Privacy Policy

01Who we are

Notable Mail (“the app”) is made by Khon Labs (“we”, “us”). This policy explains what information the app handles, where it goes, and the choices you have. It also covers this website and any messages you send us.

We built Notable Mail so that we don’t need your data to run it. Most of this policy is therefore about what happens on your own Mac, not about what we collect.

02What we don’t collect

We do not collect, receive, store or have access to:

• the content of your email, including messages, attachments, drafts and search queries;
• the people you correspond with or their addresses;
• your passwords, app-specific passwords or sign-in tokens;
• usage analytics, crash analytics, advertising identifiers or your location.

The app does not contain third-party analytics, advertising or tracking software.

03Data stored on your Mac

To work quickly and offline, the app keeps the following on your Mac only:

• Account details — the email address and display name of each account you add.
• Mail — messages, folders and labels, and attachments you open, stored in a local database in the app’s container.
• Search index — a full-text index of your mail so you can search offline.
• Pending work — drafts, messages waiting to be sent, and changes waiting to sync.
• Preferences — settings such as whether to load remote content and your undo send delay.

This data is protected by macOS like other files in your user account. If you use Time Machine or another backup tool, it may be included in your backups.

04Passwords and sign-in

iCloud Mail requires an app-specific password, which you create with Apple. The app stores it in the macOS Keychain and uses it only to connect to Apple’s mail servers.

Gmail uses Google’s own sign-in page (OAuth 2.0 with PKCE). The app never sees your Google password. Google gives the app a refresh token, which is stored in the macOS Keychain; short-lived access tokens are kept in memory only.

05Who the app talks to

The app connects directly from your Mac to:

• Apple — imap.mail.me.com and smtp.mail.me.com, to sync and send iCloud mail;
• Google — accounts.google.com, oauth2.googleapis.com and gmail.googleapis.com, to sign in, sync and send Gmail.

These connections are encrypted with TLS. Your use of each provider is also governed by that provider’s own privacy policy.

Remote content in messages

Many emails include images hosted on the sender’s servers. Loading them can tell the sender when you opened a message, your IP address and your approximate location. The app blocks remote content by default. If you choose to load it — for one message or in Settings — the app requests those images from the sender’s servers, and what they collect is governed by the sender, not by us.

Links you open from an email are handled by your web browser.

06Google user data

Notable Mail’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you add a Gmail account, the app asks Google for one permission: https://www.googleapis.com/auth/gmail.modify. It is needed to show your mail and to carry out the actions you take in the app. It does not allow permanent deletion of messages.

What the app accesses

• Your Gmail address, to identify the account in the app.
• Your messages and drafts — headers (sender, recipients, subject, date), bodies and attachments — so you can read, search and reply to them.
• Your labels and each message’s labels, read and starred state, so mailboxes and flags show correctly.
• Your send-as addresses, so you can choose which address a message is sent from.

How it is used

Only to provide the email features you use in the app:

• showing, searching and syncing your mail;
• sending messages and saving drafts you write;
• archiving, labeling, flagging, marking read or unread, and moving messages to Spam or Trash.

Where it is stored

• Messages, labels and attachments you open are stored in a local database on your Mac, in the app’s container, so the app works quickly and offline.
• Google’s sign-in refresh token is stored in the macOS Keychain. Short-lived access tokens are kept in memory only.
• Nothing is stored on servers run by Khon Labs. We do not operate any servers for the app.

Who it is shared with

No one. Gmail data travels only between your Mac and Google’s servers, encrypted with TLS. It is never sent to Khon Labs or to any third party. In addition:

• It is not used for advertising, including personalized or retargeted ads.
• It is not sold, and it is not used to determine creditworthiness or for lending purposes.
• It is not used to develop, improve or train generalized AI or machine-learning models.
• No person at Khon Labs can read your Gmail data.

Keeping and deleting it

Gmail data stays on your Mac until you remove the account in Settings › Accounts, which deletes its local data and Keychain credentials, or until you delete the app. You can also revoke the app’s access at any time from your Google Account’s third-party connections.

07When you contact us

If you email us — for support, feedback or early access — we receive your email address and whatever you choose to include. We use it only to reply to you and, if you asked, to tell you about Notable Mail. We keep it only as long as needed for that purpose and you can ask us to delete it at any time.

Please don’t send us passwords or the content of private messages. We will never ask for your password.

08This website

This website does not use cookies, analytics or advertising trackers. Like any website, our hosting provider may process standard request information — such as IP address, browser type and the page requested — to deliver and secure the site.

09Keeping and deleting your data

Because your data is on your Mac, you are in control of it:

• Removing an account in Settings › Accounts deletes that account’s locally stored mail and removes its credentials from the Keychain. Your mail on iCloud or Gmail is not affected.
• Deleting the app and its container removes all of its local data.
• To revoke access on the provider’s side, delete the app-specific password at account.apple.com, or remove Notable Mail from your Google Account’s third-party connections.

Actions you take in the app — such as deleting, archiving or sending a message — are carried out on your provider’s servers too, as you would expect from an email app.

10Your rights

Depending on where you live, laws such as Thailand’s Personal Data Protection Act (PDPA) and the EU and UK GDPR give you rights to access, correct, delete or restrict the use of personal data about you, and to complain to a data protection authority. The only personal data we may hold is correspondence you send us. To exercise any of these rights, write to thanathip@khonlabs.com.

11Children

Notable Mail is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.

12Changes to this policy

If we change how the app handles your data, we will update this page and the date at the top. If a change is significant — for example, if the app would start sending any data to us — we will tell you in the app before it takes effect. See also our Terms of Service.

13Contact

Questions about privacy? Email thanathip@khonlabs.com.