Privacy Policy

Last updated: August 2026

1. Who we are

This privacy policy applies to PikuMail, a desktop email client for Windows, developed and published by Pikusoft.

2. Overview — local-first by design

PikuMail is a local, client-side email application. It connects directly to your email provider's servers (for example Gmail, iCloud, or mail.com) to read and send your email. Your emails, contacts, folders, and settings are stored on your own device. We do not operate any servers that store your email, and we do not collect, process, or even see your personal data on our behalf.

3. What data PikuMail processes

To function, PikuMail accesses the data you ask it to manage, directly from your email provider, using the permissions you grant (via OAuth or app passwords). This includes your email messages, contacts, folders, calendar events, notes and account settings. This data is processed only on your device and only to provide the email features you use.

4. Where your data is stored

Your mail and settings are stored locally on your own device, in your user profile folder (for example, %LOCALAPPDATA%\SuperMail). We do not store your data on any third-party servers. Your data remains under your control, in the location you choose.

5. Local encryption

PikuMail can protect the local database with encryption. You can set a master password that must be entered when the app starts, or enable automatic on-disk encryption using a key protected by Windows. When enabled, your cached mail, contacts, notes and calendar are stored in encrypted form on your device. Encryption keys never leave your device.

6. What we do NOT collect or do

7. Permissions & OAuth

When you connect an email account, you may grant access using OAuth (for example, Google or Apple). We request only the minimal permissions needed for a mail client (such as reading and sending email). We do not request access to data we do not need. Access tokens are stored locally on your device and are never transmitted to us.

8. Connections to third-party services

PikuMail connects to the email providers you add (Gmail, iCloud, mail.com and other IMAP/SMTP servers) so it can read and send your mail. Your use of those providers is governed by their own terms and privacy policies.

Dropbox (optional): if you choose to send large attachments via Dropbox, the selected file is uploaded to the Dropbox account you connect, and a share link is inserted into your email. We do not access those files ourselves.

9. Local AI and PGP

Local AI: voice dictation and AI-assisted editing use an offline speech model (Whisper) that runs entirely on your device; your audio and text never leave your computer.

PGP: if you use PGP encryption, your private keys and passphrases are created and stored locally, and encryption/decryption happens on your device.

10. Data you send when reporting a bug

If you use the bug report form, the details you type (description, category, severity, and your optional contact email) are sent by email to our support address. Please do not include sensitive content, passwords, or full message bodies in a bug report. This information is used only to investigate and fix the issue and is not used for marketing.

11. Data deletion and reset

You are always in control of your data. You can uninstall PikuMail, and you can delete all locally stored data (accounts, mail cache, notes, contacts, calendar and settings) using Settings → Security → Reset all local data, or by removing the application data folder manually. Data on your email provider's servers is unaffected and remains governed by your provider.

12. Your rights (GDPR)

Because your data stays on your own device and in your own accounts, you retain full control and can exercise your GDPR rights directly:

13. Children's privacy

PikuMail is not directed at children and does not knowingly collect data from children. If you believe a child has provided data, contact us and we will help you remove it.

14. Security

All connections to your email provider use HTTPS/TLS encryption. Local data can be encrypted as described above. Tokens are stored locally and are never transmitted to us.

15. International data transfers

Because PikuMail itself has no servers, the only international data transfer that can occur is between you and the email provider you choose, governed by that provider's policies and the protections they implement (for example, GDPR-compliant data processing agreements).

16. Changes to this policy

We may update this policy from time to time. The latest version will always be available at this page.

17. Contact

For privacy questions, contact us at: ideasequencer@gmail.com.