隐私政策Privacy Policy

Xinyu Mail (the "App") is an aggregate mailbox client for iOS. The accounts you add communicate directly with your email provider via standard mail protocols (IMAP / SMTP) or official provider APIs (Microsoft Graph).

We operate no user registration or account system, and we run no data center that stores your mail content. Except for the "mail push service" described in Section 5, your mail data never passes through any server of ours.

• No third-party analytics, statistics, or advertising SDKs are embedded;
• No device identifiers are collected for cross-app tracking (the IDFA is not used for tracking);
• No browsing behavior, location, or contacts are collected;
• No commercial advertising is sent to you;
• No data is sold — we hold no user data that could be sold.

The following data is stored entirely inside the App's iOS sandbox and never leaves your device:

• Local database (SQLite): accounts, folders, message summaries, body cache, drafts, outbox queue, operation records, sync cursors, and the full-text search (FTS5) index;
• Keychain: OAuth tokens, provider auth codes and other mailbox credentials, all saved at the ThisDeviceOnly level — they do not sync with iCloud backups and are removed when you uninstall the App. The local database holds only references to credentials, never the credentials themselves;
• Preferences (UserDefaults): language, appearance, density and other settings.

Uninstalling the App erases all of the above. Mail stored on your email provider's servers is unaffected.

The auth codes, passwords, or OAuth tokens you provide are used solely to sign in to the mail provider servers you configure (e.g., QQ Mail, Outlook, 163, or custom IMAP/SMTP hosts) when you act — to fetch, send, sync, and manage folders.

Except as described in Section 5, credentials are never sent to the developer or any third party, and we do not use them to read your mail.

To deliver new mail promptly, the App offers an optional push channel (mail_push). Only for accounts on which you enable push, the App submits the following to our push service:

• the Apple APNs device token (used to deliver notifications to your device);
• that account's email address, provider type, and IMAP host / port / username;
• that account's credential (auth code or OAuth refresh token).

The push service uses this data to sign in to your mailbox and watch the inbox (INBOX) for new mail, delivering a silent push via Apple APNs that triggers the App to sync in the background. Push notifications themselves contain no message body. We never use this data for advertising, analytics, or any purpose unrelated to the service.

Your device periodically sends a lightweight keep-alive heartbeat to the push service to maintain the channel. When you remove an account or turn off push, the App asks the push service to delete the corresponding account registration.

If you prefer that no credential ever leaves your device, simply do not enable push on any account — the App's core reading, sending, and syncing work fully without it.

Notification delivery relies on Apple's APNs service, whose data handling is governed by Apple's privacy policy. Crash and performance diagnostics are collected locally via the system MetricKit framework, redacted before being written to disk and stored only on your device (the latest 20 entries). They are included only when you actively export diagnostics, and are never uploaded automatically.

App logging follows a whitelist mechanism: only local identifiers (such as local message IDs) are recorded — never mailbox addresses, subjects, bodies, or any credentials. Logs stay on your device for troubleshooting and can be cleared in the App at any time.

• Remove an account: clears its local data and asks the push service to delete the registration;
• "Erase all local mailbox data": wipes everything in the sandbox in one tap (a local action that never touches your servers);
• Storage management: clear caches by body / attachment granularity, or review on-device usage;
• Turn off push: disable the push channel per account at any time;
• Uninstall the App: all data listed in Section 3 is erased immediately.

Every operation on the mail itself — delete, move, archive — is initiated by you and acts directly on your own mail server.

The App is not marketed to children under 14, and we do not knowingly collect children's personal information. If you believe such a case exists, please contact us as described in Section 11.

For material changes, we will update the effective date on this page and surface a notice prominently in the App. Key points of prior versions will be retained in release notes.

For any question, request, or complaint about this policy or our data handling, contact us at: chenjiaju36@gmail.com复制Copy