Privacy policy

Effective 18 September 2026. Emailyst is made by Odibert Eid, trading as Odibert.

The short version

Your mail never leaves your Mac. Emailyst reads it from Apple Mail's database on your computer, judges it with the language model built into macOS, and moves messages inside your own mail account. No message, subject, sender, address or account name is ever sent to me or to anyone else. The app has no server that handles mail.

What the app does send, exactly

• Activating a licence key sends the key and a scrambled identifier of your Mac (a hash of its hardware id - not the id itself) to my licence server at api.odibert.com, which returns a signed licence. About once a day the app asks the server whether the licence is still valid, sending the same two things plus the licence's own reference number, which the server issued.
• A daily check-in, on by default and switchable off in Settings: the same scrambled machine identifier, whether the copy is free or paid, the app and macOS versions, the date the app was first opened, and two totals - scans run and messages filed. This is how I know how many copies exist and whether people keep using it. Nothing about your mail is included.
• The free allowance, from a free copy only, at launch and after each scan: the same scrambled machine identifier and, for each mail account it has sorted, a scrambled code and a number - how many of the free 500 have been used. The code is a hash of the account address mixed with the machine identifier; the address cannot be recovered from it, and the server never sees it. This is what keeps the free allowance at 500 across reinstalls. It cannot be switched off, because it is the allowance. A paid copy never sends it.
• Checking for updates fetches a small file from odibert.com describing the latest version. It carries no identifier.
• Crash reports are never sent automatically. If the app crashed, it offers to open an email to me containing the crash log; you read it and choose whether to send.
• Report a Problem / Suggest an Idea open an email in your mail app, pre-filled with the app version, macOS version, Mac model and licence tier. You send it or you don't.

Gmail

To move mail out of a Gmail inbox rather than only label it, Emailyst can connect to Google. If you allow it, Google issues the app a token that is stored in your Mac's Keychain and used only from your Mac to move the messages you chose. The token never goes to my server. You can disconnect at any time in Settings → Accounts, and revoke the app's access at myaccount.google.com/permissions. Emailyst's use of Google data is limited to moving mail at your request and complies with the Google API Services User Data Policy, including the Limited Use requirements.

Sync between your Macs

If you switch on sync, the app writes what it has already sorted, your rules and your scan history to a folder in your own iCloud Drive, so your other Macs can read it. That data travels through Apple's iCloud under your Apple account; it does not pass through any server of mine.

Buying

Payments are handled by Lemon Squeezy or PayPal; I do not see or store card details. I receive your email address and the transaction reference so a licence key can be issued and, if needed, refunded. The licence email is sent through Resend from [email protected]. I keep, per key: the email it was issued to, when, which Macs (as scrambled identifiers) have activated it, and its payment reference - for as long as the licence exists, so that support and refunds work.

The website

odibert.com uses GoatCounter for visit counts: pages, referrers, country and browser type. It sets no cookies and stores nothing that identifies you. Buttons on the site count clicks the same way.

What I never do

• Read, store or transmit the contents of your mail.
• Sell or share any data with anyone. There is no advertising and no data business.
• Delete mail. The app only moves messages, and every move can be reversed.

Your rights

You can ask me what I hold about you (it is the key record described above), have it corrected, or have it deleted - which also ends the licence. Email [email protected]. Switching off the daily check-in stops that data being sent; records already held are kept only as long as they are useful for counting copies and are not tied to a name.

Changes

If this policy changes, the date at the top changes with it, and any change that widens what is collected will be announced in the app's update notes first.

Contact

[email protected]