Camel Mail

Privacy Policy

Effective 22 October 2026. This policy covers the Camel Mail apps for Linux, Windows, macOS and Android, the hosted Camel Mail account, and this website.

The short version

  • Your mail and calendars travel directly between your device and your mail provider, and are cached on your device only.
  • Your Google sign-in and all Gmail and Google Calendar data stay on your device. They never reach Camel Mail’s servers.
  • Our server keeps your Camel Mail account and your app settings, encrypted at rest, so your devices stay in step.
  • There are no ads and no tracking or analytics, and we never sell data.

Your Camel Mail account

When you create a Camel Mail account, our hosted service stores:

  • your email address;
  • a hash of your password, made with Argon2 (we never store the password itself);
  • your two-factor settings, if you turn two-factor sign-in on;
  • the list of devices and sessions signed in to your account;
  • your app settings: your mailbox list and server names, signatures, templates, preferences and calendar subscriptions.

Your app settings are encrypted at rest with keys the operator manages.

For IMAP mailboxes other than Google, the password or app password you enter is stored encrypted with your settings, so that your other devices can connect to that mailbox too. The same applies to Microsoft sign-ins. Google sign-ins are never stored on our servers, as the next section explains.

We use this information only to run your account: to sign you in, to keep your devices in step and to keep the service secure.

Google accounts: Gmail and Google Calendar

When you add a Google account, Camel Mail asks Google for these permissions:

  • https://mail.google.com/ to read, send and organise your mail over IMAP and SMTP;
  • https://www.googleapis.com/auth/calendar to see and edit your calendars;
  • openid and email to know which Google account you signed in with.

Your Google sign-in (the tokens Google issues to the app) and all Gmail and Google Calendar data stay on your device. They are never sent to, stored on or passed through Camel Mail’s servers. The app uses this data only to show you your mail and calendars and to do what you ask, such as sending a message, archiving a conversation or adding an event.

We don’t use Google data for advertising, we don’t sell it, we don’t let humans read it, and we don’t use it to train AI models.

If you turn on the optional AI assistant and ask it to work on a message, the text you choose to send goes from your device directly to the AI provider you configured, as described under The AI assistant.

Camel Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Camel Mail’s access to your Google account at any time at myaccount.google.com/permissions.

Microsoft and other mailboxes

When you sign in with Microsoft (Outlook.com, Hotmail, Live or Microsoft 365), your device connects directly to Microsoft for your mail and calendars. Your Microsoft sign-in is stored encrypted in your Camel Mail account so your other devices can connect too.

For any other mailbox, your device connects directly to the IMAP and SMTP servers you enter. CalDAV calendars and iCal links are also fetched directly by your device.

Mail and calendar data on your device

Mail content, including attachments, is downloaded from your provider to your device and cached locally on that device only. It is not copied to Camel Mail’s servers. When you remove a mailbox from the app, its local data is deleted.

The AI assistant

The AI assistant is off by default. If you turn it on with your own API key for an OpenAI- or Anthropic-compatible provider, the text you choose to send, such as a message you ask it to summarise, goes from your device directly to the AI provider you configured, and only when you ask. It does not pass through Camel Mail’s servers. That provider’s own terms and privacy policy apply to what you send it.

Email we send you

We send email to verify your account and to reset your password. These messages are sent through our e-mail delivery provider.

What we don’t do

  • We don’t show ads.
  • We don’t use tracking or analytics in the app or on this website. This website sets no cookies and loads nothing from other sites.
  • We don’t sell your data.

Deleting your data

  • You can remove a mailbox from the app at any time; its local data is deleted.
  • You can revoke Camel Mail’s access to your Google account at myaccount.google.com/permissions.
  • You can ask us to delete your Camel Mail account by writing to support@camelapp.si.

Security

The app talks to our service over encrypted connections. Account passwords are stored only as Argon2 hashes, and your app settings, including stored mailbox passwords and Microsoft sign-ins, are encrypted at rest.

Changes to this policy

If we change this policy, we will publish the new version on this page with a new effective date.

Contact

Camel Mail is responsible for the app and the hosted service. Questions or requests about your data: support@camelapp.si.