Our privacy promise
Your mailbox information stays between your device and the email provider you choose. Simply Sorted Mail does not receive or store a copy outside your device. We never sell your information. We do not show targeted advertising, build advertising profiles, or track you across other companies’ apps and websites.
Information the app accesses
Account and connection information
When you connect a Microsoft email account, the app receives the Microsoft account identity needed to show which mailbox is connected and authorization tokens from Microsoft. When you connect iCloud Mail, you provide an email address, sign-in username, and Apple app-specific password. Existing Gmail testing connections receive the equivalent account identity and authorization tokens from Google. Simply Sorted Mail never asks for or receives your regular Microsoft, Gmail, or Apple Account password.
Email information
To provide its features, the app accesses mailbox labels or folders and message information such as message identifiers, sender and recipient headers, subject, date, preview text, and unsubscribe headers. A message body is requested when you choose to read that message or when it is needed for a feature you deliberately open, such as preparing a calendar preview.
Activity stored on your device
The app stores account labels, protected message-header caches, sorting and display preferences, the last selected account, reviewed action totals, and unsubscribe history locally on your device. Full message bodies are not kept in the persistent mailbox cache.
Support messages
If you email support, we receive the address and information you personally include in that message. Simply Sorted Mail does not automatically attach mailbox contents to a support request.
Microsoft user data
For Microsoft email accounts, including Outlook.com, Hotmail, and MSN, Simply Sorted Mail requests User.Read and Mail.ReadWrite. These permissions identify the connected mailbox and provide the access needed to display, organize, move, archive, and place messages in recoverable Deleted Items only after you review and approve an action. The app does not request permission to send mail.
Microsoft authenticates you through its secure sign-in page. Microsoft mail content and approved mailbox instructions travel directly between the app on your device and Microsoft Graph over HTTPS/TLS. The refresh credential is protected in Apple Keychain, and disconnecting the account removes the local connection.
How information is used
Mailbox information is used only to provide features you request: displaying and grouping mail, searching and sorting, showing folders, reading selected messages, preparing reviewed mailbox actions, identifying standardized unsubscribe options, preparing a reply for Apple Mail, and preparing a calendar event for your approval.
Refreshing and viewing mail are read-only. Moving messages, creating folders, placing messages in recoverable Trash, rescuing messages from Junk or Spam, and using a supported one-click unsubscribe mechanism happen only after you mark the action, review it, and approve it.
Google user data
For Gmail accounts, Simply Sorted Mail requests the single Gmail modify permission. This permission includes the read access needed to display and organize your mailbox and the limited write access needed to perform only the mailbox actions you review and approve. The app does not use Gmail’s API to send email or permanently delete messages. Replies are handed to Apple Mail, where you review the final From, To, subject, and message and personally choose whether to send.
Simply Sorted Mail’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not used for advertising, credit decisions, surveillance, or training generalized artificial-intelligence or machine-learning models.
How sensitive Google user data is protected
Simply Sorted Mail uses the following technical and organizational safeguards to protect Gmail account information and message data:
- Encryption in transit: The app communicates directly with Google Sign-In and the Gmail API over HTTPS/TLS. Gmail content and approved mailbox instructions travel only between the app on the user’s device and Google’s services.
- OAuth instead of passwords: Google authenticates the user and issues authorization tokens through its official Google Sign-In software. Simply Sorted Mail never receives or stores the user’s Gmail password. Google Sign-In manages its authorization credentials in secure iOS storage.
- On-device processing: Gmail message details are processed on the user’s device. Simply Sorted Mail does not receive or store a copy of that mailbox information outside the device, and the data is not uploaded to an analytics or advertising service. Gmail message content is not written to the app’s persistent mailbox cache.
- Protected local storage: Local app data is isolated inside the iOS application sandbox. Where the app keeps a persistent mailbox-header cache for an Apple Mail connection, that cache uses complete iOS file protection and excludes full message bodies.
- Least-privilege access: Gmail access is limited to the gmail.modify permission. Refreshing and viewing remain read-only in the app. A mailbox change is sent to Gmail only after the user marks the messages, reviews the proposed action, and gives final approval.
- User control and revocation: Disconnecting Gmail revokes the app’s Google authorization and removes Gmail messages from the app’s current view. The user can also revoke access at any time from the security settings of their Google Account.
- No background or permanent deletion: Simply Sorted Mail does not make Gmail changes during refresh or in the background. Trash actions use Gmail’s recoverable Trash; the app does not permanently purge messages.
When information is shared
We do not sell or rent your information. Data is transmitted only as needed to provide actions you request:
- Microsoft: Microsoft identity services and Microsoft Graph authenticate and operate a connected Outlook.com, Hotmail, MSN, or other supported Microsoft mailbox.
- Google: Google Sign-In and Gmail APIs authenticate and operate a connected Gmail mailbox.
- Apple: Apple’s iCloud Mail servers operate a connected Apple mailbox. Apple Keychain protects credentials, Apple Mail controls prepared replies, and Apple Calendar receives only events you approve.
- Email senders: If you approve a standardized one-click unsubscribe request, the app contacts the HTTPS address supplied in that message. Other unsubscribe links or prepared unsubscribe emails are opened for you to complete personally.
- Legal and safety needs: We may disclose information received through support only if required by law or reasonably necessary to protect users, the public, or the service.
Security and device storage
Apple app-specific passwords and Microsoft refresh credentials are stored in Apple Keychain, and Google authorization credentials are managed in secure storage by the official Google Sign-In software. Protected local cache files use iOS file protection. Original-format email is displayed with scripts, forms, downloads, remote navigation, remote images, and tracking resources blocked; embedded message images may still be shown.
No security method can promise absolute protection. Keep your device and connected email accounts secured with a strong passcode and two-factor authentication.
Calendar and replies
Calendar access is write-only. Simply Sorted Mail can add an event only after you review and approve it; the app cannot read your existing calendar events. Reply and Reply All prepare plain-text content for Apple Mail. Apple Mail controls the final composer and delivery, and Simply Sorted Mail never sends a reply in the background.
Retention, disconnection, and deletion
Local account information and protected caches remain on your device while you use the app. Disconnecting an account removes its stored connection from Simply Sorted Mail. You can also revoke Microsoft access from your Microsoft Account, revoke Google access from your Google Account, or revoke an Apple app-specific password from your Apple Account. Deleting the app removes its app-data container; operating-system Keychain behavior is controlled by Apple, so disconnecting and revoking provider access are the most reliable ways to end access.
Support emails are retained only as reasonably necessary to answer your request, maintain support records, prevent abuse, or meet legal obligations. You may request deletion of a support conversation by contacting us.
Children’s privacy
Simply Sorted Mail is a general-audience email utility and is not directed to children under 13. We do not knowingly collect children’s personal information through a developer-operated account or analytics service.
Changes to this policy
We may update this policy when the app’s features or legal requirements change. The current version and effective date will always be posted here. Material changes to how Google user data is used will be disclosed before those changes take effect.
Contact us
Questions, privacy requests, or support needs can be sent to simplysortedmailsupport@gmail.com.