Privacy Policy

Account information

• If you sign in with Apple or Google: your name, email address, and a unique account identifier from that provider. If you use Apple's "Hide My Email," we receive a relay address instead.
• If you sign up with email: your name, email address, and a password, which is stored in hashed form.

Connected mailbox data

• When you connect a Gmail or Microsoft mailbox, we receive an OAuth access token through the provider's own sign-in page. We never see your mailbox password.
• We use this access to analyze message metadata and content, such as senders, links, attachments, and headers, to detect phishing, scams, and other threats.
• We store scan results (threat type, sender, date) but not message bodies.

Scan and usage data

• Results of the scans you run, your app settings, and basic usage events, such as which features you use.

Device and technical data

• Device model, OS version, app version, language, crash logs, and diagnostic data.

• To provide the Service: authenticate you, scan connected mailboxes, and show you results and alerts.
• To maintain security, prevent fraud and abuse, and fix bugs.
• To improve detection quality and app performance.
• To communicate with you about your account, security notices, and support requests.

We do not sell your personal information. We do not use your email content for advertising, and we do not use it to train generalized AI models.

We share information only:

• With service providers who help us run the Service, such as cloud hosting, crash reporting, and analytics. They are bound by contracts to protect it.
• When required by law, or to protect the rights, safety, or property of our users or others.
• In a business transfer such as a merger or acquisition. In that case, this policy continues to apply to your data.

• Account data is kept while your account is active.
• Mailbox access tokens are kept until you disconnect the mailbox or delete your account.
• Scan results are kept for 30 days.

When you delete your account, we delete your personal data within 30 days, except for data we must keep by law.

• Disconnect a mailbox at any time in Settings. You can also revoke access directly in your Google Account or Microsoft account.
• Delete your account in the app at Settings → Delete Account, or by emailing tessemat@ttechnos.com.
• Access, correct, or export your data by emailing tessemat@ttechnos.com.

Depending on where you live (for example under the EU/UK GDPR or California's CCPA/CPRA), you may have additional rights, including the right to object, restrict processing, or lodge a complaint with a data protection authority.

We use encryption in transit (TLS) and at rest, limit access to personal data, and store tokens securely. No system is completely secure, but we work to protect your information.

The Service is not directed to children under 13 (or 16 in the EEA). We do not knowingly collect their data. If you believe a child has provided us data, email tessemat@ttechnos.com and we will delete it.

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards, such as Standard Contractual Clauses.

We may update this policy from time to time. We will notify you of material changes in the app or by email, and update the "Last updated" date above.