Privacy policy

Who is responsible for your data

Cinder is the controller of personal data processed by Cinder. For privacy questions, contact us at privacy@cindermail.app.

The providers of your connected email and calendar accounts also process data under their own privacy policies.

What data we process

• Website: HTTP requests and technical data such as IP address, request time, and browser information needed for Cloudflare to deliver and protect the site. We do not add analytics or marketing cookies.
• Email accounts: account addresses, connection settings, and access tokens or app passwords. Cinder retrieves messages from the mailboxes you connect so you can view, send, and organize email.
• Calendar and devices: events, sync preferences, device identifiers, and notification tokens when you enable those features.
• AI features and recordings: selected message content, prompts, text submitted for editing, and audio and transcripts when you use these features. A meeting recording may include microphone and system audio.
• Contact: your email address and message when you write to us.

Original messages and attachments are not stored in the Cinder server database. The desktop app stores the copies it needs locally. The server stores encrypted account settings, client state, review results, and calendar data needed for sync.

Why we process data

Account, message, and calendar data power the features you choose: mailbox connection, sync, sending, priority review, agenda, and notifications. The legal basis is performance of the service you request (Article 6(1)(b) GDPR). We process website technical data and information needed to protect the service under our legitimate interest in security and reliability (Article 6(1)(f) GDPR).

When you use AI, the data needed for a particular task goes to the configured model provider. This can include priority review, writing, dictation, and transcription. The scope depends on the feature and your settings. We process correspondence with you to respond to your message (Article 6(1)(f) GDPR). Where the law requires another legal basis, including consent, we use it for the relevant processing.

Who may receive data

Cloudflare delivers the website. The providers you choose, such as Google, Microsoft, or iCloud, handle connected email and calendar accounts. AI features may use OpenAI or the provider set in your preferences. Mobile notifications may pass through Expo and Apple notification services. Data goes to these providers only as needed for the features you use.

Some providers may process data outside the European Economic Area. In those cases, the safeguards required by applicable law and the provider's terms apply. You can ask us about a specific data flow using the contact address below.

How long we keep data

Local data remains on your device until you delete it in the app or remove the app and its data. We keep synced data for as long as needed to maintain the connection and features, unless you remove the account or ask us to delete the data sooner. Unprocessed audio segments may remain locally so you can retry or delete a recording; source segments are removed from the local database after successful transcription. We keep correspondence for as long as needed to handle your request and any related claims. Website technical data is retained according to the Cloudflare infrastructure settings.

Your rights

You may request access to, correction or deletion of, or restriction of processing of your data. You may request data portability where it applies. You may object to processing based on legitimate interests and withdraw consent where consent was the legal basis. You also have the right to complain to the relevant data protection authority.

Disconnecting an account from Cinder does not delete messages from your provider's mailbox. Removing data from your device and removing synced data may require separate steps.

Contact and changes

Email privacy@cindermail.app to exercise your rights or ask about data processing. This policy may change as Cinder develops; the effective date on this page will show the current version.