What WinMail handles, and where it goes.

This website

This site does not request access to Gmail, has no contact forms, and includes no analytics scripts. If you follow the email link, your mail app opens a message addressed to the developer.

The website hosting provider delivers these pages and may process standard request information as part of that service. This site does not collect information through a separate account or sign-in flow.

Gmail, IMAP, and mail data

Google handles Google sign-in. WinMail uses the Gmail access you authorize to read, organize, and send mail. Vacation settings require a separate permission choice in the app.

WinMail keeps the Google authorization token in the device-only Keychain. It downloads mail to local app storage, including message bodies and attachments. Search data and AI results are also stored in the app’s local data.

WinMail’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For an IMAP account, WinMail connects to the mail provider you configure to receive mail through IMAP and send mail through SMTP. These features depend on the provider’s server settings and support. The account password is stored in the device-only Keychain and is not synced.

Email can contain remote images or other content. When you allow that content to load, your device may contact the sender’s or another third party’s server. That server handles any connection information under its own practices.

Optional on-device AI

AI assistance is optional and uses Apple’s on-device Foundation Models. For sorting and classification, WinMail provides the sender and address, subject, message headers, and a body excerpt. Summaries and Ask use message text.

These features run on the device. The summaries and answers can be incomplete or mistaken, so review them before relying on them. This policy describes WinMail’s processing; it does not make claims about Apple’s broader system telemetry.

Optional iCloud setup and preference sync

Where available, iCloud setup and learned-preference sync is enabled by default and can be switched off separately. It uses your private CloudKit database to sync account addresses and server settings, signatures, templates, rules, saved searches, preferences, sender lists, labels, pins, AI hints, and recent filter actions.

This sync does not include cached message bodies, account passwords, or Google authorization tokens. Downloaded mail and attachments are kept in local app storage. Templates are content you create for reuse; they are separate from downloaded messages.

Your choices and removing an account

• Turn off optional AI assistance in WinMail.
• Switch off iCloud setup and preference sync in WinMail.
• Remove any email account from WinMail. For Gmail, you can also revoke WinMail’s access in your Google Account settings.

Removing an account deletes its local account and mail data, unshared cached files, and stored credentials. For Gmail, WinMail also attempts to revoke the Google token; for IMAP accounts, the saved password is removed from Keychain but is not revoked with the mail provider. Some local action history may remain. Synced iCloud data or backups may also remain, so removal does not guarantee complete deletion from every place.

For privacy questions, email wterry@gmail.com.

Changes to this policy

If this policy changes, the updated date and text will appear on this page. Please review it when you update or continue to use WinMail.