Privacy Policy
Thumbmail (“Thumbmail”, “we”, “us”) is an iPhone email app that shows the mail from your accounts one card at a time. This policy explains what the app does with your information.
Your email
- When you add an account, you sign in directly with your provider (Google, Microsoft, or an IMAP provider such as Yahoo, AOL or iCloud). Thumbmail then connects from your iPhone to that provider to read, archive, star, forward, delete, mark as read, mark as spam and send mail when you ask it to.
- Sign-in tokens and app passwords are stored in your iPhone's Keychain. They are never sent to us.
- To open quickly, Thumbmail keeps a cache of message headers (sender, subject, date and a short preview) in the app's storage on your iPhone. Message contents are fetched from your provider when you open them and are not sent anywhere else.
- If you use a signature, Thumbmail reads your existing Gmail signature from your Google account, or saves the one you type on your iPhone.
Importance colors
To color cards by importance, Thumbmail looks at who emails you, how often, and how often and how quickly you reply. This is calculated on your iPhone and saved on your iPhone. It never leaves the device.
Notifications
Stack reminders and new-email alerts are created on your iPhone. When iOS lets Thumbmail refresh in the background, the app checks your inboxes directly with your provider and shows a local notification. No notification server is involved and nothing is sent to us.
Writing replies with AI (optional)
If you connect your own AI provider account (OpenRouter, Anthropic, OpenAI or Google Gemini), Thumbmail sends the email you are replying to, and any instruction you give, from your iPhone directly to that provider using your own key, only when you ask for a suggested reply. That provider handles it under its own terms and privacy policy. We do not receive it. If you never connect an AI provider, nothing is sent to one. Your AI key is stored in your iPhone's Keychain.
Google user data
Thumbmail asks for access to your Gmail account (the gmail.modify scope) so that it can show your inbox and carry out the actions you choose: reading messages, archiving, starring, marking as read, moving to spam or trash, sending replies and forwards, and reading your Gmail signature. It also reads your basic profile (your email address) to label the account in the app.
Thumbmail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Gmail data is used only to provide and improve the user-facing email features of Thumbmail that you see in the app.
- Gmail data is processed on your iPhone. It is not sent to, stored on or accessible from any server operated by us.
- Gmail data is not transferred to anyone, except to an AI provider you connect yourself, and only the message you ask Thumbmail to draft a reply to, at the moment you ask. It is also transferred when necessary to comply with applicable law.
- Gmail data is never used for advertising, including retargeting or personalized or interest-based ads, and is never sold.
- No human reads your Gmail data. We have no access to it.
- Gmail data is not used to develop, improve or train generalized or non-personalized AI or machine-learning models.
Microsoft and other providers
Outlook and Microsoft 365 accounts are accessed through Microsoft Graph, and other accounts through IMAP and SMTP, in the same way: directly from your iPhone, only to show and manage your mail at your request.
What we collect
Nothing. Thumbmail has no analytics, advertising or tracking SDKs, and no account with us. Subscriptions to Thumbmail Pro are handled entirely by Apple; we see only the anonymous sales reports Apple provides to developers. If you install a test version through TestFlight, Apple may share crash reports and any feedback you choose to send, under Apple's terms.
Deleting your data
Removing an account in Thumbmail deletes its saved sign-in, its cached headers and everything Thumbmail learned about it from your iPhone. Deleting the app removes everything Thumbmail stored. You can also revoke Thumbmail's access at any time from your Google account or Microsoft account settings.
Children
Thumbmail is not directed at children under 13, and we do not knowingly collect information from them.
Changes
If this policy changes, we'll update it here and change the effective date above.
Contact
Questions about privacy: jeremy.redigergroup@gmail.com