Privacy Policy

Last updated: March 10, 2026

Emdash ("we", "our", "us") is a desktop email client for macOS. This Privacy Policy explains what data Emdash accesses, how it is stored, and who it is shared with.

The short version

• Your email data stays on your device and on Google's servers. We do not store it.
• We do not run analytics, track behavior, or sell data.
• We use Sentry for error reporting and Apple for purchase processing — nothing else.

What data Emdash accesses

When you sign in with Google, Emdash requests access to your Gmail account via OAuth 2.0 using the https://mail.google.com/ scope. This allows Emdash to:

• Read your email threads and messages
• Send email on your behalf
• Archive, star, snooze, and modify labels
• Mark messages as read or unread
• Access your email address and display name

Emdash uses the Authorization Code flow with PKCE and requests offline access so it can refresh your session without re-prompting.

Where your data is stored

On your device

Emdash stores email data locally on your Mac in a SQLite database located at:

~/Library/Application Support/emdash/

OAuth credentials (access token and refresh token) are stored securely in the macOS Keychain and are accessible only to Emdash while your device is unlocked.

Certain preferences — such as trial start date, UI settings, and sync state — are stored locally using macOS system storage.

No cloud storage

We do not operate servers that store your email content, credentials, or personal information. Your data remains on your device and on Google's servers.

Third-party services

Google (Gmail API)

All email operations (reading, sending, syncing, and labeling) occur directly between your device and Google's Gmail API over HTTPS. We act solely as a client to your Gmail account. Google's privacy policy governs how your data is handled on their servers.

Sentry (error reporting)

We use Sentry to collect limited diagnostic information when errors occur (for example, sync failures or authentication errors).

Reports may include:

• Technical metadata
• Device and OS version
• Stack traces

They do not include:

• Email content
• Subject lines
• Message bodies

Performance monitoring and session replay are disabled.

Apple (StoreKit)

All purchases are processed through Apple. We do not receive or store your payment information.

What we do not do

• No analytics. We do not use Google Analytics, Mixpanel, or behavioral tracking tools.
• No advertising. We do not serve ads or share data with advertisers.
• No selling data. We do not sell or rent personal information.
• No remote email storage. We do not transmit your email data to our own servers.

Feedback

If you send feedback from within Emdash, it is sent as an email from your Gmail account to us. We receive it like any normal email and do not collect additional data beyond what you send.

Data retention

Your email data remains on your device until you sign out, delete the app, or manually remove the local data directory.

Signing out removes authentication credentials from the macOS Keychain. Local cached data remains on disk until removed.

Your choices

You may:

• Sign out at any time to revoke access
• Revoke access via the Google Account permissions page
• Delete local data by removing ~/Library/Application Support/emdash/

Children's privacy

Emdash is not directed at children under 13, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Changes will be posted here with an updated date.

Contact

Questions about this policy can be sent to support@emdashmail.com.