Privacy policy

Last updated 9 October 2026

Mailen is a desktop mail client that runs on your own computer. This page explains what it reads, where that goes, and what it keeps. In short: your mail stays between your computer and your mail provider. Mailen has no server, collects no analytics and sends nothing to its author.

What Mailen accesses

When you add a Google account, Mailen asks Google for permission to:

• Gmail: read, send, organise and delete your mail, drafts and labels, so it can show your mailbox and do what you ask with it.
• Google Calendar: read and change your calendars and events, so it can show them and let you create, answer and remove meetings.
• Google Contacts: read and change your contacts, so it can show and edit them.
• Google Tasks: create tasks, only when you ask it to make one from a message.

Microsoft accounts are accessed through Microsoft Graph with the equivalent permissions.

Where your data goes

• Mailen connects directly from your computer to Google and Microsoft. Nothing passes through a server run by Mailen; there is none.
• Mailen keeps a copy of recently read mail, your settings and your folder list on your computer so it can start quickly. Sign-in tokens are kept in your operating system's credential store.
• Mailen does not sell, share or transfer your data to anyone, and does not use it for advertising.

Optional features that reach other services

These are under your control, and are off or ask first unless noted.

• AI features (summaries, tags, suggested tasks, rewriting) do nothing until you set up a model in Settings. They can use a model running on your own computer, in which case nothing leaves it. If you choose a cloud model (such as Anthropic or OpenAI, using your own key), Mailen asks before any message is sent to it, and sends only the message being worked on, to the provider you chose, under that provider's terms.
• Sender pictures: to show a sender's logo, Mailen may request the small icon published on the sender's own website. This can be turned off in Settings.
• Phishing reports are off until you turn them on and give an address; Mailen then forwards a message you report to that address.
• Security scanning: on Windows, attachments can be checked by the security software already on your computer before they open. This happens on your computer.

Google API Services User Data Policy

Mailen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Revoking access

You can remove an account in Mailen under Settings, Accounts. You can also revoke Mailen's access at any time from your Google account permissions or your Microsoft account consents.

Contact

Questions about this policy: contact@mailen.online.