Sandarre Studios › Sandarre Email › Privacy
Privacy policy
Sandarre Email · Last updated: October 31, 2026
Sandarre Email is a Mac, iPhone and Apple Watch app that organizes your Gmail and iCloud mail. This policy explains which data the app uses and what it does with it. Responsible: Armando Sandoval Arredondo · contact: tombs_flighty.2e@icloud.com.
In short
- The app has no servers. Your mail travels directly between your provider (Google or Apple) and your device.
- None of your mail is sent to the developer or to third parties. No ads, analytics or tracking.
- What the app stores stays on your devices (and in your own private iCloud, for notifications; see below).
Data the app uses
- Your mail: senders, recipients, subjects, dates and message text. It is downloaded from your account and stored in a local database on your device to display, search and classify it. Messages you open are also kept in a local cache that the system may clear.
- Sign-in credentials. For Gmail you can sign in with Google (on Google's own page; the app receives a renewable permission, never your password) or use an app password. For iCloud an app-specific password is used. They are stored in your device's Keychain and are never sent to us.
- Your settings: classification rules and corrections, senders trusted to show images, and the name you sign with, stored locally. Your rules, custom categories, auto-delete settings and account labels (never your email or passwords) sync between your devices through the private database of your own iCloud account, which only you can access.
What the app does with it
- Classifies messages into categories with rules that run on your device.
- Does what you ask in your account: mark as read or unread, archive, move to trash (never permanently deleted), search the server, and send, reply to and forward the messages you write. It only sends when you press “Send”.
- Shows a message's remote images only if you ask (blocking them keeps senders from knowing you opened it).
- Unsubscribe: on request, the app uses the unsubscribe link the sender includes in the message (it contacts that sender directly; your mail goes to no one else).
- New-mail notifications: the Mac can notify your iPhone. To do so it stores the sender and subject of new mail (never the text) in the private database of your own iCloud account, which only you can access, and deletes it within a few hours.
Google user data
Sandarre Email's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The app only uses access to your Gmail to show, organize and send your mail on your own device, at your request. It does not transfer that information to anyone, does not use it for advertising, does not sell it and does not use it to train artificial intelligence models. No one reads your mail but you.
Retention and deletion
- Data stays on your device while the account is added.
- Delete account in the app removes the local copy of that mail, its cache and the stored credentials. Mail at your provider is not touched.
- Uninstalling the app removes all of its local data.
- You can revoke the app's access to your Google account at any time at myaccount.google.com/permissions.
Children
The app is not directed to children under 13.
Changes
If this policy changes, the new version will be published on this page with its date.