Last updated: August 2026
Kauban Mail is a local-first mail, calendar, and contacts client. We are committed to protecting your privacy. This policy explains what data the app handles, how Google Account data is accessed and used when you sign in with Google, and the protections we apply.
Mail bodies, headers, calendar events, tasks, and contacts are stored locally on your device (for example, in an on-device application database) for performance and offline use. Kauban Mail connects directly to your mail and calendar providers (Microsoft 365, Gmail / Google Calendar / Google Contacts, IMAP, Exchange) — your data is never routed through our servers.
When you connect a Google account, Kauban Mail uses Google OAuth to access Google user data needed for the features you use. Access is limited to the scopes you approve on Google’s consent screen.
Depending on the permissions you grant, Kauban Mail may access:
https://mail.google.com/): message metadata and content, labels/folders, drafts, send state, and trash/delete state needed to sync, read, organize, send, and manage mail.https://www.googleapis.com/auth/gmail.settings.basic): vacation / out-of-office responder settings and Gmail filters (mail rules).https://www.googleapis.com/auth/calendar): calendars and events (including attendees), free/busy information used for scheduling, and your calendar list (including shared calendars you add).https://www.googleapis.com/auth/contacts): personal contacts for sync and display, and creating new contacts when you use that feature.https://www.googleapis.com/auth/directory.readonly): read-only directory profile information (such as names and email addresses) when your account is part of Google Workspace and directory search is available.https://www.googleapis.com/auth/userinfo.email): your Google account email address used to identify the mailbox you connected.We use Google user data solely to provide and improve user-facing Kauban Mail features on your device, including:
API calls are made directly from your device to Google using your OAuth access token. Kauban does not operate a backend that receives or processes your Google mail, calendar, or contacts content.
Kauban Mail’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features that are prominent in the application’s user interface. We do not use Google user data for serving advertisements, and we do not allow humans to read Google user data except with your affirmative agreement for support, for security/compliance investigations, or where required by law—and in ordinary operation humans do not access your Google mailbox content because it is not stored on our servers.
Google user data copies remain on your device until you remove the account from Kauban Mail or uninstall the app (which removes local application data on that device). To revoke Kauban Mail’s access to your Google account, open Google Account permissions and remove Kauban Mail, or disconnect the account in the app. After revocation, the app can no longer call Google APIs on your behalf until you sign in again.
Kauban Mail does not collect usage analytics, crash reports, or telemetry of any kind. We do not track how you use the app, which emails you read, or any other behavior.
Emails may contain remote images, scripts, or tracking pixels from senders. Kauban Mail provides configurable security policies (Strict, Balanced, or Permissive) that control whether remote content is loaded. By default, remote content loading is restricted to protect your privacy.
Account passwords, OAuth tokens, and other secrets are stored in the operating system credential store (for example, the macOS Keychain), which is encrypted and managed by the operating system. Kauban Mail does not transmit your credentials to any server other than your configured providers (such as Google or Microsoft) for authentication and API access you initiate.
Kauban Mail communicates only with the mail, calendar, and directory services you configure (e.g., Microsoft 365, Gmail, IMAP servers, Exchange). Optional integrations like Zoom meeting creation connect directly to the service provider's API using your own account credentials. Zoom OAuth tokens are stored only on your device; see Removing the Zoom app for de-authorization and data handling, and the full Zoom integration documentation.
Kauban Mail includes a diagnostic export feature you can use voluntarily when requesting support. The export is redacted to remove sensitive content. You control what you share — nothing is sent automatically.
Kauban Mail is not directed at children under 13 and does not knowingly collect personal information from children.
We may update this policy from time to time. Changes will be posted on this page with an updated date.
If you have questions about this privacy policy, contact us at kaubancore@gmail.com.