Privacy Policy
Yours, · Last updated 11 October 2026
This Privacy Policy describes how the Android email app Yours,
(Android package com.pserrer.mail) handles information.
In short: Yours, is an email app that talks directly to your email provider. There is no server of ours in between: we never receive your email, your password, your contacts or anything about how you use the app. There are no ads, no analytics and no tracking, and nothing is sold to anyone.
What stays on your phone
- Your email. Messages are fetched from your provider over IMAP and kept in a database on your phone so they open instantly and work offline. Mail you send goes from your phone to your provider over SMTP.
- Your passwords. Account passwords are kept in Android’s encrypted secure storage and are only ever sent to the mail servers of the account they belong to.
- Your settings, the senders you approved or blocked in the Screener, snoozes, rules and drafts.
- Your encryption keys, if you use OpenPGP or S/MIME. Private keys and their passphrases are kept in Android’s encrypted secure storage and never leave the phone unless you export one yourself. Encrypted messages are decrypted on the phone each time you open them; what they say is not stored and not added to search.
- Your phone contacts, only if you turn on “Use phone contacts”. They are read on the phone to let people you know straight into your inbox and are not sent anywhere.
- Your phone calendar, only if you turn on “Use phone calendar”. It is read on the phone to show what else you have on when an invitation arrives. If you also pick a calendar for accepted invitations, the app adds those events to it and removes them again if you decline; that calendar’s own account (for example Google) then syncs them as it does any event you create. Nothing from your calendar is sent anywhere by the app.
- The on-device assistant, only if you turn it on. Summaries, suggested replies, sender explanations and text improvements are produced by the model built into your phone (Gemini Nano, through Android AICore). The text it works on stays on the phone.
When the app talks to anyone else
Besides your own mail servers, the app makes network requests only in these cases:
- Setting up an account. To find your provider’s server settings, the app asks your email domain’s own servers (for example autoconfig.yourdomain.com), which can see your email address.
- Sender pictures, only if you turn on “Show real avatars” (off by default). The app looks up a picture for a sender on Gravatar (which receives a hash of the sender’s address), on the sender’s own website, and through a DNS lookup of the sender’s domain via Cloudflare’s DNS service.
- Images inside messages, only when you choose to load them for a message or a sender, or turn on “Load remote content”. The sender’s servers then see that the message was opened, from which IP address and with which device.
- Rating the app. After you have used the app for a while, it may ask Google Play to show its rating card. Google Play draws that card and receives any rating you leave; the app sends nothing itself and never learns whether or how you rated it.
- Unsubscribing. When you tap Unsubscribe, the app contacts the address the sender provided for that purpose.
- Looking up someone’s encryption key, only when you ask for it. The app asks the person’s own email domain whether it publishes an OpenPGP key for their address (Web Key Directory). That domain sees which address was looked up and your IP address.
- App updates. The app checks Expo’s update service (operated by 650 Industries, Inc.) for new versions. That request contains the app version, the platform and a random installation identifier, and the service sees your IP address. It contains nothing about your mail.
- Links you open, which open in your browser.
What you can choose to send us
Nothing reaches us unless you send it. Three places in the app prepare something for you to send, and each shows you exactly what it contains first:
- Reporting generated text. “Report” under anything the assistant wrote opens a draft email to playstore@serrer.de with that text and the app version. It does not include the message the text was generated from. It is sent from your own account, like any other email, only when you press Send.
- Feedback. “Send feedback” in Settings → About opens a draft email to playstore@serrer.de with the app version and nothing else. It is sent from your own account only when you press Send.
- Crash reports. If the app crashes, it can show a report of the error and the app version, which you can share however you like. It contains no email content.
If you email us, we use your message only to reply and to fix the problem, and delete it when it is no longer needed.
Permissions
- Internet, to reach your mail servers and the services above.
- Notifications, to tell you about new mail from approved senders, snoozed mail and follow-up reminders.
- Alarms, so snoozed mail and reminders arrive at the time you chose.
- Running in the background and an optional persistent connection, so new mail arrives while the app is closed.
- Contacts, only if you turn on “Use phone contacts” or add a sender to your contacts.
- Calendar, only if you turn on “Use phone calendar”.
Deleting your data
Removing an account in Settings deletes its mail, settings and password from the phone. Uninstalling the app deletes everything it stored. Your mail itself stays with your provider, as it always was.
Children
The app is not directed at children under 13.
Changes and contact
If this policy changes, the new version will be published here and in the app, with a new date.
Questions about privacy: playstore@serrer.de