Last updated 22 October 2026

Privacy policy

Mailie is a personal macOS mail application developed by Marijn Bent. This policy describes the app and this website. Questions or data requests can be sent to marijnbent@gmail.com.

Mail accounts and Google data

When you connect an account, Mailie accesses your email address, account identity, folders and labels, message headers, subjects, message bodies, attachments and drafts. It uses this data to display and search mail, synchronise changes, organise messages, compose and send mail, and perform mail actions you request or authorise.

Gmail connects directly to Google through OAuth and the Gmail API. The requested mail permission includes reading, composing, sending, organising and permanently deleting messages. Mailie does not receive your Google password. Other providers connect through IMAP and SMTP over encrypted connections.

Storage on your Mac

Mailie stores its mail cache, attachments, drafts, settings and activity records in ~/Library/Application Support/Mailie/. Credentials and Google refresh tokens are stored in macOS Keychain, separately from the mail database. Cached mail is protected by your Mac’s account and storage security; the database does not have separate application-level encryption.

Mailie does not upload your mailbox to a central Mailie server. Your mail provider retains its own copy under its own policies. Local copies remain until removed; macOS or other backups may retain additional copies.

Optional AI and external agents

Mailie works without AI services. Enabling them can send mail content outside your Mac:

• Categories: for accounts you enable, sender, subject, date, unsubscribe information and up to 6,000 characters of the latest incoming message are sent through Vercel AI Gateway to the Jev model by TypeSafe AI. This classifies mail and identifies urgency. Attachments are not sent by this feature.
• Summary and Polish: when you invoke these enabled features, conversation content or draft text is sent to OpenRouter and the model provider you select. A summary may include sender, subject and text from up to eight messages.
• External agents: if you enable MCP and permit an account, a connected agent can read permitted mail and attachments and request supported actions. Depending on the agent you use, that information may be processed by its AI provider. Disable access in Settings → Connections to stop future access.

These third parties process received information under their own terms and privacy policies, including their retention and processing locations. Review the services and model settings you select before enabling them. Disabling a feature stops future requests; it does not erase data already received by a provider.

Other external requests

When company-logo downloads are enabled, Mailie looks up sender domains through DNS, published logo hosts and, as a fallback, DuckDuckGo’s icon service. Those services can receive the queried domain and your IP address. Loading remote message images or opening links contacts the relevant servers and may reveal that the message was viewed. Remote message images are blocked unless allowed.

Diagnostics and this website

Optional diagnostics are retained locally in bounded log files. They record app actions, timings, errors and hashed identifiers, excluding mail text and credentials. They are not automatically sent to Marijn; you choose whether to export and share them.

This website has no mail login, advertising, analytics scripts or contact form. Fonts and images are served with the site. Hosting and network providers receive normal request information, such as your IP address, requested URL and browser headers, to deliver and protect the site.

Use and sharing limits

Mailie does not sell Google user data or use it for advertising or to train general-purpose AI models. Data is used for the mail features described above and shared with mail providers, intended message recipients and the optional services you enable. Mailie’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

Your controls and deletion

You can stop synchronisation by disabling an account and revoke Mailie’s Google access in your Google Account connections. Revocation prevents future authorised access but does not delete existing local copies.

To erase local app data completely, quit Mailie and remove its application-support data, related Keychain credentials and any backups you control. This removes local drafts and cached attachments, so preserve anything you need first. Deleting a local cache does not delete mail held by your provider; deleting messages through Mailie may also delete them at the provider. Contact Marijn for help with local deletion or information you have directly shared with him.

Material changes to data handling will be reflected on this page with an updated date.