Your connected accounts
MooseMail connects to the email, calendar, and contact providers you choose. Depending on the permissions you grant, it accesses your account identity, messages and attachments, mailboxes and labels, contacts, calendars, events, and provider settings.
The app uses this information to show and search your mail, send messages, organize conversations, manage contacts and events, and carry out actions you request. Changes such as sending a message, moving mail, or editing an event are sent to the relevant provider.
You authorize Google and Microsoft access through their sign-in screens. Other account types may use an app password, API token, or server credentials. Your provider’s policies also apply to data it holds.
On your devices and in iCloud
Downloaded messages, attachments, and search indexes are stored on your devices. MooseMail does not copy your mailbox content to a Diving Moose Studios mail server. Each device fetches mail from your provider independently.
When you enable iCloud sync, MooseMail can sync app data such as to-dos, snoozes, templates, smart folders, favorites, settings, and your account list through your private iCloud database. That data can include text or message references you save in those features. Mailbox content itself is not synced through this database.
Credentials use Apple’s Keychain. Where supported and enabled, credential items can sync through iCloud Keychain. Apple processes iCloud data under its own privacy terms and your account settings.
Spotlight, Siri, and Apple Intelligence
When system mail search is enabled, MooseMail makes message subjects, people, previews, dates, and related mail metadata available to Apple’s system search. Including downloaded message text is a separate option that is off by default.
You can change these options in Settings under Advanced, then Search. Turning system indexing off removes MooseMail’s index. Removing an account also removes its indexed mail. Apple controls how its system features process information and which devices, languages, and regions support them.
MooseMail’s system search integration does not send your mail to a separate third-party AI service. We do not use your mailbox content to train general-purpose AI models.
Optional push notifications
If push for Gmail or Microsoft mail is available in your build and you turn it on, a notification relay receives your installation credential, local account identifier, device notification token, account type, and email address. It uses these details to route a silent signal that asks your device to check for changes.
The relay stores an email-address hash for Gmail routing, opaque identifiers, the device token, subscription validation information, and expiry times. Google’s notification service can send it an email address and a mailbox history identifier. The relay does not receive message content or provider access and refresh tokens.
Turning push off, disabling an account, or removing it requests deletion of that device’s relay registration. Failed cleanup requests can retry, and provider subscriptions can remain until they are deleted or expire. This option is device-specific.
Remote content and external links
Loading an image or other remote content in an email makes a request to its host. That host may receive your IP address and request details. Your remote-image choices control when MooseMail loads that content. Opening a link takes you to a site governed by its own policy.
Google API data and Limited Use
MooseMail’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
We use Google data to provide the features you authorize. We do not sell it, use it for advertising, transfer it to data brokers, or use it to train general-purpose AI models. Human access is limited to the circumstances permitted by Google’s policy, such as your permission to review specific information for support, security needs, or legal obligations.
Information you send us
If you contact us, we receive your email address, message, and any files or details you choose to include. The app’s feedback form sends an email through an account you select. If you include diagnostic information, the form adds technical details about your app, device, account configuration, and sync state.
We use support information to respond, investigate problems, and maintain MooseMail. Our email and support service providers process it for those purposes. Please leave passwords, access tokens, and unrelated private messages out of support requests.
Your choices, retention, and deletion
You can remove an account in MooseMail to remove its local account data, stored credentials, and indexed mail from that device. You can also revoke access in your provider’s account settings. Removing an account from MooseMail does not close your provider account or delete the mailbox it holds.
Review each device and your iCloud settings when removing synced app data. Deleting the app alone may not remove information held by your provider, iCloud, or device backups. Local-only messages and attachments may be lost when their local copies are removed.
We retain support correspondence as needed to handle your request, maintain security, and meet legal obligations. You can ask us to access, correct, or delete personal information we hold about you. We may need to verify the request and may retain information that the law requires us to keep.
Your location may give you additional privacy rights, including the right to object to or restrict certain processing, request a portable copy, or complain to a data protection authority. Contact us to exercise rights that apply to information we hold. For data held only by your mail provider or Apple, use that provider’s controls or contact it directly.
This website
Vercel hosts this site and provides Web Analytics. Hosting requests can include IP addresses and browser headers. Analytics reports show aggregate information such as page views, referring sites, approximate location, and browser and device details. Analytics does not use third-party cookies or track visitors across websites.
Vercel uses a request-derived hash to distinguish visits and discards visitor session identifiers after 24 hours. This does not mean aggregate reports are deleted after 24 hours. See Vercel’s analytics privacy documentation for details.
The site has no advertising trackers, customer accounts, or submission forms. Its analytics is separate from your mail accounts and does not receive mailbox content.
Children
MooseMail is not directed at children under 13. We do not knowingly collect personal information from children through this website or support. If you believe a child has sent us personal information, contact us so we can address it.
Policy updates
We update this page when our practices change and show the effective date above. Where required, we will provide notice and obtain consent before using information for a new purpose.
Contact us
For privacy questions or requests, email hi@moosemail.app.
Diving Moose Studios, LLC
MooseMail