Privacy policy
1. Purpose and choices
OmniInbox organizes message notifications into a local searchable workflow inbox. Notification access and Gmail authorization are optional. Gmail is not needed to use the notification inbox.
2. Notifications
While notification access is enabled, Android can deliver eligible message notifications even when the app is not open. We process source app/package, notification identifiers, sender, title/preview, time, conversation identifiers and supported actions, subject to classification and inclusion/exclusion settings. We cannot recover private chat history. Notification records and workflow states remain until local deletion; Gmail cache expiry does not remove them.
3. Gmail authorization and data
The app processes the selected email address, message/thread IDs, sender/recipient, subject/body/time, read status and reply headers. Google account selection is distinct from permission to access mail. Granted Gmail authorization is needed to read, mark read and send explicitly composed replies. Attachments are not automatically downloaded; HTML is rendered as text without loading tracking images or running scripts.
4. Storage and retention
Notifications use app-private Room storage; preferences, selected Gmail address and last sync time use DataStore. There is no operator message backend. The app does not implement database encryption or a biometric app lock.
Gmail content/headers are persisted only when response directives allow it and device encryption plus a secure screen lock are detected, within the response's remaining lifetime and a maximum of 24 hours. Otherwise mailbox previews are session-only and may disappear when the process ends; opening a thread requests fresh Google data. Expired content is not presented again and is cleaned during use or the next launch/read. Minimal identifiers and existing workflow states are retained so pending tasks can be reloaded. Exact physical deletion while the app is stopped, and forensic unrecoverability, are not guaranteed.
Reply drafts are memory-only: preserved after failures but lost on process termination, disconnect or local clear. Uncertain delivery requires checking Gmail Sent before an explicit resend.
5. Transmission and credentials
Gmail authorization/read/mark-read/reply communicates with Google; explicit replies also go to intended recipients. Notification quick replies pass through the original app/service. The app does not claim that all processing stays offline. Gmail API traffic uses HTTPS. Google passwords are not entered into OmniInbox. Access tokens stay in memory, not Room, DataStore or app logs. Google Play services AuthorizationClient provides authorization; Google's SDK/services have their own authentication and network data practices.
6. Limited use and protection
No advertising, analytics or developer crash-reporting SDK is declared. No message/token logging, data sale, advertising targeting, credit assessment or general AI training is implemented. Google Workspace data is used for the user-facing features under Google's Limited Use restrictions. App data is excluded from configured backup/device-transfer domains; behavior of every manufacturer is not guaranteed.
7. Deletion and disconnection
Local clear removes local inbox/cache/workflow/settings/account association/drafts/live actions, not original email/chat or already sent messages. New notifications can be stored if access remains enabled; disable notification access in Android settings to stop ingestion.
Gmail disconnect removes local Gmail records/cache/account/sync state/drafts, clears memory tokens and attempts Google token-cache removal. Local deletion works even if the provider operation fails offline. This does not delete the Google account or revoke all Google grants. Use your Google account's third-party apps/services controls for revocation.
8. Operator/contact
Operator / 운영자: 서상훈
Privacy contact / 개인정보 문의: totoro200018@gmail.com
Effective date / 시행일: 2026-10-13
Policy URL: https://omniinbox-policy.pages.dev/privacy-en.html
Google Limited Use
Our use of information received from Google Workspace APIs follows the Google user data policy and its Limited Use requirements. Google Workspace user data policy