The privacy is the design, not a setting.

What it refuses to do

• It does not send your mail anywhere except the model you chose, with your key.
• It does not collect analytics, telemetry or crash reports. None.
• It does not delete mail. Ever. Moving is reversible with one command.
• It does not hide its reasoning: every action can be opened to show the judgments behind it.
• It does not guess about what it could not read — an image it cannot see is reported as unread, not treated as empty.

Where your mail goes

The app reads your mail from your mail server and asks Jev about each message, using your own key. We are not in that path. Your app password lives in the macOS Keychain, and the licence is checked on your Mac with no server to phone home to. This website runs no scripts and loads nothing from anywhere else.

What it does not do yet, said plainly

• It does not run on your phone. The deciding happens on your Mac. If your phone shows the same mailbox, you see the result there.
• macOS only. No Windows or Linux, and not on the Mac App Store: its rules would take the architecture with them.
• No hosted version. If one ever exists it will be a separate product with its own promise and price, never a quiet change to this one.
• Thunderbird is the only mail program with an add-on so far.
• Not a team product, not a webmail replacement, and it does not write your replies. It does one job.