Privacy Policy

Last updated: August 18, 2026

This policy covers the Circuvent Mail website at mail.circuvent.com and the Circuvent Mail applications for Android and iOS. Where the mobile apps behave differently from the website, that is set out in section 3.

1. Information We Collect

When you use Circuvent Mail, we collect the following information:

• Account information: Your name, email address, and password when you create an account.
• Email data: The emails you send, receive, and store, including attachments.
• Usage data: How you interact with our service, including features used and time spent.
• Device information: Browser type, operating system, and device identifiers.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Circuvent Mail service.
• Send you important service-related notifications.
• Protect against fraud, abuse, and security threats.
• Comply with legal obligations.

3. The Android and iOS apps

The mobile apps are clients for the same mailbox as the website. They add no analytics, advertising or tracking libraries of any kind: they do not use an advertising identifier, and they send no data to any third party.

• Stored on your device: a copy of recently downloaded messages and their attachments, so mail can be read without a connection, and your sign-in tokens. Tokens are held in the Android Keystore or the iOS Keychain, not in ordinary app storage. Everything cached is removed when you sign out or uninstall.
• Notifications: to tell you that mail has arrived, the app periodically asks the server for new messages and shows the sender, subject and a short preview on your lock screen. This check runs on your device; message content is not sent anywhere else to produce it. Notifications can be turned off in the app's settings or in the system settings.
• Permissions: the Android app requests only permission to post notifications. It requests no storage or photo permission — attachments are chosen through the system file picker, which grants access to the single file you select and nothing else. The iOS app likewise requests only notifications.
• App lock: if you turn on the optional lock, the check is performed by the operating system's biometric or passcode prompt. Your fingerprint or face data is never made available to the app and never leaves your device.
• Opening attachments: when you open an attachment it is handed to whichever app on your device can display it. What that app then does with the file is governed by its own privacy policy.

4. What We Don't Do

• We do not sell your personal data to third parties.
• We do not display targeted advertising based on your email content.
• We do not scan your emails for marketing purposes.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, regular security audits, and access controls to protect your data.

6. Data Retention

We retain your data for as long as your account is active. When you delete your account, we will delete your data within 30 days, except where we are required by law to retain it.

7. Deleting your account and data

You can ask for your account and everything in it — messages, attachments, contacts and settings — to be deleted at any time, from the app, the website, or by writing to privacy@circuvent.com from the address on the account. Deletion removes the mailbox and its contents within 30 days, other than records we are required by law to keep. You do not need to keep the app installed to make the request.

8. Your Rights

You have the right to access, correct, or delete your personal data at any time through your account settings or by contacting us at privacy@circuvent.com.

9. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@circuvent.com.