← QInbox

Privacy Policy

Last updated: July 2026

QInbox is an email triage app that analyzes your inbox to surface what needs your attention and quietly handle the rest. This policy explains what data QInbox accesses, where it goes, and what stays entirely on your device.

The short version

Your email content is analyzed on your iPhone, using on-device AI. QInbox does not run servers that read, store, or transmit your message content. The only server-side component QInbox operates — a push-delivery relay, available to paid subscribers only — never sees message subjects, bodies, or senders; it only ever learns that a mailbox changed.

What QInbox accesses

When you connect Gmail or Outlook, QInbox requests permission to:

• Read your recent messages, so on-device AI can classify them.
• Mark messages as read, so your provider's unread count reflects what QInbox has already surfaced or quietly handled on your behalf.
• Send a reply on your behalf, but only when you explicitly compose and choose to send one from within the app — QInbox never sends anything without that direct action.

QInbox never requests permission to delete your email, change account settings, or access anything beyond your mailbox.

Where your data is stored

Analyzed messages, the AI's classification decisions, and any reply drafts are stored locally on your device using Apple's on-device data store. QInbox does not upload this data to any server it operates. You can delete this local data at any time from Settings.

Your Gmail/Outlook sign-in tokens are stored in your device's Keychain, protected by iOS. For free-tier use, these tokens never leave your device.

The optional push-delivery relay (paid subscribers only)

QInbox's free tier checks your inbox periodically in the background. Subscribers to the optional "Reliable Notifications" tier get near-instant push alerts instead, via a small relay service QInbox operates on Google Cloud. This relay:

• Registers a mailbox-change subscription with Gmail on your behalf, using your Gmail refresh token — stored server-side only for the duration of an active subscription.
• Receives a notification containing only your email address and a Gmail historyId (an opaque change marker) — never a subject, sender, or message body.
• Forwards a silent push notification to your device, which then runs the same on-device analysis as a normal refresh — the relay never performs any analysis itself and never sees the result.

If you cancel your subscription or disconnect your account, QInbox stops the mailbox subscription and deletes the corresponding server-side record, including your refresh token and device push token.

Third-party services

QInbox integrates with the following third parties, each governed by their own privacy policy:

• Google (Gmail API, sign-in) — Google Privacy Policy
• Microsoft (Outlook/Microsoft Graph, sign-in) — Microsoft Privacy Statement
• Apple (App Store subscriptions, push notifications, on-device AI) — Apple Privacy Policy

Your controls

From Settings, you can disconnect your email account (revoking QInbox's access and deleting locally stored data), delete locally stored analysis data on demand, and manage or cancel your subscription through Apple's standard subscription management.

Changes to this policy

If this policy changes in a way that affects what data QInbox accesses or how it's used, the "Last updated" date above will change and, where required, you'll be asked to re-consent to any new permissions the next time you sign in.

Contact

Questions about this policy or your data can be sent to mclynn1229@yahoo.com.