🔍

Privacy Policy

Last updated August 13, 2026

Email Scanner ("the app") lets you search your own email inbox using plain-English queries. This page explains what data the app accesses, how it's used, and how it's stored.

What we collect

When you sign in with Google, the app receives:

Your email address, name, and profile picture (from the standard openid, email, and profile scopes)
Read-only access to your Gmail messages (the gmail.readonly scope) — the app cannot send, delete, modify, or organize your email in any way

How your data is used

When you type a search, the app queries the Gmail API live and returns matching messages directly to your browser. Email content is never stored, logged, or written to a database — it exists only for the moment it takes to answer your search.

Nothing is sent to an AI or third-party service. Search ranking runs entirely in the app's own code.

What's stored

To keep you signed in and remember which mailboxes you've connected, we store:

Your email, name, and profile picture
Your OAuth access and refresh tokens, encrypted at rest with AES-256-GCM — even someone with direct database access cannot read them without the app's separate encryption key

Your sign-in session is a signed, HTTP-only cookie that expires after 7 days.

Sharing

We do not sell, rent, or share your data with advertisers, data brokers, or any other third party. Your data is only ever exchanged with Google's own APIs (to fetch mail on your behalf) and our database provider (Supabase), which stores your encrypted account record.

Your control over your data

Disconnect a mailbox at any time from within the app — this immediately and permanently deletes the stored account record and tokens for that mailbox.
Sign out to end your session.
Revoke access at any time from your Google Account permissions page, independent of the app.

Contact

Questions about this policy or your data can be sent to bill.jyang101@gmail.com.