Privacy Policy

SendMoi is a local-first app that helps you send shared links and photos as emails through your own Gmail account. This policy explains what SendMoi handles, where that data goes, and what stays on your device.

What SendMoi Accesses

SendMoi may access the following information when you use the app:

• Your Gmail account email address.
• OAuth tokens used to keep you signed in to Gmail.
• Email recipients you enter or save as defaults or recent recipients.
• The title, excerpt, URL, and shared image attachments for content you share into the app.
• Queued email content that has not been sent yet.
• An app-generated anonymous analytics identifier and limited usage events if you opt in to analytics.

If you share a web link, SendMoi may also fetch the linked page and its preview image to improve the outgoing email with:

• A better title.
• Excerpt text.
• A short summary.
• An inline preview image.

How Your Data Is Used

SendMoi uses this information only to provide its core features:

• Sign you in with Google.
• Send email through the Gmail API on your behalf.
• Remember your default and recent recipients.
• Queue emails offline and retry them later.
• Enrich shared links before sending when metadata is available.
• If you opt in, send limited anonymous usage analytics to help improve the app.

SendMoi does not use your data for advertising, profiling, or sale to third parties. Anonymous usage analytics are off by default and are sent only if you turn that setting on.

Where Data Is Stored

SendMoi stores data locally on your device, including:

• Gmail session information used to keep you signed in.
• Your saved default and recent recipients.
• Any queued emails waiting to be sent.
• Your analytics preference and, if analytics is enabled, an app-generated anonymous analytics identifier.

This local storage may be kept in standard app storage, the system keychain, and shared app container storage used by the SendMoi Share Extension.

What Is Sent Off Your Device

SendMoi does not run its own backend service. When network requests happen, they are sent directly from your device to the services needed for the feature you are using:

• Google authentication endpoints, to sign you in and refresh your Gmail session.
• Gmail API endpoints, to send email through your Gmail account.
• The websites you share, when SendMoi fetches page metadata or preview images to improve the outgoing email.
• Google Analytics collection endpoints, if you opt in to anonymous usage analytics.

If summary generation is available on your device through Apple system frameworks, SendMoi may use those on-device capabilities to create a short article summary before sending. SendMoi does not send article text to a SendMoi-operated server for summarization.

If you enable analytics, the app may send an app-generated anonymous identifier, app version, and limited usage events such as app launches, app activity, Gmail connection, onboarding completion, and successful sends. SendMoi does not include Gmail message bodies, recipient lists, OAuth tokens, or shared content in those analytics events.

Third Parties

SendMoi relies on third-party services only where necessary to provide the app:

• Google, for authentication and Gmail delivery.
• Google Analytics, if you enable anonymous usage analytics.
• The websites whose links you choose to share, for metadata and preview retrieval.
• Apple system frameworks and platform services used to run the app and its Share Extension.

Those services operate under their own privacy terms and policies.

Sharing, Transfer, And Disclosure Of Google User Data

SendMoi does not sell Google user data.

SendMoi does not share, transfer, or disclose Google user data to third parties except in the limited situations described below:

• To Google, when your device communicates directly with Google authentication endpoints and Gmail API endpoints to sign you in, refresh your session, identify the connected account, and send email you requested.
• To the recipient you choose, when SendMoi sends an email from your Gmail account on your behalf.
• To the websites whose links you choose to share, when your device fetches page metadata or preview images needed to build the outgoing email.
• To Apple platform services used to run the app, the Share Extension, local storage, and on-device system capabilities.
• When required by law, regulation, legal process, or enforceable governmental request.
• When necessary to detect, prevent, or address fraud, security, or technical issues, or to protect the rights, property, or safety of users or the public.

SendMoi does not operate its own backend for Google user data processing. Google user data is handled on your device and sent directly from your device to Google services needed for the feature you use.

The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How Google User Data Is Protected

SendMoi uses the following protections for Google user data and other sensitive data:

• OAuth session data, including Gmail access and refresh tokens, is stored in the operating system keychain rather than in ordinary app preferences.
• Network requests to Google authentication endpoints, Gmail API endpoints, and OpenID user info endpoints are sent over HTTPS.
• Data stored on-device is kept inside the app sandbox or the app group container used by the SendMoi Share Extension.
• SendMoi does not send Google user data to a SendMoi-operated backend server for storage, processing, analytics, or advertising.
• Locally queued emails and recipient settings remain on the device unless and until you choose to send an email through your Gmail account.
• Metadata retrieval uses direct requests from your device and disables HTTP cookie handling in the app's metadata-fetching session.

No method of transmission or storage is perfectly secure, but SendMoi is designed to minimize the amount of Google user data it handles and to keep that data on-device wherever possible.

Your Choices

You can control your data in several ways:

• Sign out of Gmail from within SendMoi to remove the saved Gmail session used by the app.
• Delete queued emails from the app before they are sent.
• Change or clear the default recipient at any time.
• Turn anonymous usage analytics on or off at any time from within the app.
• Stop sharing links into SendMoi if you do not want page metadata to be fetched.

Children's Privacy

SendMoi is not directed to children under 13 and is not designed to knowingly collect personal information from children.

Changes To This Policy

This policy may be updated as SendMoi changes. The "Last updated" date at the top of this document reflects the latest revision.

Contact

For privacy questions, contact help@send.moi