Privacy Policy

What LinkMail does with your data.

Version 1.6 — effective October 18, 2026

This translation is provided for convenience. In case of discrepancy, the French version prevails: read the original.

1. Who processes your data

The data controller is LINKINFO, publisher of the LinkMail app and of the linkmail.linkinfo.fr website.

Contact: contact@linkinfo.fr — phone +33 1 84 16 26 68. Full contact details are given in the legal notice.

2. What LinkMail actually does

LinkMail is an app installed on your Mac or your iPhone. It connects directly to your email provider's servers — Apple iCloud, Google Gmail, Microsoft Outlook, or any IMAP server you choose — to read and send your mail there.

That connection does not pass through any server of ours. At no point, therefore, do we have the technical ability to access the content of your messages.

3. Data from your email accounts

To display your mail, the app downloads to your device your messages, their attachments, your correspondents' addresses and the structure of your folders.

This data is stored locally, on your device only, in the space reserved for the app. On macOS and iOS, that space is protected by system encryption (FileVault, device encryption) and by the app isolation Apple enforces.

It is deleted in full when you remove the account from the app or uninstall the app.

Your credentials — app-specific password or authorization token — are kept in the operating system's keychain, never in an app file, and are never sent anywhere other than to your email provider when connecting.

4. What our servers receive

If, and only if, you turn on syncing between several devices or notifications, the app exchanges data with our servers. Here is the complete list.

Data	Why	Retention
Email address used to sign in to your LinkMail account	To identify your account and let you sign in	Until the account is closed
Identifier and name of your devices, Apple notification token	To let you know a message has arrived when the app is closed	Until the device is removed, or after 90 days of inactivity
Synced settings: snoozes, scheduled sends, sorting rules, signatures, drafts in progress	To find the same state on your Mac and your iPhone — something the IMAP protocol cannot do	Until you delete them, or the account is closed
Message references, in encrypted form	To know which message a snooze applies to, without knowing which message it is	Same as above

Two important points:

• Message references are never sent in the clear. The app first turns them into a cryptographic fingerprint (HMAC-SHA256) computed with a key that never leaves your devices' keychain. We can therefore neither tell which message is meant, nor link two users who received the same message.
• The size of synced data is technically limited to 16 kilobytes per record by our database itself. A message body or an attachment cannot be stored there, not even through a programming error.

Our servers never receive the content of your messages, your attachments, or the credentials of your email accounts. The only possible exception is the AI assistance described below, and only if you have explicitly asked for it.

AI assistance

LinkMail can summarize your recent mail, answer a question about it and pick out the commitments you've made. By default, all of this is computed on your device, by the language model built into the system (Apple Intelligence, on macOS as on iOS): no message, no subject line, no address leaves your Mac or your iPhone — not to us, not to anyone. Nothing at all is sent, not even a counter.

If, and only if, you explicitly choose the Mistral engine in Settings › AI assistance, the processing changes in nature. Making that choice does not, by itself, trigger any sending: the app first shows you a permission screen listing what would be sent, to whom and for what purpose, and you must answer “Allow sending”. Until that permission has been given, nothing leaves your device and the assistance keeps working locally. You can withdraw it at any time, in the same place, and the assistance then falls back on the on-device engine. Here is what the permission covers:

• the subject, sender, preview and date of the messages to be summarized are sent to our servers, which query Mistral AI (a French company) on your behalf. Never the full body of a message, never attachments, never your account credentials;
• the preview is truncated and the number of messages capped: at most 400 characters per message for a summary (60 messages), 800 for a question put to the assistant (12 messages). These are limits built into the program, not guidelines: they cannot be exceeded;
• nothing is automatic: every summary and every question is started by you. The AI assistance never works in the background;
• these items are not stored: they pass through our servers' memory for the duration of the call, and nothing of them is written down. Only an anonymous counter is recorded — model used, number of messages, tokens consumed, cost, success or failure, LinkMail version. No content and no identifier: no account, no address, no device identifier. Two records cannot be told apart, not even to know whether they come from the same device.

We hold the access key to Mistral: you have no key to provide, and we can cut off access to third-party engines for everyone at any time.

What Mistral commits to on its side. Mistral AI is a French company, established in the European Union and subject to the GDPR. It acts as a processor within the meaning of Article 28 of the GDPR, under a contract that requires a level of protection equivalent to the one described here: processing on our behalf only and on our instructions only, no retention of content sent through the API beyond the time needed to respond, no use for training its models, no disclosure to third parties, and hosting in the European Union. Mistral AI publishes the terms of this service at mistral.ai/terms.

AI assistance can be turned off entirely in the app's settings.

If you contact support

The app has a “Contact support” button. If you use it, and only then, your request is sent to our servers to be forwarded to us by email. We then receive the following, and nothing else:

• the name, email address, subject and message you entered in the window — the address is used to reply to you, and for nothing else;
• the LinkMail version and the version of your system — macOS, iOS or iPadOS —, shown in the window before sending, without which half of all problems cannot be reproduced.

Nothing from your mail, your folders or your accounts comes with the request. It is kept for the duration of the exchange and its follow-up, then deleted; you can ask for it to be erased at any time (see section 10). The email delivery itself is handled by Resend (Resend Inc., United States), our sending provider, under the conditions described in section 9.

If you watch the demo video

The app's Help menu offers a “Demo Video”. It plays from this website, at linkmail.linkinfo.fr/video/, exactly as if you opened it in a browser. Our server then receives an ordinary HTTP request: your IP address, the video requested and its preview image — and therefore their language — and the technical information every browser sends, such as the type of software. It is recorded in the server logs like any other visit to this website.

Nothing else comes with that request: no account identifier, no mail content, no device identifier, no cookie. Nothing is played unless you click.

5. Google — permissions requested and Limited Use

To let you check a Gmail account, LinkMail asks for your permission to access the https://mail.google.com/ scope. This permission is needed to read your messages, mark them as read, file them and send mail — in other words, to make an email client work.

Data obtained through Google APIs is used solely to provide the email features visible in the app. It is not transferred to third parties, not used for advertising, not used to train an artificial intelligence model, and not read by any human — except in the cases expressly allowed by Google: your explicit consent, security purposes, or a legal obligation.

You can withdraw this permission at any time from the Third-party apps with account access page of your Google Account. The app will then lose access, and the local copy is deleted when you remove the account from LinkMail.

6. Microsoft

For Outlook and Microsoft 365 accounts, LinkMail uses the Microsoft Graph API with equivalent permissions, limited to reading, sending and organizing your mail. The same rules apply: use limited to the app's features, no transfer, no advertising use. You can revoke access from your Microsoft account.

7. Apple and IMAP accounts

For iCloud and generic IMAP servers, the connection uses an app-specific password that you generate yourself with your provider. We play no part in that exchange at any point.

8. Who else has access to this data

We neither sell nor rent any data. The only third parties involved are strictly necessary technical providers:

• Apple (Apple Push Notification service), to deliver notifications to your devices. The content of the notification is computed on your device; we only send a wake-up signal with no content.
• Your email provider, with which the app communicates directly.
• Mistral AI (France), only if you have chosen this engine for AI assistance and allowed sending in the app. This provider acts as a processor, with no retention and no training, under the conditions described in section 4. By default, summaries are computed on your device, this provider is not involved and our servers see nothing.
• Resend (Resend Inc.), to deliver our support emails — and those alone. This provider is never involved in your own mail, which goes straight from your device to your provider's server.
• The sender of a newsletter, if you ask to unsubscribe from it. The app then contacts the unsubscribe address given in that message's headers directly, and sends it nothing but the request itself. Nothing is sent without your confirmation, and our servers know nothing about it.
• The host of our servers, located in the European Union.

We may be required to disclose data at the request of a judicial authority. In that case, we could only hand over what we hold — that is, neither your mail nor your correspondents' addresses, since we don't have them.

9. Transfers outside the European Union

Our servers and your sync data are hosted in the European Union. Apple's notification service may involve a transfer to the United States, covered by Apple's contractual safeguards; it concerns only a technical token and a signal with no content.

Delivering our support emails through Resend likewise involves a transfer to the United States, covered by the European Commission's standard contractual clauses. It concerns only what you wrote in the support window — that is, what an ordinary email would have brought us anyway.

10. Your rights

Under the General Data Protection Regulation, you have the right to access, rectify, erase, restrict, object to and port the data we hold.

Most of these can be exercised directly in the app: removing an account deletes its local copy, removing a device deletes its record on our side, and deleting your LinkMail account erases everything we keep. For any other request, write to contact@linkinfo.fr; we reply within one month.

You may also lodge a complaint with the CNIL, the French data protection authority.

11. Security

• All connections, to your provider as to our servers, are encrypted with TLS.
• Your account credentials are kept in the system keychain, never in an app file.
• Remote content in messages — images, tracking pixels — is blocked by default, so as not to reveal your IP address or the fact that you opened a message.
• Message references sent for syncing are cryptographically anonymized, as described in section 4.

12. Cookies and analytics

This website uses no cookies, no trackers and no analytics tools. If you dismiss the banner offering the page in another language, your browser remembers it until you close the tab, and nothing is sent to us. The app includes no behavioral analytics kit and no advertising identifier.

13. Minors

LinkMail is not intended for people under 15, and we do not knowingly collect their data.

14. Changes

This policy may change along with the app. Any substantial change will be announced in the app before it takes effect, and the date at the top of this document will be updated. Earlier versions are available on request.

15. Contact us

For any question about this policy or about how your data is handled: contact@linkinfo.fr.