MoaMailPrivacy policy
Summary
MoaMail does not collect, store, sell, or share any of your data. The developer has no server that your mail, contacts, or sign-in details pass through. Everything the app reads stays on your phone, and the app talks only to your own mail provider.
What the app accesses, and why
- Your mail (messages, folders, attachments, sender and recipient addresses): read from your mail provider so the app can show it to you, and changed only when you act (mark read, move, delete). This is the app's only purpose.
- Your account name and email address: shown in the app so you can tell accounts apart.
- Sign-in tokens: issued by your mail provider when you sign in. They are encrypted with a key kept in the Android Keystore and never leave the phone. The app does not see or store your Microsoft password.
MoaMail never sends email. It has no ads, no analytics or crash reporting services, and no third-party tracking code.
Who the app talks to
- Microsoft, for Outlook.com accounts: sign-in at login.microsoftonline.com and mail through the Microsoft Graph API at graph.microsoft.com. Microsoft's handling of your account is covered by the Microsoft Privacy Statement.
- Google, for Gmail accounts once supported: mail through Gmail IMAP at imap.gmail.com, using an app password you create. Google's handling is covered by the Google Privacy Policy.
- Image and link hosts, only when you choose. Remote images in a message are blocked until you tap Load images; at that point the image servers named in that message are contacted. A link opens in your browser only after you confirm it in the link check dialog.
No data is sent to the developer or to any other party.
Data stored on your phone
The app keeps only what it needs to work: your account list, the encrypted sign-in tokens, a cached copy of your folder list, small markers for new-mail notifications, your settings (hidden folders, swipe actions, app lock), and attachments you open, which are kept briefly in the app's cache and cleaned up automatically. Message lists are loaded from your provider when you open the app. All of this lives in the app's private storage and is excluded from Android cloud backup.
Permissions
- Internet: to reach your mail provider.
- Notifications: to tell you about new mail. On the lock screen, a notification shows only how many messages arrived.
- Biometric or device lock (optional app lock): handled by Android. The app only receives a yes or no result and never gets your fingerprint, face data, or PIN.
Deleting your data
- Remove an account on the app's Accounts screen: its sign-in tokens, folder list, and related settings are deleted from the phone.
- Uninstall the app: Android deletes all of its data, including every account and cache.
- Optionally, revoke the app's access to your Microsoft account at account.live.com/consent/Manage, or delete a Gmail app password in your Google Account security settings.
Your mail itself stays with your provider; removing MoaMail does not delete any mail from your mailbox.
Security
All connections use HTTPS or TLS. Tokens are encrypted on the device. Optional app lock and screenshot blocking protect mail on the phone itself.
Children
MoaMail is not directed at children under 13 and does not knowingly collect data from anyone, including children.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.
Contact
Questions about privacy: moamail@cslab.net