Privacy Policy
Last updated October 26, 2026
Heart Mail is a desktop app for macOS and Windows, written by Joseph Marikle for personal use. This policy covers the Google account data it uses and what happens to it.
Heart Mail runs on your computer and gets your data straight from Google. There's no Heart Mail server, so your mail, calendars, and subscriptions never pass through anyone else, and nothing is sold, shared, or used for advertising.
What it uses, and why
- Your name, email address, and profile photo, to tell your accounts apart and show which one is open.
- Gmail, to show your inbox, mark conversations read as you open them, save drafts, send the replies and forwards you write, and add your Gmail signature to them.
- Google Calendar, to show your calendars and remind you of events, to send your answer when you respond to an invitation, and to tick and untick calendars in your Google Calendar list. If you turn it on for a YouTube channel, it also adds that channel's upcoming streams to a calendar you choose, and takes them off when you turn it off.
- YouTube, read-only, to list the channels you subscribe to and their live and upcoming streams. It can't change anything on YouTube.
Where it's kept
- Sign-in tokens are kept in the macOS Keychain, or Windows Credential Manager.
- Each account's name, photo, and followed channels, your settings, the latest list of upcoming streams, and which notifications have been shown are kept in the app's data folder on your computer.
- Messages and events are fetched from Google when the app needs them and aren't saved to its files.
What leaves your computer
- Requests to Google's APIs, for the purposes above.
- Requests for images in emails. When a message shows images hosted elsewhere, the app downloads them from the sender's server, as other mail apps do. That server sees your IP address, but gets no cookies or referrer.
Nothing else. There's no analytics, crash reporting, or advertising, and your data isn't used to train AI or machine learning models.
Google API Services User Data Policy
Heart Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing your data
- Signing an account out in the app deletes its sign-in token and revokes the app's access to that Google account. The app keeps the account's name and settings, such as its followed channels and calendar reminders, so they're back if you sign in again.
- You can also revoke access at any time in your Google Account, under Third-party apps & services.
- To remove everything, sign out of each account, then delete the app and its data folder.
Changes
If this policy changes, the date at the top changes with it.