Privacy Policy

1. Scope

This Privacy Policy applies to the ZInbox mobile application and the ZInbox website. ZInbox is an email client that connects a user's device directly to email providers including Gmail, QQ Mail, and 163 Mail.

2. Data ZInbox accesses

Depending on the provider and the features the user chooses, ZInbox may access:

• Email account identifiers, such as an email address and display name.
• OAuth access and refresh tokens or provider authorization credentials.
• Email messages, headers, bodies, labels, folders, drafts, and attachments.
• Mailbox state such as read status, starred status, and message location.
• Basic application diagnostics generated on the user's device.

ZInbox accesses only the account selected by the user and only after the user authorizes access through the provider's sign-in or authorization process.

3. How data is used

ZInbox uses account and email data only to provide user-facing email features, including:

• Authenticating and maintaining the user's email account connection.
• Synchronizing and displaying messages, folders, labels, and attachments.
• Searching cached mailbox data on the user's device.
• Composing, sending, replying to, and forwarding messages.
• Applying user-requested actions such as marking, starring, moving, archiving, or deleting messages.
• Showing local new-mail notifications when enabled by the user.

ZInbox does not use email content or Google user data for advertising, credit decisions, audience profiling, or unrelated analytics.

4. Storage and processing

ZInbox does not operate a mail relay or a backend that receives or stores the user's mailbox. Email traffic is exchanged directly between the user's device and the selected email provider.

• Credentials and OAuth tokens are stored using the operating system's secure storage.
• Cached messages and mailbox metadata are stored in the application's private local database.
• Attachments are downloaded to application-private storage when requested.
• Remote images in email are blocked by default unless the user chooses to load them.

5. Sharing and disclosure

ZInbox does not sell personal information or Google user data. It does not share mailbox data with advertising networks, data brokers, or unrelated third parties.

Data may be disclosed only when:

• The user directs ZInbox to communicate with the selected email provider.
• The user opens an external link or explicitly loads remote content from an email.
• Disclosure is required to comply with applicable law or protect users from fraud, abuse, or security threats.

Hosting this public website on GitHub Pages does not give GitHub access to account credentials, OAuth tokens, or mailbox data from the ZInbox mobile application.

6. Google API Services User Data Policy

ZInbox's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Retention and deletion

Locally cached mailbox data remains on the device until the user removes the relevant account, clears application storage, or uninstalls ZInbox. Removing local data does not automatically delete data held by the email provider unless the user performed a mailbox deletion action that ZInbox submitted to that provider.

Users can revoke Google access from their Google Account connections. For deletion assistance, see the data deletion instructions.

8. Security

ZInbox uses operating-system application isolation, secure credential storage, encrypted provider connections, and private application storage. No security control can eliminate every risk, and users should keep their device and operating system protected.

9. Children's privacy

ZInbox is not directed to children under the minimum age required to manage their own email account in the user's jurisdiction. The application does not knowingly collect children's information for advertising or profiling.

10. Changes and contact

Material changes will be published on this page with an updated effective date. Privacy questions and requests can be sent to zhbrain@gmail.com.