ArchivePrivacy Policy
The short version
Archive has no account, and no server of ours sits between you and your email. The app connects straight from your iPhone to your email service over an encrypted connection.
What it reads, and what it works out from that, stays on your iPhone. We never see your emails or your app password. Archive sends us nothing about how you use it.
If you pay, Apple takes the payment and tells our server about the purchase. That record carries a code made from the mailbox address, never the address itself.
Who we are
Archive is made and published by Çağlayan Özgün Kasap, a developer in Türkiye (“we”, “us”). We are responsible, as data controller, for the personal data described in this policy, except where we say that another company decides. You can reach us at support@stratanaut.com.
What Archive reads from your mailbox
To show you which emails can go, Archive reads these from your email service, over an encrypted connection:
- the header lines of each email: who it is from, who it went to (To and Cc), its date and subject, whether it came from a mailing list and how to unsubscribe from it, its format, and which earlier emails it answers;
- whether each email is read, answered or flagged, and on Gmail, its labels;
- header lines from your Sent folder, to tell the people you write back and forth with from everyone else.
It fetches the first lines of an email (up to 4 KB) only while that email is on screen, and the whole email (up to 300 KB) only when you open it. Both are shown to you and not saved. Archive opens your mailbox without changing it, so nothing is marked as read.
What stays on your iPhone
In Archive’s own storage:
- the header lines it read, and what it worked out for each email: whether it can go, and why;
- your answers to its questions;
- a small model, worked out on your iPhone from your answers and from how each sender sends;
- a record of each clean-up: its date, how many emails moved and how many were skipped;
- your list of mailboxes and their server settings.
In your iPhone’s keychain, on this device only:
- your app password;
- how many of its free emails each mailbox has used, stored with the mailbox address. It is kept there so that deleting and reinstalling Archive doesn’t start the free 100 over.
None of this is ever sent to us. We cannot see, restore or delete it for you. Archive’s own storage is included in your iPhone’s backups if you back up to iCloud or a computer, under your own Apple account; keychain items kept on this device only are not restored to another iPhone.
Removing a mailbox in Archive deletes its app password and what Archive saved from it on this iPhone; the count of free emails stays. Deleting Archive deletes its own storage from your iPhone. iOS may keep keychain items, such as the count of free emails, after an app is deleted.
Your email service
Archive talks to your email service directly from your iPhone. The service receives your iPhone’s IP address, your address and app password to sign you in, and Archive’s requests: to read header lines and emails as described above, and to move the emails you choose into its trash. Your email service handles these under its own terms and privacy policy, as its own controller: Google for Gmail, Apple for iCloud Mail, Yahoo for Yahoo Mail and AOL, Yandex, or whoever runs the email server you typed in.
“How do I get an app password?” opens your email service’s page in Safari, and only when you tap it.
Purchases
Looking is free, and so are the first 100 emails you move from each mailbox. If you pay to open a mailbox:
- Apple takes the payment, as an independent controller under its own privacy policy. We never see your payment details, your name or your Apple Account.
- So that the purchase opens the mailbox it was made for, on this iPhone or your next one, Archive gives Apple a code made from the mailbox address with SHA-256. Apple receives the code, not the address, and the code cannot be turned back into the address. Anyone who knows the address can work out the same code, though, so we treat the code and these records as personal data.
- Apple notifies our server of the purchase and of later changes, such as a refund: the product, price, currency, dates, Apple’s transaction numbers and the code. The server keeps each notification as Apple sent it.
We use these records to see what each version of the app sells and what is refunded, to improve the app, and to answer your questions about a purchase. The app itself sends our server nothing; the notifications come from Apple’s server.
Who runs the server? The server that receives Apple’s purchase notifications is run for us by Opsida Teknoloji, as our processor; it keeps the records to give us the purchase figures. The server runs in Vercel Inc.’s Frankfurt region, and the records are stored in a Supabase Pte. Ltd. database, on Amazon Web Services servers in Frankfurt.
How long we keep them. As long as we need them to compare how one version of the app sells with the next. Requests to the server also appear in Vercel’s service logs, for the period Vercel sets.
If you email us
When you write to us, we receive your email address, your message and anything you attach. We use them only to answer you and to fix what you report. Cloudflare forwards mail sent to support@stratanaut.com to our mailbox at Google’s Gmail and keeps no mailbox itself. We use Gmail under Google’s standard terms, so Google handles those messages under its own privacy policy. We keep messages while we deal with them and then for no more than two years, unless the law requires us to keep them longer.
Beta testing
If you test Archive with Apple’s TestFlight, Apple passes on the feedback you choose to send us: your comments, screenshots and crash details. If you joined through a public TestFlight link, we don’t see your name, and we see your email address only if you type it into your feedback; if we invited you by email, we see your email address. We use feedback only to improve the app and keep it on the same terms as email.
Apple
You download Archive from Apple, under Apple’s privacy policy. If you turn on Share With App Developers in Settings › Privacy & Security › Analytics & Improvements, Apple also shares crash reports and usage statistics with us, without your identity.
This website
archive.stratanaut.com sets no cookies, runs no analytics and loads nothing from other companies. It is hosted by Vercel, which processes the technical details every visit sends, such as your IP address and browser type, to deliver the pages and keep the service secure.
What we do not do
- No account or sign-in with us.
- No server of ours between you and your email.
- No ads.
- No analytics or crash-reporting software from another company.
- No access to your location, contacts, photos, camera or microphone.
- Archive never empties your trash and never deletes an email for good.
- We do not sell or rent your personal data.
Legal bases
If you are in the European Economic Area, the United Kingdom or Switzerland, we rely on these legal bases under Article 6(1) of the GDPR:
- Purchase records
- Our legitimate interest in knowing what the app sells and what is refunded, in improving it, and in answering questions about purchases, point (f).
- Answering your email
- Providing the app and the support you ask for, point (b), and our legitimate interest in fixing problems, point (f).
- TestFlight feedback and this website
- Our legitimate interest in testing the app and in delivering and securing the site, point (f).
- Privacy requests and legal claims
- Our legal obligations, point (c).
Where data is processed
We work from Türkiye, and so does Opsida Teknoloji, which runs the purchase server for us. Purchase records are stored in Frankfurt, Germany. Apple, Google, Cloudflare and Vercel are based in the United States and Supabase in Singapore, and they may process data in those countries and others. Your email service processes your data where it works: Google, Apple and Yahoo are based in the United States, and Yandex outside Türkiye.
Your rights
Depending on where you live, you can ask us for a copy of your personal data, and ask us to correct or delete it, to restrict or stop using it, or to give it to you in a portable format. You can also complain to your data protection authority.
In practice we hold very little about you: your emails, if you wrote to us, and purchase records that carry a code instead of your address. To have us find your purchase records, send us the mailbox address; we work out its code and look them up. We cannot see what Archive reads or saves on your iPhone: to delete it, remove the mailbox in Archive or delete the app. Your email service answers requests about what it holds.
To make a request, email support@stratanaut.com. We reply within one month at the latest. If you live in Türkiye, your rights under Law No. 6698 (KVKK) and how to apply are set out in our KVKK Aydınlatma Metni, in Turkish.
Children
Archive is not directed at children under 13, and we do not knowingly collect personal data from them. If you think a child under 13 has sent us personal data, tell us and we will delete it.
Changes
If this policy changes, the updated version will be posted here with a new version number and date. If a change affects what data the app handles, we will also say so in the App Store release notes.
Contact
Questions about privacy? Email support@stratanaut.com.