Your mail and your password

Kurir connects straight from your device to your mail provider over IMAP and SMTP, and to the calendars you add over CalDAV or as .ics links. Your app password, or the sign-in Google gives Kurir, is stored in your device's keychain. Mail is kept on your device so you can read it offline.

Google accounts

When you sign in to a Gmail account with Google, Kurir asks Google for access to your mail (to read, send, file and delete it), to your Google Calendar (to show, add and change events) and to your email address (to know which account signed in). Kurir uses this access only to show and handle your mail and your calendar in the app, on your behalf, as you use it.

The mail and events Kurir fetches, and the sign-in Google hands back, are stored on your device, the sign-in in the keychain. They go straight between your device and Google. The developer never receives them and cannot read them. If you set up Kurir Push, the setup code you copy from the app carries the same sign-in to the Mac or server you install Kurir Push on, so that it can watch your mail and sync your calendar. That copy stays on your Mac or server.

Data from your Google account leaves your device and Google only in the ways this policy describes, and only for a feature you have turned on: a new-mail notification that goes through the relay (the sender and the subject, see Notifications), and the mail an AI feature works on, sent to the AI provider you connected (see AI features). Kurir does not sell data from your Google account, does not use it for advertising, and does not use it to develop, improve or train AI or machine-learning models.

Signing out in Kurir removes the account, its mail and its sign-in from the device. You can withdraw Kurir's access at any time in your Google Account, under Third-party apps and services.

Kurir's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your settings

Your screening choices, rules, snoozes, contacts, groups, collections and other settings are kept in hidden folders in your own mailbox, so your iPhone and Mac agree without a server in between. Kurir also saves a daily backup of them there. Your mail provider stores these folders like the rest of your mail. Turn on encryption and they are sealed with a passphrase only you know.

Notifications

When Kurir Push runs, on your Mac or on a server you install it on, new-mail notifications go through a relay the developer runs at kurir-notify.arvidson.io, hosted by Vercel, on their way to Apple's Push Notification service. Each one carries the sender's name or address, the subject, an identifier for the thread, a link into the app, your unread count and your device's push token. The relay passes it on and stores nothing, and it does not log what a notification says. The hosting provider may keep standard request logs, such as the IP address and time, for a short while.

Without Kurir Push, your iPhone checks for new mail itself and shows notifications without the relay.

AI features

AI features are off until you connect your own Claude Code subscription in Settings > AI model. Then AI Rules send each mail they judge (your rule, the sender, the subject, the date and the text) to Anthropic, and Generate draft sends the mail you answer and recent mail with that sender when you tap it. This happens under your Anthropic account and Anthropic's terms. If you run Kurir Push yourself, you can set it up with another provider instead, and the same mail goes to that provider. None of it reaches the developer.

AI assistants (MCP)

If you turn on MCP on your Mac or run Kurir Push, assistants you give a token can read, file and draft your mail, and read and change your calendar and contacts. The server runs on your own Mac or server, and you can revoke a token at any time.

Images in mail

Remote images in a mail load from the sender's servers only as your setting allows. Images that report when you open a mail are blocked.

Purchases

Subscriptions are sold and handled by Apple. The developer does not receive your name or payment details.

Crash reports

If you choose to share analytics with app developers in your device settings, Apple passes crash reports and similar diagnostics to the developer. They contain no mail.

Your rights

The only personal data the developer handles is what passes through the notification relay, and for that the developer is responsible under the GDPR. Your mail is a matter between you and your mail provider. For questions or requests, write to carl-fredrik@arvidson.io. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

Changes

If this policy changes, the new version is published on this page with a new date.