Privacy Policy

Last updated: November 2026

Mailzo is a free, open-source email app for the Mac made by Grayic LLC ("Grayic", "we", "us"). This policy explains what information Mailzo handles, where it goes, and the choices you have. It covers:

  • The Mailzo app for Mac
  • The optional Mailzo account, which lets you use Mailzo on more than one device and share an inbox with a team
  • Our website, getmailzo.com

We wrote this in plain English. If anything is unclear, email hello@getmailzo.com.

The short version

  • Your email stays on your Mac. Mailzo downloads your mail straight from your email provider (such as Gmail, Outlook or iCloud) and stores it on your Mac, encrypted. It never passes through our servers.
  • You don't need an account. You can connect an inbox and use Mailzo without ever giving us your email address.
  • We don't sell your data, show ads, or track you. The app has no analytics or tracking.
  • AI is off until you turn it on. When you use AI, it runs on your Mac (Apple Intelligence) or goes straight from your Mac to the AI service you chose. It never goes through us. Encrypted emails are never sent to AI.
  • You can check all of this. Mailzo is open source, so anyone can read the code.

1. The Mailzo app

What stays on your Mac

Everything you see in the app is stored only on your Mac:

  • Your emails, attachments, drafts, contacts, calendar events, tags, filters, snoozes, reminders, follow-ups and settings
  • The list of inboxes you've connected

The mail database is encrypted on your Mac. Your email passwords and sign-in tokens are kept in the Mac's Keychain, never in the database.

Who the app talks to

To work, the app connects directly to these services. None of these connections go through Grayic, except the update check.

ServiceWhyWhat it receives
Your email provider (e.g. Google, Microsoft, Apple, or your own mail server)To download, send and organise your emailYour login and the actions you take, as with any email app
Your calendar provider, if you connect oneTo show and update your calendarYour calendar events
Mozilla's public email settings directory (autoconfig.thunderbird.net)To find your email server settings automaticallyOnly the part of your address after the @ (for example, gmail.com)
GravatarTo show a sender's pictureA scrambled (hashed) version of the sender's address, never the address itself
DuckDuckGo iconsTo show a company's logoOnly the company's website domain
The AI service you choose, if you turn AI onSee section 3Only what you ask it to work on
updates.getmailzo.com (Grayic)To check for and download new versions of the appYour app version and the usual technical details of an internet request, such as your IP address

You can turn off sender pictures and logos in Settings › Privacy.

Scheduled sending and follow-ups

Emails you schedule, and follow-ups you set up, are sent from your Mac. They go out while Mailzo is running. Nothing is stored on our servers to send them for you.

Emails you read

Many emails contain hidden "tracking pictures" that tell the sender when you opened them. Mailzo blocks known trackers and tells you which ones it blocked. It also removes tracking codes from links. You can choose to hide all pictures by default in Settings › Privacy.

Encrypted email

If you use encrypted email (OpenPGP), your private keys stay on your Mac. Encrypted emails are never sent to any AI service.

2. The optional Mailzo account

You only need an account if you want to use Mailzo on more than one device or share an inbox with a team. It's free. If you create one, our account server handles:

WhatWhyCan we read it?
Your main email addressTo send you sign-in codes and important account noticesYes
The names of your devices (e.g. "Work MacBook")So you can see and remove devicesYes
Your encrypted vault: your inbox list, email passwords and synced settings such as rules, snoozes and contactsSo your other devices can use themNo. It's encrypted with a key only your devices hold. We can't open it.
Team information (who is in the team, who's handling which email, private notes)So your team stays in syncNo. It's encrypted with a team key we never see. Conversations are identified only by scrambled numbers.

Your emails themselves are never sent to the account server. Each team member's Mac downloads mail directly from the shared inbox.

We use Emailit to send sign-in codes and account emails, so it receives your email address and the email we send you.

3. AI

AI in Mailzo is optional and off until you turn it on in Settings › AI. You choose where it runs:

  • Apple Intelligence, on your Mac. Nothing leaves your device.
  • Your own AI key or plan (for example from Anthropic, OpenAI, Google, DeepSeek or Groq). Requests go straight from your Mac to that company, under your own account and their privacy terms. Grayic never sees them.

Mailzo sends the AI only what the feature needs: for example, one email to summarise, or a short note on how you write so replies sound like you. AI never sends an email by itself. Encrypted emails and text hidden inside emails are never sent to AI.

If you connect an outside AI app (such as Claude on your Mac) through Settings › MCP, it talks to Mailzo on your Mac only. You decide what it may do with a switch for each action, and it must ask before sending any email unless you turn that check off. You can see everything it did in Settings › AI activity.

See our AI and Your Data page for more.

4. Our website

Our website doesn't use tracking cookies or analytics. See our Cookie Policy for details.

If you email us or sign up for updates, we keep your email address and message so we can reply.

5. Why we're allowed to use your information

Where privacy laws such as the GDPR apply, we rely on:

  • Providing the service you asked for (contract): your account, sign-in codes, team sync, support
  • Our legitimate interests: keeping the account server and updates secure and preventing abuse
  • Your consent: for example, turning on AI or connecting an outside AI app. You can withdraw it at any time in Settings.

6. How long we keep things

  • App data stays on your Mac until you delete it. Disconnecting an inbox deletes its saved mail from your Mac. You can also clear saved mail in Settings › Storage, or remove the app.
  • Account data stays until you delete your account in the app. When you do, we delete it from our servers within [30] days.
  • Support emails are kept for up to [2 years].

7. Your rights

Depending on where you live, you may have the right to:

  • See the information we hold about you
  • Correct it
  • Delete it
  • Get a copy of it to take elsewhere
  • Object to or limit how we use it
  • Withdraw consent you've given

Most of your data is on your own Mac, so it's already in your control. For anything on our account server, email hello@getmailzo.com. We'll reply within 30 days. We may need to confirm it's really you first. You can also complain to your local data protection authority.

California and other US states: we don't sell or share your personal information for advertising, and we don't use it to profile you. You won't be treated differently for using your privacy rights.

8. Sharing

We share information only:

  • With the service providers listed on our Service Providers page, who work for us under contract and may use it only to provide their service
  • If the law requires it, such as a valid court order. Where we're allowed to, we'll tell you first. We can't hand over your vault or team data in readable form, because we can't open them.
  • If Grayic is sold or merged. In that case this policy would still apply to your information, and we'd tell you before anything changed.

We never sell your information.

9. International transfers

Grayic is based in the United States. If you create an account, your account information is processed in Germany. Where needed, we use standard legal safeguards such as the EU Standard Contractual Clauses.

10. Children

Mailzo isn't meant for children under 16. We don't knowingly collect information from them. If you think a child has given us information, email hello@getmailzo.com and we'll delete it.

11. Changes

If we change this policy in a way that matters, we'll update the date at the top and tell you in the app or by email before the change takes effect.