Privacy Policy

Last updated: August 29, 2026

1. Overview

Mango Pop is a Gmail client that reads, organizes, and helps you respond to your email. This policy explains what information we collect, how we use it, and the choices you have.

2. Information we collect

  • Account information: your Google account email address and profile information provided through Google OAuth.
  • Mail data: message headers, bodies, attachment metadata, labels, and thread information from the Gmail accounts you connect.
  • Tokens: OAuth access and refresh tokens needed to sync with Gmail. Refresh tokens are encrypted before storage.
  • Preferences: stream rules, standing instructions, snooze settings, notification choices, and other settings you configure.
  • Optional notification data: web push subscription tokens or Pushover user keys if you enable alerts.

3. How we use your information

We use your information only to operate and improve the service:

  • Sync, display, and organize your Gmail messages and threads.
  • Classify mail into streams and identify tasks, receipts, and shipments.
  • Draft replies and summaries using an AI model when you request them.
  • Send notifications you explicitly enable.
  • Fix bugs and improve performance.

4. AI processing

When you use features like summaries, drafting, classification, or the assistant, we send relevant message content to Anthropic's API. We do not allow Anthropic to use your data to train its models, and prompts are processed only to return a result to you.

5. Who we share data with

We share the minimum necessary data with the following services:

  • Google: to read and send mail through the Gmail API.
  • Anthropic: to power AI drafting, summaries, and classification.
  • Pushover: only if you opt in to Pushover notifications.
  • Infrastructure providers: our backend and database services operate on Lovable Cloud / Supabase.

We do not sell your data or share it for advertising purposes.

6. Data retention

Your messages are cached so the app can work quickly. When you disconnect a Gmail account, we delete the cached messages, threads, and tokens associated with that account. Some system logs may be retained for a short period for debugging and security.

7. Your rights

You can:

  • Disconnect Gmail accounts and delete cached data at any time.
  • Request deletion of your entire account and associated data.
  • Revoke Mango Pop's access in your Google Account settings.

To request deletion, visit Data Deletion or contact us.

8. Security

All traffic is encrypted with TLS. Refresh tokens are encrypted at rest. Each user's data is isolated through row-level security policies in the database. See Security for more detail.

9. Children

Mango Pop is not directed to children under 13, and we do not knowingly collect data from children.

10. Changes to this policy

We may update this policy as the service changes. We will post the new policy here with an updated date.

11. Contact us

Questions about privacy or data practices can be sent to hello@mail.mangopop.email.