Legal

KyMail Privacy Policy

Effective November 5, 2026

KyMail is the email app for Android made by KyPanel. This policy explains what KyMail does with your email and account data. In short: your email stays between your device and your email provider. KyPanel doesn't receive, read, store or sell it.

Where your data lives

KyMail connects directly from your device to the email servers of the accounts you add, using IMAP, POP3 and SMTP. Messages, attachments, contacts you've emailed, account settings and sign-in credentials are stored only on your device. Credentials and access tokens stay in the app's private storage and are sent only to the provider they belong to.

KyMail has no analytics, advertising or tracking, and doesn't send crash reports. KyPanel runs no server that your email passes through.

Google accounts

When you add a Gmail or Google Workspace account, you sign in on Google's own page and Google gives KyMail an access token for the scope https://mail.google.com/. KyMail uses that access only to do what you ask for in the app:

• Download and show your messages and folders
• Send the messages you write
• Move, archive, mark, delete or permanently delete messages when you choose to

The data KyMail gets from Google stays on your device. It isn't sent to KyPanel or to anyone else, isn't used for advertising, and isn't used to develop, improve or train artificial intelligence or machine learning models. No person at KyPanel can read it.

KyMail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove KyMail's access at any time at myaccount.google.com/permissions, or by removing the account from the app.

Microsoft accounts

Outlook, Hotmail and Microsoft 365 accounts work the same way: you sign in on Microsoft's page, and KyMail uses the access Microsoft grants only to read, organize and send your email on your device. You can remove KyMail's access at account.live.com/consent/Manage or, for work accounts, through your organization.

Sign in with KyPanel

If your email is hosted on a server that runs KyPanel, you can sign in with your hosting account. KyMail then talks to that server, which belongs to your hosting provider, to list your mailboxes and create a password for this device. KyMail keeps only that device password. It doesn't keep your hosting account password or any token for the hosting account.

Setting up an account

To find the right server settings when you add an account, KyMail looks up the domain of your email address (the part after @) in DNS, on your provider's own configuration addresses and in the public Thunderbird ISP database at autoconfig.thunderbird.net. Only the domain is sent, never your full address or password.

Images in messages

Messages may contain images hosted elsewhere. Loading them lets the sender's server see your IP address. You can choose in settings whether KyMail loads remote images.

Deleting your data

Removing an account from KyMail deletes its messages and credentials from your device. Uninstalling the app deletes everything it stored. Your email remains with your email provider.

Contact

Questions about this policy: open a ticket at my.kypanel.com or email support@kypanel.com.

Changes

If this policy changes in a meaningful way, we'll update the date above and say so in the app before the change takes effect.