PRIVACY / BETA 2.0

Your inbox is personal.

Draft is a Gmail client that runs on your Mac. This notice describes the current beta, last updated 13 October 2026. Publisher and privacy contact: alex@fallx.io.

What the app accesses

When you connect Gmail, Draft requests permission to read and modify mail. It uses that access to display conversations, send emails you approve, apply labels, change read or starred status, archive, and move messages to or from Trash. The beta does not permanently delete Gmail messages.

What stays on your Mac

Google access and refresh tokens, OAuth configuration and AI credentials are stored in macOS Keychain. Cached mail, local unsent drafts and duplicate-send records are encrypted with a key stored in Keychain. The app contains no publisher inbox snapshot or shared AI key.

Cached data is kept in your account’s Application Support folder. Clear cached mail in Settings removes mailbox caches while retaining saved drafts and send safeguards. Disconnecting a Gmail account removes its connection from Draft; previously cached mail and local drafts can remain on this Mac. Google access can also be revoked from your Google account’s third-party connections settings.

Where email travels

Mail requests go directly from your Mac to Google’s Gmail API. Draft does not route your inbox through a publisher server. The app does not load remote email images, tracking pixels or email scripts. Downloaded attachments are saved only to a location you select and are not automatically opened.

AI is optional and requested by you

AI features run only when you ask for a draft, summary or action suggestion. Draft sends the selected conversation’s text, your instructions, and any current draft needed for the request directly to your configured AI endpoint. It limits conversation text to a bounded context. It does not upload your whole mailbox or attachment contents to AI.

You can choose OpenAI, Anthropic, Gemini or an OpenAI-compatible service. A compatible model hosted on localhost keeps that request on this Mac; a local model’s own software may have separate network behavior. Remote connections require HTTPS. Providers can process and retain data under their own terms. API billing, retention and any training settings are your responsibility to review before connecting a service. OpenAI requests disable response storage using store: false; that is not a guarantee of zero provider retention.

Draft does not sell Gmail data or train general-purpose AI models. Cloud AI configurations for a public release must meet the applicable Google API Services User Data Policy and Gmail requirements. Public Google verification is still pending; this beta makes no claim that it has passed Google’s review.

You approve the outcome

Generated replies stay editable. Every email send requires a native approval showing the recipients and full body. AI mailbox suggestions are proposals only and need a separate approval. Email content cannot instruct Draft to run arbitrary tools, visit URLs or send mail.

Website and diagnostics

The Draft app has no advertising or analytics SDK and does not upload inbox diagnostics to the publisher. The public website is hosted separately; ordinary network request logs can be processed by its hosting provider. The website does not connect to your Gmail, collect AI keys or offer a hosted inbox. Demo emails shown on the site are fictional.

Questions and requests

Contact alex@fallx.io with privacy or support questions. Do not send passwords, API keys or full inbox exports to support. Changes to these data flows will be reflected here before a new release.