PostForged — Privacy Policy

Last updated: 2026-07-16

PostForged is a personal email client that connects directly to your own email accounts (Google / Gmail and Microsoft / Outlook) and shows your mail in one unified, tag-based stream. The short version: your email never touches our servers, because we don't have any.

Who we are

PostForged is published by VSBIE (Vivid Software, Building Innovative Ecosystems). Contact: [email protected].

No backend, no data collection

PostForged runs entirely on your device and talks directly to Google and Microsoft over their official, encrypted APIs. There is no PostForged server in the middle.

We never receive, store, read, or transmit your email content.
We have no user database, analytics server, or ad network.
We do not sell, share, rent, or monetize your data. Ever.

What is stored, and where

Everything PostForged stores lives only on your device:

Data	Where	Why
Synced email (headers + bodies you open)	Local app storage (IndexedDB)	Speed & offline
Sign-in tokens	OS Keychain / Keystore (native) or encrypted on-device (web)	Stay signed in without re-entering your password
Your tags, rules, signatures, flags, tasks, contacts	Local storage	Your organization system
Optional AI key (bring-your-own)	Local storage on your device only	Optional AI features at your own cost

You can erase all of it any time from Settings → Privacy → Erase all data, which permanently deletes the local data and disconnects your mailboxes.

Permissions we request, and why

When you connect a mailbox, your provider (Google or Microsoft) asks you to grant access. We request the minimum needed to be a functioning mail client:

Read your mail — to display it.
Send mail — to compose, reply, and forward.
Modify / labels (read-write) — to mark read, archive, and file with tags.
Calendar (read/write) — to show your calendar and send invitations you create.
Contacts (read/write) — to autocomplete recipients (optional).

You grant these directly to your provider through their own secure sign-in window. PostForged never sees or stores your email password. You can revoke access at any time in your Google or Microsoft account security settings.

Optional AI features (bring your own key)

AI features are optional. If you enable them, you supply your own API key (e.g. Google Gemini's free tier), stored only on your device and used to call the AI provider directly from your device. We never see your key or the content you process.

Children

PostForged is not directed to children under 13, and we do not knowingly collect data from anyone.

Changes

If this policy changes we'll update the date above and note it in the app's release notes.

Contact

[email protected]