Privacy Policy

Last updated: February 2026

1. Overview

Prudii Mail ("Prudii", "we", "our", "the app") is a desktop email client designed with privacy as its core principle. This policy explains what data we collect, how we handle it, and your rights.

2. Data We Collect

2.1 Email Data

Prudii connects directly to your email provider(s) via IMAP and SMTP. Your emails, contacts, and attachments are stored locally on your device in an encrypted SQLite database. We never have access to your email content.

2.2 Account Credentials

Your email passwords and OAuth tokens are stored locally on your device, encrypted using Windows DPAPI (Data Protection API), which ties the encryption to your Windows user account. We never transmit, store, or have access to your credentials.

2.3 OAuth Authentication

When you connect a Google or Microsoft account, Prudii uses OAuth 2.0 with PKCE (Proof Key for Code Exchange) to authenticate. During this process:

• You are redirected to Google's or Microsoft's login page
• You grant Prudii permission to access your email via IMAP and send email via SMTP
• Prudii receives an access token and refresh token, stored locally on your device using DPAPI encryption
• We never see or store your Google/Microsoft password

2.4 Application Settings

Your preferences (theme, language, sync intervals, signatures) are stored locally in a JSON configuration file on your device.

2.5 Prudii Account (Optional)

If you create a Prudii account for Premium or Team features, we store your email address and license information on our server. This is used solely for license verification and account management. We do not access or store your email data.

3. Data We Do NOT Collect

• We do not collect any personal information beyond what's needed for your Prudii account
• We do not use analytics, telemetry, or tracking
• We do not scan or read your emails
• We do not store your email data on our servers
• We do not use cookies (Prudii is a desktop app)
• We do not share any data with third parties

4. Network Connections

Prudii makes the following network connections:

• Your email provider (e.g., imap.gmail.com, smtp.gmail.com) — to sync and send emails
• OAuth endpoints (accounts.google.com, login.microsoftonline.com) — to authenticate your account
• Prudii API (api.prudii.com) — for license verification and account management (Premium/Team only)
• Update server — to check for application updates (optional)

All connections use TLS encryption. Prudii never routes your email through proxy servers or intermediaries.

5. Data Storage & Security

• All email data is stored locally on your device
• Email database is stored in your user-specific app data directory
• Credentials are encrypted with DPAPI, making them inaccessible even to other applications on your system
• You can export and import your data using the built-in backup feature
• Deleting the app removes all local data (emails, settings, credentials)

6. Payment Processing

Premium and Team subscriptions are processed by Paddle (our Merchant of Record). We do not store or process your payment information directly. Paddle's privacy policy applies to payment transactions.

7. Third-Party Services

Prudii does not integrate with any third-party analytics, advertising, or data processing services. The only third-party connections are to your email providers, OAuth identity providers, and Paddle for payments.

8. Children's Privacy

Prudii does not knowingly collect data from children under 13. Since we do not collect personal data beyond optional account registration, this is inherently satisfied.

9. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. Since Prudii does not collect contact information, we cannot notify users directly — please check this page periodically.

10. Contact

If you have any questions about this privacy policy, you can reach us at [email protected].