Privacy policy

Effective 11 October 2026. Last updated 11 October 2026.

Who we are

Kuverta is a mail app for macOS published by Daryl Bleach. In this policy, “we” means Daryl Bleach. For any privacy question or data request, contact hello@kuverta.app.

What the app does with your mail

Kuverta connects directly from your Mac to the email providers you add: Google (Gmail), Microsoft (Outlook.com, Hotmail and Microsoft 365), Apple (iCloud Mail) and AOL. It uses those providers’ own mail servers and interfaces. We don’t run a server that receives, stores, scans or relays your mail, so we never see it.

Your provider’s own privacy policy covers what it does with your mail and account.

What stays on your Mac

• Mail cache. Recent mail, drafts, folders and labels, a search index, rules, smart views and settings are stored in ~/Library/Application Support/Kuverta. This is what lets Kuverta open quickly and search offline. Files are created with private permissions. They are not separately encrypted, so they rely on your Mac login and FileVault.
• Passwords and keys. App passwords, sign-in tokens for Google and Microsoft, and any AI keys you add are stored in a single item in your macOS Keychain. macOS asks your permission before Kuverta can read it.
• Copied codes. When you copy a sign-in code, Kuverta marks it so clipboard history apps can skip it, and by default clears it from the clipboard after 90 seconds if you haven’t copied anything else.

When Kuverta connects to anything else

• Signing in. You can sign in with an app password from your provider, or with Google or Microsoft in your web browser. Browser sign-in happens on Google’s or Microsoft’s own pages, so Kuverta never sees your password. Kuverta stores the sign-in token it receives in your Keychain.
• Remote images. Off by default. If you load images for an email or a sender, those images are fetched from the sender’s servers, which can see that the email was opened, along with your IP address. Kuverta removes known tracking pixels either way, and blocks scripts in HTML mail.
• AI, only if you set it up. See AI features below. Nothing goes to an AI provider unless you add your own key (or a local Ollama model) and choose Generate.
• Updates. Kuverta checks kuverta.app for a signed update only when you choose Check for Updates or turn on automatic checks. Like any web request, this shares your IP address and app version with our host.
• Links in emails open in your default browser.

Google user data (Gmail)

This section explains what happens to your data when you connect a Gmail or Google Workspace account to Kuverta with Sign in with Google.

What Kuverta accesses

Kuverta asks Google for one permission, https://mail.google.com/, which Google describes as “Read, compose, send, and permanently delete all your email from Gmail”. It is the permission Google requires for any mail app that connects to Gmail over IMAP and SMTP, the standard mail protocols Kuverta uses. With it, Kuverta works with:

• your messages, including headers (sender, recipients, subject, date), message text, HTML and attachments;
• your Gmail labels and folders, and each message’s read, starred and label state;
• your drafts, and the messages you send.

Kuverta does not ask for your contacts, calendar, Drive files or Google profile through Google, and it does not use Google sign-in to create an account with us.

How Kuverta uses it

Only to provide the mail features you see and use in the app:

• showing your inbox, labels and conversations, and searching them;
• opening messages and downloading attachments you choose to open or save;
• writing, replying to, forwarding and sending mail, including Undo Send and scheduled sending, which wait on your Mac and then send through Google’s mail servers;
• archiving, labelling, marking as read, starring, moving to Trash and, when you choose Empty Trash, permanently deleting messages;
• pulling one-time sign-in codes out of messages so you can copy them, and showing notifications if you turn them on.

All of this runs in the app on your Mac. Kuverta does not use your Gmail data for advertising, does not sell it, does not use it to build profiles, and does not use it to train or improve AI or machine learning models.

Where it is stored

• On your Mac only. Kuverta keeps a cache of recent messages, drafts, labels and a search index in ~/Library/Application Support/Kuverta, with file permissions that only your macOS user account can read. The cache is not separately encrypted by Kuverta; it is protected by your Mac login and, if it is on, FileVault disk encryption.
• Sign-in tokens in the Keychain. The access and refresh tokens Google issues are stored in your macOS Keychain, which encrypts them, never in a plain file.
• Never on a Kuverta server. There is no Kuverta server. Your Gmail data travels only between your Mac and Google’s own servers (imap.gmail.com, smtp.gmail.com and Google’s sign-in service), encrypted with TLS. We never receive, store or see it.

Sharing

We don’t share your Google user data with anyone, because we never have it. The only time any of it leaves your Mac for somewhere other than Google is when you choose to send it: for example when you send an email, load remote images in a message, or run an AI action with a provider you set up yourself (see AI features). Nobody at Kuverta can read your mail.

Revoking access and deleting your data

• In Kuverta: open Settings, then Accounts, select the Gmail account and choose Remove account. Kuverta deletes that account’s cached mail, search index and saved Google tokens from your Mac.
• In your Google Account: go to myaccount.google.com/connections (Third-party apps and services), choose Kuverta and remove its access. Kuverta can then no longer reach your Gmail, even on a Mac where the app is still installed.
• To remove everything, also follow the steps in Removing your data.

Limited Use

Kuverta’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Kuverta also follows the Google Workspace User Data and Developer Policy.

AI features

AI is optional and off by default. Kuverta has no AI service of its own and sends nothing to any AI provider until you add your own API key for OpenAI, Anthropic (Claude) or Google (Gemini), or point it at a local Ollama model on your own Mac, and then choose Generate.

• What is sent. When you open the mail assistant on a conversation, it shows you the exact text it will send. For a summary, action items or a reply draft, that is up to the 30 most recent messages in the conversation, each with its date, sender, subject and roughly the first 2,000 characters of its text, with quoted earlier replies removed. For a rewrite, it is the draft you are writing. It also includes the task you picked and, if you saved one, your writing-style note. Attachments are not sent. You can edit or redact the text before you choose Generate.
• Where it goes. Straight from your Mac to the provider you chose, using your own key: OpenAI (api.openai.com), Anthropic (api.anthropic.com) or Google (generativelanguage.googleapis.com). With Ollama it goes to the model on your own Mac and never leaves it. Nothing goes through a Kuverta server.
• The provider’s terms apply. Your agreement with that provider decides how it handles what you send, including whether it keeps it or uses it for training. For example, Google’s terms for the free tier of the Gemini API allow it to use content to improve its products in some regions. Check your provider’s terms before using AI on mail.
• Nothing automatic. AI never runs in the background, never reads your inbox on its own, and never sends email. A reply draft is only used if you choose Use reviewed draft, and you still send it yourself.
• Your keys are stored in your Keychain and sent only to the provider they belong to.

Contacts and Calendar

If you allow it, Kuverta reads your Contacts to suggest addresses while you write, and adds events to your Calendar when you ask it to. Both stay on your Mac. You can withdraw access at any time in System Settings, Privacy and Security.

Notifications

Notifications are off until you turn them on, for each account. They are delivered by macOS on your Mac. Sender and subject previews are hidden unless you choose to show them. Replying from a notification creates a draft for you to review; it never sends on its own.

What we don’t do

• We don’t collect analytics or usage data from the app.
• We don’t include advertising, tracking or crash-reporting code.
• We don’t require a Kuverta account.
• We don’t sell or share your data, because we don’t have it.

Diagnostics

If something goes wrong, Settings, Advanced, Export diagnostics saves a report to a file on your Mac, with private details redacted. Nothing is sent anywhere. You decide whether to share it with us, for example by email.

This website

kuverta.app uses no cookies, no analytics and no third-party scripts or fonts. The site and downloads are hosted by Cloudflare, which processes standard request data, such as IP address and browser type, to serve them and keep them secure.

Removing your data

Remove an account in Settings, Accounts, and Kuverta deletes its cached mail and saved sign-in from your Mac. To remove everything, quit Kuverta, delete the app, delete ~/Library/Application Support/Kuverta, and remove the Kuverta item from Keychain Access. You can also revoke Kuverta’s access from your Google account (myaccount.google.com/connections) or Microsoft account settings, or delete the app password you created. Because we hold none of your data, there is nothing for us to delete on our side; if you have emailed us, ask and we will delete that correspondence.

Children

Kuverta is a general-purpose mail app and isn’t aimed at children.

Changes

If this policy changes, we’ll update this page and the date at the top. If a change affects what leaves your Mac, we’ll say so in the release notes too.

Questions

Email hello@kuverta.app.