Privacy Policy

01Information we collect

We do not collect any personal information or email content through the App. We do not operate any servers for the App, and none of your data is sent to us.

02Information the App handles on your device

To let you read newsletters, the App handles the following information on your device:

• Mail account information: your email address, and either an app password or the authentication token issued when you sign in with your Google Account. Passwords and tokens are stored only in the device's Keychain. Starting with version 1.1, they are not synced through iCloud Keychain.
• Newsletter content: the body, images, subject, sender and date of the newsletters you add.
• Usage state: read/unread status, reading position, favorites and display settings.

03Where the App connects

• Your mail server: when you connect with an app password, the App connects directly to your mail service's server (such as Gmail or iCloud Mail) over an encrypted connection (IMAP over TLS) to search for and download messages. When you sign in with your Google Account, the App connects directly to the Gmail API over an encrypted connection (HTTPS) and searches for and downloads messages with read-only access. In either case, the App never changes read status or deletes messages.
• Google: when you sign in with your Google Account, the App communicates with Google's servers (Google Account and the Gmail API) for authentication and to download your mail.
• Image hosts in newsletters: when a newsletter is imported, images in its body are downloaded from the servers that host them. Those servers receive connection information such as your IP address. Tracking images used to detect opens are not downloaded, and the reader makes no network requests while you read.
• iCloud: starting with version 1.1, the App does not use iCloud. Imported newsletters and your reading progress are stored only on your device. (In version 1.0, they were stored in the private area of your iCloud account (CloudKit) and synced to your other devices. Only you can access that area, and we cannot view it.)

04Google user data

When you sign in with your Google Account, the App requests only read-only access to Gmail (gmail.readonly). This access is used only on your device, and only to search for and import the newsletters you have registered. Data received from Google (message bodies, subjects, senders, dates, and authentication tokens) is stored only on your device and is never sent to our servers, to iCloud, or to any other third party. It is not used for advertising, is not read by humans, and is not used to train AI or machine learning models. e-zine's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

05Analytics and advertising

The App does not use analytics tools, advertising services, or any external service for tracking.

06Deleting your data

• Removing a mail account in the App's settings deletes its credentials from the device Keychain.
• Removing a series from your shelf deletes its issues and images.
• Deleting the App removes all newsletters and reading progress stored on your device. Data stored in iCloud by version 1.0 can be deleted from the iOS Settings app → your name → iCloud.
• Access granted by signing in with Google can be revoked under "Third-party apps & services" in your Google Account.

07Changes

We may update this policy as needed. Significant changes will be announced on this page.

08Contact

TidyBear Inc.
support@tidybear.net