Email Alert privacy policy
Effective date: 29 July 2026
What stays on your iPhone
Email Alert connects directly from your iPhone to the email provider you choose. Mailbox passwords, app passwords, and provider OAuth tokens are stored using the iOS Keychain and are not uploaded to Email Alert's AWS service. The app checks message headers and matching metadata rather than downloading full message bodies or attachments for cloud processing.
Data used by the app
To show recent email and evaluate alerts, Email Alert processes mailbox addresses, sender and recipient addresses, sender names, subjects, dates, folders, attachment presence, and the alert or VIP settings that matched. Free-plan data is stored locally on the device unless you choose a Premium cloud feature.
Premium account and cloud sync
When you sign in to Premium, the AWS service stores your Email Alert account email, an account identifier, an app account token, registered device identifiers and push tokens, app version, background-refresh preferences, subscription status, and verified App Store transaction identifiers and dates.
If you enable cloud sync, AWS also stores your account display details, watched folders, alert rules, VIP and ignored-sender configuration, preferences, and the message metadata shown in synced alert and notification history. This can include email addresses, sender names, subjects, dates, short summaries, and mail-provider links. Email Alert does not sync mailbox passwords, provider OAuth tokens, full message bodies, or attachment contents.
Why data is used
Data is used only to provide account sign-in, subscription entitlement, configuration sync, web access, device refresh nudges, account export and deletion, service security, diagnostics, and operational monitoring. Email Alert does not sell personal data, show third-party advertising, or use this data to track you across other companies' apps or websites.
Processors and security
Amazon Web Services provides identity, API, database, queue, logging, monitoring, and push-job infrastructure. Apple provides StoreKit subscription processing and the Apple Push Notification service. Cloud requests use encrypted HTTPS connections, protected API routes require signed Amazon Cognito tokens, and stored AWS data uses service-managed encryption.
Retention and your choices
Local records follow the retention settings you choose in the app. Cloud account and synced configuration data is kept while your Email Alert account is active. You can prepare a machine-readable export or delete the cloud account from the Premium screen. Deletion removes the Cognito account, synced configuration, and registered devices. Verified transaction records may be retained in de-identified form for entitlement reconciliation and fraud prevention.
You can stop cloud processing by signing out, disable notifications or Background App Refresh in iOS Settings, and remove local account data in the app. For a privacy question or rights request, email hello@emailalert.app.
Changes
This policy may be updated as Email Alert develops. Material changes will be dated on this page before they apply to a public App Store release.