Privacy policy: BeaverMail desktop app

Effective date: 8 November 2026

This policy explains what data BeaverMail, the desktop app for mail, contacts and calendar, handles and where that data goes. It applies to the BeaverMail desktop app for Windows, macOS and Linux. BeaverMail Server is software you install and run yourself; we do not operate it for you.

No servers of ours

BeaverMail has no backend. The developers never receive your mail, contacts, calendars, passwords or tokens. The app has no telemetry, no analytics and no crash reporting.

Where your data goes

The app talks only to the services you set up:

• your mail servers (IMAP and SMTP);
• your CardDAV and CalDAV servers;
• the sign-in endpoints of Google (accounts.google.com, oauth2.googleapis.com) and Microsoft (login.microsoftonline.com), when you choose to sign in with Google or Microsoft.

What is stored on your computer

• Downloaded messages and the search index are kept in the app's data folder on your computer only.
• You can choose to encrypt them at rest, with a key held by the operating system or with a passphrase. This is on or off at your choice.

Passwords and sign-in tokens

• Passwords and OAuth refresh tokens are kept in the operating system's credential store: Windows Credential Manager, macOS Keychain, or Secret Service on Linux.
• Access tokens are held only in memory.

Optional network requests

The app makes these requests only when you act:

• Remote images and styles in a message load only if you allow them. These requests send no cookies and no referrer.
• Spell-check dictionaries are downloaded only when you pick a language. They come from LibreOffice's dictionary collection on GitHub (raw.githubusercontent.com).

Diagnostic log

• The diagnostic log is off by default. When you turn it on, it is written to a local file and never sent.
• It never contains the text, subject or addresses of a message. You decide whether to share it.

Google user data

When you add a Gmail account with Google sign-in, BeaverMail requests the scope https://mail.google.com/, plus openid, email and profile. The full Gmail scope is needed because the app reads and sends your mail over IMAP and SMTP, which require it.

Data obtained from Google is used only to show, search, organise and send your own mail inside the app, on your device. It is not transferred to anyone, not used for advertising, not sold, and not used to train AI models. No human reads it.

BeaverMail's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Deleting your data

• Removing an account in the app deletes its local mail and its credentials.
• Uninstalling the app and deleting its data folder removes everything.
• You can revoke BeaverMail's access to your Google account at any time at myaccount.google.com/permissions.

Children

BeaverMail is not directed at children.

Changes to this policy

Any changes to this policy will be posted on this page, with a new effective date.

Contact

Questions about this policy: info@beavermail.dev