SSoft Inc ("us", "we", or "our") operates the Mailbox - fast & easy email mobile application (the "App" or the "Service"). This page explains what information the App handles when you use it, how that information is used, how long it is kept, and how you can delete it. By using the App you agree to the practices described here.
Summary
The App is an email client. Your email is downloaded from your email provider directly to your device and is stored on your device. We do not operate a server that receives, stores or reads your email. We do not use Google user data for advertising, and we do not use it to train AI or machine-learning models. You can remove an account at any time, which deletes that account's emails from the App.
Information the App handles
What the App handles depends on the features you use. It may include the following.
| Information | Purpose | Where it is kept |
|---|---|---|
| Account information for each mailbox you connect: email address, name and profile picture (for Google accounts, as provided by Google). | To identify the account and connect to your mailbox. | On your device only. |
| Email messages and attachments, folders and labels, and the names and addresses of senders and recipients. | To display, search, send, receive and manage your email. | On your device only (downloaded from your email provider). |
| Data you create in the App: signatures, blocked senders, contact suggestions, scheduled messages and App settings. If you choose a person from your phone's contacts, only the email address and name you pick are saved in the App. | To provide the App's features. | On your device only. |
| Technical and diagnostic information, such as device model, operating system version, crash reports, App usage statistics and an advertising identifier. | To keep the App working, fix problems, understand usage, and show advertising. This information does not include the content of your email. | Processed by the third-party services listed in Third-party services. |
The App's optional App lock uses the Android system biometric or screen-lock prompt. The App does not receive or store your fingerprint, face data or screen-lock credentials.
Google account and Gmail access
The App uses Google OAuth 2.0 to let you connect your Gmail account. The App requests the Gmail scope
https://mail.google.com/, which allows it to read, send and manage your email over the IMAP and SMTP protocols. Google requires this scope for
IMAP and SMTP access; the App uses it only to provide the email features you ask for.
The Google user data the App accesses is:
- your Google account name, email address and profile picture;
- your email messages, including headers, message bodies and attachments;
- your mail folders and labels; and
- the names and email addresses of the senders and recipients of your messages.
Email data from Google is downloaded directly from Google's servers to your device, over encrypted connections, and is processed on your device. The App stores email messages and related account information in a local database on your device so that email features work, including when you are offline. We do not operate a backend server that receives, stores or reads your Gmail messages, message content or mailbox data.
Google user data: retention and deletion
Access tokens
OAuth access tokens are not stored by the App. The App asks Google for a short-lived access token when it needs to connect, holds it in memory only for as long as the connection needs it, and does not keep it afterwards. The App does not keep a refresh token or your Google password.
Email and account data on your device
Email messages and account information are kept on your device for as long as the account remains in the App, so that email features can work. We do not keep a copy of this data on our servers.
Removing an account
When you remove an account from the App, the App deletes that account's record (email address, name and profile picture reference) and all of that account's email messages from its local database on your device.
Some other data stored on your device by the App is not deleted when an account is removed. This includes contact suggestions (names and email addresses gathered from messages you received or sent), signatures, blocked-sender lists, and scheduled-message entries. Files you downloaded, such as attachments saved to your device's Downloads folder, also remain. All data the App stores in its own storage is deleted if you clear the App's storage in Android settings or uninstall the App. The App does not back up its data to cloud backup services.
Revoking Google access
Removing an account from the App does not automatically revoke the permission you granted to the App in your Google Account. You can revoke the App's access at any time at myaccount.google.com/permissions. After you revoke access, the App can no longer obtain new access tokens for that account.
Requests to us
Because Google user data is stored only on your device, you control it directly using the steps above. If you contact us to ask about, or to request deletion of, data related to your Google account, we will reply within 30 days and confirm that we hold no copy of your Google user data on our servers.
Google API Services: Limited Use
The Mailbox - fast & easy email App's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use Google user data only to provide and improve the user-facing email features of the App that you request.
- We do not use Google user data to serve advertisements, including retargeting, personalized or interest-based advertising.
- We do not sell Google user data.
- We do not transfer Google user data to third parties, except as necessary to provide the email features you request, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to users.
- No humans read Google user data, unless we have your affirmative agreement for specific messages, it is necessary for security purposes such as investigating abuse, it is necessary to comply with applicable law, or the data is aggregated and anonymized for internal operations.
- We do not use Google user data to develop, improve or train generalized artificial intelligence or machine-learning models.
How we use information
- To provide and maintain the App and its email features.
- To access, display, send, receive and manage email when you ask us to.
- To detect, prevent and address technical issues and keep the App secure.
- To understand how the App is used and improve it (using diagnostic and usage information that does not include email content).
- To show advertising in the App (using the advertising identifier and similar technical data, never Google user data).
- To provide support when you contact us.
- To comply with applicable legal obligations.
Third-party services
The App uses the following third-party services. They may process information according to their own privacy policies. None of them is given the content of your email or any other Google user data by the App.
- Google Firebase (Crashlytics, Analytics, Remote Config and Cloud Firestore): crash reports, usage statistics and App configuration. Firestore is used only to look up the mail-server settings (such as IMAP and SMTP host names) for an email domain; it does not contain your personal data.
- Google AdMob: advertising in the App, which may use an advertising identifier on your device. You can reset or opt out of personalized advertising in your Android settings.
- Your email provider (for example Google, Microsoft or another provider): the App connects directly to your provider's servers to read and send your email. Your provider's own privacy policy applies to the data it holds.
Disclosure for legal reasons
We may disclose information if we believe in good faith that this is necessary to comply with a legal obligation, to protect the rights, property or safety of us, our users or the public, or to prevent or investigate wrongdoing in connection with the Service. Because we do not hold your email data, such a disclosure would not include it.
Security
The App connects to email providers over encrypted connections (SSL/TLS). Email data is stored in the App's private storage on your device, which other apps cannot normally read, and the App is excluded from cloud backup. You can also turn on App lock in Settings. No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.
Children's privacy
The Service is not directed to anyone under the age of 18 ("Children"). We do not knowingly collect personal information from Children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will take steps to remove it.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the new policy on this page and update the "Effective date" at the top. For material changes we will also give notice in the App or on this page before they take effect. Please review this page periodically; changes take effect when they are posted.
Contact us
If you have questions about this Privacy Policy, or want to ask about or request deletion of data related to your Google account, contact SSoft Inc:
- By email: ssoft.sup247@gmail.com