Privacy Policy

Effective November 3, 2026

Flint Mail is a service of Iron Forge Apps LLC ("we", "us"). It brings the email addresses you own into one inbox. This policy explains what we collect, why, who we share it with, and the choices you have. Contact us at [email protected].

What we collect

• Your account. Your name and email address, and an identifier from Firebase Authentication (Google), which handles sign-in. If you sign in with Google, we receive your name, email address and profile picture from Google, and nothing else.
• The mailboxes you connect. The address, the mail server settings, and the password or app password you enter, or, if you connect with Google or Microsoft, the sign-in tokens they issue. Passwords and tokens are encrypted at rest (AES-256-GCM) and used only to connect to your mail server on your behalf.
• Your email. To show, search and sort your mail, we keep a copy of the messages in your connected mailboxes: senders, recipients, subjects, message text and attachment details. Attachments are fetched from your mail server when you open them.
• Contacts you import. If you import a contacts file (vCard or CSV), the names, email addresses and other details in it, kept with your account so Flint can fill in and recognize them. You can remove them in the app at any time.
• What you create. Labels, splits, Autopilot rules, snippets, signatures, notes about clients, reminders and settings. Files you attach to an email are held on our server until it is sent, then deleted (or after 30 days if it never is).
• Talking to Flint. If you use it, your phone's or browser's own speech recognition (usually from Google, Apple or Microsoft) turns what you say into text. We receive only that text, as part of what you asked for. We never record or keep audio.
• Activity records. When each email reached us and whether it notified you, a 30-day log of what Flint AI read, and what Autopilot did with each email, so you can see them in the app.
• What you do often. While Learn usage patterns is on, which it is until you turn it off in Settings, we note your own actions in Flint, such as which senders you archive, move, label or reply to, for up to 90 days, so Flint can offer to do them for you; nothing runs until you say yes. It doesn't look at what your emails say, and turning it off deletes these notes. If Flint AI is on, a short summary of what you usually do with a sender is sent to Anthropic with that sender's new mail, to sort it.
• Connections you choose to add. If you connect calendars, Cloudflare, Firebase or Stripe for context, the links, keys and data you allow (for example calendar events, site status or a customer's recent payments). Calendar events from your phone are shared only if you turn that on. These are only read, except when you tap a button such as Retry deploy, Reset link or Refund and confirm it; each of those is recorded, with its result, in your Connections.
• AI assistants you connect. If you make a token for Claude, ChatGPT or another assistant, we keep only a fingerprint of it and when it was last used. An assistant using it can search and read your mail and leave draft replies for you to send; it never sends mail, and it can't see inboxes you keep away from Flint AI. What it reads is then handled under that assistant's own terms. You can revoke a token at any time.
• Your devices. A push notification token, the platform (Android, iOS or web) and your time zone, so notifications and dates work. The app also keeps your recent lists and the conversations you opened on the device itself, so they can be read and searched offline; signing out deletes them.
• Teams. If someone invites you to a team, we email the address they gave us, saying who invited you and to which team, and keep it until you answer or they cancel. If you join a team, its members see your name, email address and which shared conversations you have, the notes you leave, and when you have a shared conversation open. If you share an inbox with a team, its members can read and answer that inbox's mail until you stop sharing it.
• Moving between providers. If you copy one connected inbox into another, we keep a record of which messages were copied (by their Message-ID) so the copy can resume without duplicates. Nothing is removed from the original inbox.
• Payments. If you subscribe to Flint Pro, Stripe (or Apple or Google, if you subscribe in their stores) processes the payment. We receive a customer and subscription reference and the subscription status, never your full card number.
• Reports and messages. If you report something Flint AI wrote, or contact support, what you send us.

We do not use advertising, analytics or tracking tools, we do not collect your location, and the app never reads your phone's address book.

If the app crashes, it sends our server a short technical report: what failed in the code, the app version and the kind of device. Reports never include your mail, and are deleted after 30 days. You can turn them off in Settings, under Privacy and account.

How we use it

• To provide the service: connect to your mailboxes, sync, send and organize your mail, and notify you about new mail.
• To run Flint AI, only if you are on Flint Pro and have allowed it (see below).
• To bill your subscription, keep the service secure, prevent abuse, and help you when you contact us.

Where the GDPR or UK GDPR applies, our legal bases are: performing our contract with you (the service itself), your consent (Flint AI and Write like me, which you can withdraw at any time), our legitimate interests (security and preventing abuse), and legal obligations (for example, tax records).

Flint AI and Anthropic

Flint AI (summaries, sorting, drafted replies, the daily brief and similar features) is part of Flint Pro and runs only after you allow it in the app. When it is on, the text of the emails it works on is sent to Anthropic, PBC, which provides the Claude models, to produce the result. If you turn on Write like me, the text you wrote in emails you have sent is also used to describe your writing style; that description is stored with your account and deleted when you turn the feature off. Autopilot sends the rules you write to Anthropic to turn them into fixed conditions, and, only for rules that need judgement or write replies, the emails those rules apply to. Rules that only file, label or forward by sender, subject or category run on our server without Flint AI. If you turn on Night Shift, Flint AI reads the mail waiting on you before your day starts, to write draft replies and follow-ups; they stay in the app until you send or skip them. Decide sends the emails you open it on to Anthropic to say what each one asks and suggest replies; nothing is sent until you tap Send. Listen reads your brief aloud with your device's own voice, on your device. When Flint AI reads a conversation it may remember up to three lasting facts about the other person (such as their role or how they like to work, never sensitive details) to make later replies better; you can see and remove each one, and add your own note. Money Radar finds renewals, bills and invoices in your mail by rules, on our server, without Flint AI. To let search find files by what they say, the text of PDFs attached to your recent mail is read and stored with your mail on our server; it is deleted with the email.

Anthropic processes this data as our service provider. Under its commercial terms, Anthropic does not train its models on it. You can turn Flint AI off at any time in Settings, or keep any one inbox away from it entirely; nothing more is sent to Anthropic after that.

Who we share it with

We do not sell your personal information, and we do not share it for advertising. We share it only with service providers that help us run Flint Mail, under contracts that limit their use of it:

• Google Firebase: sign-in, push notifications and app update downloads.
• Anthropic: Flint AI, only when you have allowed it.
• Stripe: subscription payments made outside the app stores.
• Our hosting provider, which runs our servers.
• Gravatar: to show a picture someone has set on their email address, our server asks Gravatar whether there is one, using a hash of that sender's address. It never receives your mail, your address or anything about you.

We connect to your own mail providers on your instructions. We may disclose information if the law requires it, to protect people's safety, or as part of a merger or acquisition, in which case this policy continues to apply.

Google user data

Sign in with Google gives us only your basic profile (name, email address and picture), used to create and secure your account. Flint Mail uses your Gmail only if you connect it: with an app password you create, or with Continue with Google, which asks for access to your Gmail (the https://mail.google.com/ scope) so Flint Mail can read, organize and send your mail over IMAP and SMTP, as the app does for any inbox. Continue with Microsoft does the same for Outlook and Microsoft 365. Revoking access in your Google or Microsoft account, or removing the inbox, stops it and deletes the stored tokens. Flint Mail's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How long we keep it

• Your data is kept while your account is open. Removing a connected mailbox deletes its stored password and its copy of the mail.
• Deleting your account deletes your data from our database straight away; copies in backups are deleted within 30 days.
• Reports about Flint AI are kept for up to 12 months. Billing records are kept as long as tax law requires.

Security

Data travels over encrypted connections (TLS), mailbox passwords are encrypted at rest, and access to our systems is restricted. No system is perfectly secure; if we learn of a breach that affects you, we will tell you as the law requires.

Your choices and rights

• Get a copy: Settings › Account and privacy › Download my data.
• Delete your account: Settings › Account and privacy › Delete my account, or see how to delete your account.
• Correct your name and settings in the app, or ask us.
• Withdraw consent for Flint AI or Write like me in Settings at any time.

Depending on where you live (for example the EU, UK, California and other US states), you may also have the right to object to or restrict processing, to data portability, and to complain to your local data protection authority. California residents have the right to know, delete and correct their personal information, and not to be discriminated against for using these rights; we do not sell or share personal information as those laws define it. To use any right, email [email protected]. We answer within 30 days and may need to confirm it's you.

Children

Flint Mail is not for children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect their information. If you believe a child has an account, contact us and we will delete it.

International transfers

We are based in the United States and process data there. Where the law requires, we rely on safeguards such as the European Commission's Standard Contractual Clauses for transfers.

Cookies and local storage

The web app stores only what it needs to work: your sign-in session and your preferences. We use no advertising or analytics cookies.

Changes

If we change this policy, we will update the date above and, for significant changes, tell you in the app or by email before they take effect.

Contact

Iron Forge Apps LLC, Florida, United States. [email protected]