FlowMail privacy, in one line: FlowMail is an email client that runs on your device. Your mail is fetched directly from your mail provider to your Mac. red8.io operates no servers that receive, store, or process your messages — we never see your mail, and there is no account to create with us.
Last updated: 5 October 2026
What FlowMail stores, and where
- Your messages are stored on your device, so you can read mail offline. They are not uploaded anywhere by FlowMail.
- Your credentials — sign-in tokens and app passwords — are held in the macOS Keychain, the system’s encrypted credential store. They are never transmitted to red8.io.
- Removing an account in FlowMail deletes its stored credentials and cached mail from the device.
Signing in with Microsoft
When you connect an Outlook, Hotmail, or Microsoft 365 mailbox, FlowMail uses Microsoft’s own sign-in page. Your password is typed into Microsoft, never into FlowMail, and Microsoft returns a token that lets the app reach your mailbox. FlowMail asks for these permissions and nothing else:
- IMAP.AccessAsUser.All — read and organise the mail in your mailbox, which is what an email client does.
- SMTP.Send — send the messages you write.
- offline_access — stay signed in, so you are not asked for your password every time.
- openid, profile, email — show you which account is connected.
The connection is between your device and Microsoft. You can withdraw it at any time — for a personal account at account.microsoft.com/privacy/app-access, and for a work or school account at myapplications.microsoft.com — or simply by removing the account in FlowMail.
Other mail providers
For other providers, FlowMail connects over IMAP and SMTP using the credentials you supply. To spare you looking up server settings, it may ask your provider’s public autoconfiguration service which servers to use; that request carries your email domain, not your password.
AI features run on your device
FlowMail’s assistance and workflow features use a language model that runs locally on your device. Message content is not sent to OpenAI, Anthropic, Google, or any other AI service — FlowMail has no such integration. You choose which model to use, and it is downloaded once from a public model repository into FlowMail’s own storage; that request carries nothing about you, and the model runs offline thereafter.
If you choose to configure an MCP server yourself, data you send through it goes to the server you configured. That destination is yours, not ours. Similarly, a workflow you build may search the web or fetch a page; those requests go to the service or address concerned, and only when a workflow you created uses such a step.
Message verification
To tell which organisation owns a domain, FlowMail uses the Public Suffix List, a public list of domain endings such as co.uk and github.io. A copy ships with the app, and FlowMail downloads the current one from publicsuffix.org at most once a day. That request carries nothing about you or your mail. You can turn it off in Settings › Message Verification; FlowMail then keeps using the copy it already has.
No tracking
FlowMail contains no analytics, advertising, or crash-reporting service. We do not build a profile of you, and we have nothing to sell or share, because we hold nothing. Purchases and subscriptions are handled by Apple under Apple’s privacy policy; we receive only anonymous sales reports.
Contact
Questions about this policy: privacy@red8.io.