Mail Pro
Last updated: 4 September 2026
The short version. Mail Pro runs entirely on your iPhone. I operate no servers, so your mail is never sent to me and I have no way to read it. Your mail goes from Google to your device and stays there — except for the messages you ask the AI to work on, which are sent to Google's Gemini API to produce that summary, grouping or draft.
No accounts with me. No tracking. No advertising. No analytics. Nothing sold or shared with data brokers, ever.
Who is responsible
Ignacio Divasson, an individual developer based in Spain, is the data controller for Mail Pro.
Contact: hola@nachodivasson.com
Google user data: what Mail Pro accesses and why
Mail Pro asks for the narrowest set of Google permissions that lets a mail client function. Each one maps to a feature you can see in the app:
| Scope | What it gives access to | What Mail Pro does with it |
|---|---|---|
gmail.readonly |
Your messages, threads, labels and attachments | Displays your inbox, threads, folders, search results and attachments in the app and in its widgets. |
gmail.modify |
Changing the state of your messages | Carries out the actions you tap: mark read or unread, archive, delete, star, move between folders, apply and remove labels. |
gmail.send |
Sending mail as you | Sends the replies and new messages you compose, at the moment you tap send. Mail Pro never sends anything on its own initiative. |
userinfo.email |
The address of the account you connected | Identifies which mailbox is which, so multiple accounts can be used side by side without mixing. |
userinfo.profile |
Your name and profile picture | Shows them in the account switcher so you can tell your accounts apart. |
Mail Pro does not request, and cannot access, anything else in your Google account — not Drive, not Photos, not your Google Contacts, not your search history.
Where your mail actually goes
This is the complete picture. If a destination isn't listed here, your data doesn't go there.
1. Onto your device, and no further
Messages fetched from Gmail are held on your iPhone so the app is fast and works offline. That includes cached messages and threads, drafts you haven't sent, queued actions waiting for a connection, saved attachments, follow-up reminders, and a small snapshot of recent unread mail shared with the Home Screen widget through an app group on the same device.
The people you write to most are suggested from the mail already on your device. Mail Pro does not read your iOS Contacts.
None of this reaches me. Mail Pro has no backend. There is no server of mine, no database and no log — not even a count of how many people use the app.
2. To Google Gemini, when you use an AI feature
The AI features cannot work on device, so they send the relevant messages to Google's Gemini API and use what comes back. This happens when you:
- let the AI agent group your unread mail into action cards,
- ask for a summary of a message or thread,
- ask it to draft or rewrite a reply, or change its tone,
- translate a message,
- ask it to pull a calendar event out of an email,
- or switch on the morning digest, which does the same thing once a day.
What is sent depends on the feature, and is limited to what it needs: sender and recipient names and addresses, subject, date, read state, and the message text — truncated, for grouping, to a short snippet per message. Attachments are not sent.
Mail Pro uses the paid tier of the Gemini API, on your own API key. Under Google's paid-tier terms, Google does not use the content you submit to train or improve its models. Google's handling of that content is governed by the Gemini API terms.
If you never enter a Gemini API key, no message ever leaves your device for this purpose. The rest of the app — inbox, search, folders, compose, send, widgets — works without one.
3. To Google, as your mail provider
Reading and sending your mail means talking to Gmail. That traffic goes directly from your iPhone to Google over HTTPS, using the OAuth token you granted. It does not pass through me.
Limited Use disclosure
Mail Pro's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Concretely, and without exception:
- Mail Pro uses data from Google APIs only to provide and improve the features you can see in the app — showing your mail, acting on it, and the AI features you explicitly invoke.
- Mail Pro does not transfer that data to anyone except as needed to provide those features (namely to Google's Gemini API, on your own key, when you use an AI feature), to comply with applicable law, or to protect against fraud, abuse or a security threat.
- Mail Pro does not use that data for advertising of any kind, including retargeting, personalised advertising or interest-based advertising. The app contains no ad network and no advertising SDK.
- No human reads your Gmail data. I cannot — it never reaches me. The only exceptions permitted by policy would be with your explicit consent for specific messages, where necessary for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised. None of these currently occur, because there is no server on which they could.
- Mail Pro does not sell Google user data, and does not use it to train any AI or machine learning model.
Other permissions the app asks for
Calendar
Asked for only when you create an event from an email. The event is written into your own calendar on your device. Mail Pro does not read your existing events or send anything about your calendar anywhere.
Notifications
Used for new-mail alerts and the morning digest. These are local notifications, composed on your device. There is no push server, so no notification content travels through anyone's infrastructure.
Background refresh
Lets iOS wake the app occasionally to check for new mail so notifications are timely. The check talks to Gmail and nobody else.
How your credentials are protected
- Your Google OAuth tokens and your Gemini API key are stored in the iOS Keychain, encrypted by the system and tied to your device.
- Mail Pro never sees or asks for your Google password. Signing in happens in Google's own sign-in sheet.
- All network traffic uses HTTPS. The app disables insecure connections outright.
- Because there is no server, there is no central store of anyone's mail to be breached.
How long anything is kept
On your iPhone, for as long as you keep the account connected. I keep nothing, anywhere, for any length of time.
Google keeps your mail as your mail provider, under Google's own privacy policy. Content sent to the Gemini API is retained by Google under the Gemini API terms linked above.
Removing your data and revoking access
Two ways, and you can use either:
- In the app. Open the side menu, find the account, and remove it. Mail Pro revokes the OAuth token with Google and deletes that mailbox's cached mail, drafts, tokens and AI cache from your device.
- From your Google account. Go to myaccount.google.com/permissions, find Mail Pro and remove its access. This works even if you no longer have the app installed.
Deleting the app removes everything it stored on your device, including its Keychain items. There is no copy anywhere else, so there is nothing left to request the deletion of.
Your rights
Under the GDPR you have the right to access, correct, delete, restrict and export your personal data, and to object to its processing. For Mail Pro this is unusually simple: I hold no copy of your data, so there is no record of yours for me to retrieve, amend or erase. The actions above put all of it in your hands directly.
The legal basis for the processing the app performs on your device is the performance of the service you asked for, and your consent for each permission, which you can withdraw at any time in iOS Settings or in your Google account.
If you want to exercise a right, or you think something here is wrong, write to hola@nachodivasson.com and I'll answer within 30 days. You may also complain to the Spanish data protection authority, the AEPD.
Children
Mail Pro is not directed at children under 13, and I do not knowingly collect anything from them.
Changes to this policy
If Mail Pro starts doing something new with your data, this page changes before that version ships, and the date at the top changes with it. Changes are never applied retroactively to data already handled under an earlier version.