date above.

Contact

T43x · [email protected]