SimplyMail ("the app") is an email, calendar and contacts app for Android. It connects to the accounts you already have with your own email provider. This policy explains what data the app accesses, how it uses that data, and where it is stored.
The app has no server of its own. Everything it does goes directly between your device and the servers of your provider (or Google, if you connect a Google account). We never receive your passwords, emails, calendars or contacts.
Data the app uses
Account details. When you add an account, the app stores your email address, password and server settings in its private storage on your device. Your password is sent only to your own provider's mail, calendar and contacts servers, to sign you in. It is never sent to us or anyone else.
Finding your server settings. To set up an account, the app looks up your provider's settings:
It asks your provider's own servers, which receive your email address.
It asks Mozilla's public database of email providers (autoconfig.thunderbird.net). Mozilla receives only your address's domain (for example, example.com), never the full address.
It makes ordinary DNS lookups for the domain.
Email. Messages and attachments travel directly between your device and your provider's servers, so that the app can show your mail and send what you write. The app reads a file from your device only when you choose to attach it.
Calendars. If you connect your provider's calendar, the app downloads your events, and any you add, change or delete are sent back to that calendar. It keeps a copy on your device so they show up offline. Appointments you keep on "This phone only" stay on your device.
Invitations and tasks. When you invite people to an event or assign them a task, the app emails them through your own mail account.
Contacts.
If you connect your provider's address book, the app downloads your contacts, and any you add, change or delete are sent back to it. It keeps a copy on your device, so it can suggest addresses as you write.
The app also remembers the addresses you have written to, so it can suggest them.
"Pick from contacts" opens Android's own contact picker. The app receives only the single address you choose, and never reads your phone's contact list.
Server certificates. If you choose to trust a server with its own security certificate, the app stores that certificate's fingerprint on your device, so it can recognise the server again.
Google Calendar and Google Contacts
If you have a Gmail account, you can connect its Google Calendar and Google Contacts by signing in with Google. You choose whether to allow access on Google's own consent screen. The app then asks Google for access to:
Google Calendar (https://www.googleapis.com/auth/calendar), to show your calendars and events, and to add, change and delete events when you ask it to.
Google Contacts (https://www.googleapis.com/auth/carddav), to show your contacts, suggest addresses as you write, and add, change and delete contacts when you ask it to.
This data is used only to provide these features to you, inside the app. It goes directly between your device and Google, and copies are kept only on your device. It is never sent to us or to anyone else. It is not used for advertising, it is not sold, and no person reads it. Google's sign-in token is handled by Google Play services on your device and is never stored by the app.
SimplyMail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing the account in the app deletes everything the app kept for it on your device. To also withdraw the permission you gave Google, go to myaccount.google.com/connections. You can do this at any time.
What the app does not do
SimplyMail does not use analytics, advertising or crash-reporting services. We do not sell, rent or share your data. Nothing you do in the app is tracked.
Storage and deletion
Everything the app stores is kept in its private storage on your device, and is not included in Android backups. When you remove an account in the app, everything kept for it is deleted from your device: its password and settings, appointments, tasks, downloaded calendars and contacts, and address suggestions. Uninstalling the app deletes everything it stored. Data on your provider's servers, or on Google's, stays there: the app deletes something there only when you ask it to.
Permissions
Internet — to connect to your mail, calendar and contacts servers.
Notifications — to tell you about new mail and remind you of appointments.
Alarms and reminders — to show appointment reminders on time, including after the phone restarts.
Local network (Android 17 and later) — asked for only if your mail server is on your own local network.
Children
SimplyMail is not aimed at children, and does not knowingly collect any data from them.
Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page, with a new "Last updated" date.