Privacy Policy
Last updated: March 30, 2026
TL;DR: InboxSweep processes your emails entirely on your Mac. We have no servers that store your email. We can't read your mail because it never reaches us.
Overview
InboxSweep is a native macOS application that helps Gmail users organize and clean up their inboxes. We are committed to protecting your privacy. This policy explains what data we access, how we use it, and how we protect it.
What Data We Access
InboxSweep accesses your Gmail account data through Google's OAuth 2.0 authentication with the following permissions:
- Read email messages — to scan, categorize, and display your emails
- Modify email labels — to move emails to Gmail Trash when you choose to archive or remove them
- Import messages — to restore previously archived emails back to your Gmail inbox
How We Use Your Data
On Your Device Only
All email processing happens locally on your Mac. Your emails are never sent to our servers or any third-party service. Email classification uses on-device AI (Apple's NLEmbedding framework) — no email content is transmitted anywhere. Archived emails are stored as local files on your Mac's hard drive.
What We Do
- Read your email metadata (sender, subject, date, labels) for categorization
- Read email content for display within the app
- Download raw email files (.eml) to your Mac when you choose to archive
- Move emails to Gmail Trash when you choose to archive or remove them
- Restore archived emails to your Gmail inbox when you request it
What We Never Do
- We never send your email content to any external server
- We never permanently delete your emails (all removals go to Gmail Trash, recoverable for 30 days)
- We never sell, share, or transfer your data to third parties
- We never store your data on any server — everything stays on your Mac
- We never use your data for advertising, profiling, or analytics
Optional Cloud Features
If you choose to enable "Azure Embeddings" in Settings, email sender names, subject lines, and the first 200 characters of previews are sent to your own Azure endpoint for AI classification. This is opt-in only and disabled by default.
Data Storage
| Data | Location | Encrypted |
|---|---|---|
| OAuth tokens | macOS Keychain | Yes (system encryption) |
| Archived emails (.eml files) | ~/Library/Application Support/InboxSweep/ | FileVault |
| Email metadata (SQLite) | ~/Library/Application Support/InboxSweep/ | FileVault |
| Classification results | Local SQLite database | FileVault |
Data Retention
- Archived emails remain on your Mac until you manually delete them from the Archive
- Scanned email cache is stored locally and updated each time you scan
- OAuth tokens are stored in the macOS Keychain and removed when you sign out
- Uninstalling the app removes all application data
Your Rights
You can at any time:
- Sign out — removes all stored authentication tokens
- Delete your local archive — removes all locally stored emails
- Revoke access — go to myaccount.google.com/permissions to revoke InboxSweep's access to your Gmail
- Request data deletion — uninstalling the app removes all local data. No server-side data exists to delete.
Google API Services User Data Policy
InboxSweep's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Children's Privacy
InboxSweep is not directed at children under 13. We do not knowingly collect personal information from children.
Changes to This Policy
We may update this privacy policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this policy.
Contact
For questions about this privacy policy or InboxSweep's data practices:
Email: Click to reveal email
Team: InboxSweep Team