MailFai privacy policy

MailFai is a mail app from Tizfai Technologies AB (org. no. 559284-7379), Sweden. It shows the mail in your own mailboxes, on the web at mailfai.com and in the phone app. This page says what MailFai keeps, what leaves it, and how to delete it. Tizfai Technologies AB is responsible for this data; questions go to kamal@tizfai.com.

What MailFai keeps

• How to reach your mailboxes: each mailbox's address, its server names, and its password, app password or Microsoft token, encrypted. MailFai needs them to read and send your mail.
• A copy of your mail: a cache of your messages, their files and small pictures of those files, so that lists and search are fast. Your mail itself stays on your mail servers, and what you change in MailFai is written back there.
• What you make in MailFai: your settings, contacts (also the people you write to), labels, rules, templates, saved searches, reminders and drafts.
• Sign-ins and devices: your sign-ins, which browser or phone each is from (its kind, model and system version, and the app's version), and the internet address it last used.
• Notifications: when you turn them on, the phone's push token and model, or your browser's push subscription.
• A MailFai address, if you make one: your recovery email, encrypted, when you accepted the terms, and when it was last used. Its mailbox is on Tizfai's mail server, like any mail at a provider.
• A plan, if you buy one: which plan, until when, and the number Stripe knows you by. MailFai never sees your card.

The app on your phone asks for nothing else. It sees a file or photo only when you choose one to attach, and the lock with Face ID or a fingerprint stays on the phone: MailFai never gets them.

What MailFai does with it

It runs your mail for you and nothing else: it shows, searches and sends your mail, notifies you, and keeps your sign-in safe. MailFai has no ads, no tracking and no analytics. Your data is not sold or shared for marketing. The legal ground is that you asked for this service (GDPR article 6.1 b), and for keeping it secure our legitimate interest (article 6.1 f).

What leaves MailFai

• Your own mail servers get what MailFai reads and sends, as from any mail app.
• Apple and Google, for notifications on a phone: a new mail's notification goes through Apple Push Notification service to an iPhone and through Google Firebase Cloud Messaging to an Android phone. Settings → Notifications decides what it carries: the sender and the subject (the usual), also the message's first line, the sender alone, or with New mail only no sender, subject or text at all. With several accounts it also says which of your addresses the mail is for, and it always carries MailFai's own reference numbers, so that a tap opens the right conversation.
• Your browser's maker, for notifications in a browser: they pass through its push service (Google, Mozilla, Apple or Microsoft), encrypted so that only your browser can read them.
• Pictures in mail load through MailFai when you choose to show them, so that the sender does not see your internet address.
• Stripe, if you buy a plan: Stripe Payments Europe takes your payment and sends the receipt; it gets your address, your card and your country.
• A leak check, when you choose a password for a MailFai address: MailFai asks Have I Been Pwned whether it has leaked, sending only the first five characters of a hash of it, which cannot give the password away.

Nobody else gets your data.

Where it is

MailFai runs on Tizfai's server at Hetzner in Falkenstein, Germany, beside the mail server. Encrypted backups of your account details, contacts and drafts (not the copy of your mail) are made every hour onto Tizfai's own storage, and are removed after 24 months at the most.

How long it stays

As long as you use MailFai. A browser's sign-in ends after 30 days (14 without use), the app's after 90 days (30 without use). Files in the cache go after 90 days without use. Removing an account under Settings → Accounts removes its copy of the mail.

Delete your data

You can delete everything yourself, at any time: Settings → Accounts → Delete my MailFai data, in the app or on the web. What is deleted, and what stays.

Your rights

You may ask what MailFai keeps about you, have it corrected or deleted, and get a copy (Settings → Export gives you your mail, settings and contacts). Write to kamal@tizfai.com. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection, IMY.

Changes

When this policy changes, this page says so, with the date at the top.