Privacy Policy for AirgapMail
app.dattara.airgapmailAt Dattara Apps, your digital privacy is our core engineering objective. AirgapMail is built from the ground up as an on-device email cleaner and security vault. This Privacy Policy outlines how AirgapMail handles data, our strict zero-server cloud architecture, and our compliance with Google API Services policies.
Google API Services User Data Policy & Limited Use Disclosure
AirgapMail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1. On-Device "Air-Gapped" Architecture (Zero Cloud Servers)
Dattara Apps does NOT operate, maintain, or utilize any backend servers, intermediate proxies, tracking endpoints, or cloud databases for AirgapMail.
- All email indexing, newsletter detection, category classification, and cleanup rules occur 100% locally on your Android device.
- No email body text, headers, senders, subjects, attachments, or OAuth authentication tokens are ever transmitted to Dattara Apps or any third-party server.
- Authentication and email modification network calls are transmitted over direct, encrypted TLS connections between your Android device and official provider endpoints (such as
https://gmail.googleapis.comor official Microsoft Graph endpoints).
2. Google OAuth 2.0 & Gmail API Scope Usage
AirgapMail utilizes Google OAuth 2.0 (AppAuth PKCE standard) to securely authenticate users directly with Google. We request the following Gmail API scopes:
-
https://www.googleapis.com/auth/gmail.modify(Restricted Scope): Used solely on-device to execute email management actions—such as trashing, archiving, or marking promotional emails and unwanted newsletters—as explicitly commanded by you inside the app interface. -
https://www.googleapis.com/auth/gmail.readonly: Used solely on-device to scan message headers and unsubscribing links to surface clutter metrics and ghost subscription lists locally.
3. Absolute Restrictions: No Selling, No AI Training, No Third-Party Transfer
In accordance with Google Limited Use requirements and our core ethos:
- No Data Transfer: Your email data is never transferred to any third party.
- No Data Selling: We never sell, rent, monetize, or trade your personal data or email contents under any circumstances.
- No AI Model Training: Your email contents, headers, and metadata are NEVER used to train, fine-tune, or seed generalized artificial intelligence (AI) or machine learning (ML) models.
- No Advertising Use: Email data is never accessed, processed, or targeted for advertising purposes.
4. Local Storage & Cryptographic Security
To provide fast local search and offline rule execution:
- AirgapMail maintains a local Room database encrypted with SQLCipher (256-bit AES encryption).
- Cryptographic keys are managed securely by the hardware-backed Android KeyStore System (via AndroidX Security Crypto MasterKey).
- OAuth access and refresh tokens are stored in hardware-encrypted local preferences.
5. Data Retention, Sign-Out, and Deletion
Because all data resides strictly on your local device:
- In-App Sign-Out: Selecting "Sign Out" or "Disconnect Account" immediately revokes OAuth tokens and permanently wipes all local encrypted caches and rules for that account.
- Application Uninstallation: Uninstalling AirgapMail from your Android device instantly and irreversibly destroys all local database tables, encryption keys, and app preferences.
6. Analytics and Optional Ad Services
AirgapMail may incorporate standard Google Mobile Ads (AdMob) or Play Services SDKs strictly for app distribution and optional ad monetization. These SDKs operate independently and have ZERO access to your email accounts, messages, local SQLCipher database, or OAuth tokens.
7. Contact Information
If you have any questions or security inquiries regarding this Privacy Policy or AirgapMail's architecture, please contact our engineering team at:
Dattara Apps Security & Privacy Team
Email: admin@dattara.app
Website: https://dattara.app